Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a1077e1-f3ce-3ff3-ab7a-92efbff07d09.roa
File:                     4a1077e1-f3ce-3ff3-ab7a-92efbff07d09.roa (raw, json)
Hash identifier:          c5j6BYlN13ewjTwFy+kdL09aMjwThz5OUVshi2EDHAg=
Subject key identifier:   B4:62:D8:08:06:BD:F4:6D:C7:93:85:E3:83:B1:EF:B2:63:B8:EB:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7D865C99BAD441B9849C700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a1077e1-f3ce-3ff3-ab7a-92efbff07d09.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        75.157.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:d8:65:c9:9b:ad:44:1b:98:49:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=ce3897ba-ee5e-4875-94e2-81c01913a7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:7a:9c:f5:c1:55:e9:f3:f3:ee:66:92:73:
                    19:86:17:0e:b0:c8:40:fa:47:2d:63:d9:03:0b:29:
                    5f:2d:a4:80:91:92:2d:12:b5:78:1f:ae:ae:c4:05:
                    19:38:78:44:31:2a:07:49:78:20:10:00:33:42:b2:
                    90:c2:9c:df:d9:88:69:b6:98:09:6e:a2:af:b5:b8:
                    86:c8:70:12:ae:4c:e8:c3:6c:77:39:90:45:aa:fe:
                    f2:b8:eb:9a:23:b9:3b:25:49:23:71:b9:14:89:c1:
                    8a:5c:b2:16:88:a8:da:c3:a5:65:51:fd:2f:0b:86:
                    61:e3:da:de:71:4d:81:44:a3:b6:9f:d5:69:5e:a8:
                    05:3c:75:4c:6f:a0:ea:2e:fb:e2:94:c5:1a:74:02:
                    ad:32:5d:f8:e2:09:92:c2:ad:2f:a9:36:a2:bd:b3:
                    db:71:11:e5:39:c7:bb:f8:66:84:ec:01:22:15:29:
                    c8:21:e2:9b:49:bc:7f:a5:06:cd:4a:19:9f:55:6c:
                    0a:2a:12:60:e1:bc:f1:93:13:e3:9a:03:20:2d:01:
                    75:1a:67:91:ba:aa:6f:08:89:ca:18:b9:f5:e6:8e:
                    41:55:d8:30:1d:db:7c:37:13:0f:e8:93:5e:ea:1b:
                    95:53:cd:74:9c:d6:ef:a2:06:29:ee:a8:fe:96:30:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:D8:08:06:BD:F4:6D:C7:93:85:E3:83:B1:EF:B2:63:B8:EB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4a1077e1-f3ce-3ff3-ab7a-92efbff07d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:61:6c:1d:45:3b:53:c6:4d:4c:8f:ae:af:8d:0f:79:be:d1:
         7a:5d:1d:d4:a1:12:5c:97:c2:5d:6f:9b:dd:47:61:e2:9b:bf:
         04:98:8c:a5:32:04:f9:9c:34:61:67:2a:3d:e4:96:dc:5a:c3:
         17:39:ea:71:a6:a2:0e:9b:23:04:6a:ae:f3:f4:58:69:92:8c:
         7c:44:12:fe:e8:8f:65:08:30:22:48:fa:f2:8a:f6:5e:b7:9f:
         e4:72:d9:64:ff:7b:ee:84:2e:aa:67:69:e2:c5:16:ac:b3:c5:
         a9:cc:c9:57:9b:f3:ae:06:8b:39:1f:05:28:5e:33:30:70:f3:
         78:08:59:af:8e:be:14:dc:fc:ad:2b:12:02:01:57:b4:01:d3:
         fe:9b:05:62:81:9e:b8:a7:68:48:86:e1:1c:c9:62:85:1e:19:
         db:93:17:0e:e0:9d:48:eb:6a:a6:03:62:92:78:ed:cc:43:76:
         7f:10:b3:09:7c:fa:4e:7c:03:52:40:0f:cd:77:40:f6:03:70:
         59:8f:c3:ee:3d:7a:1e:08:11:2b:aa:ce:38:06:0e:c3:95:93:
         47:39:7e:f2:cd:70:22:60:52:4f:57:20:36:70:e0:bd:7a:0d:
         cf:65:7b:2e:e8:22:df:af:92:cf:51:2a:67:3e:f3:da:1f:64:
         38:7c:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----