Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b0fb815a-c3b3-3d26-822a-11f2447966df.roa
File:                     b0fb815a-c3b3-3d26-822a-11f2447966df.roa (raw, json)
Hash identifier:          54MNDojxUM22wjNi35VF9Inu25/t1M5AOKb2Om3qUz0=
Subject key identifier:   BA:99:35:26:99:67:2B:57:25:AB:89:8E:71:72:14:13:67:42:25:85
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D6F6BA771D209EE6F6A76880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b0fb815a-c3b3-3d26-822a-11f2447966df.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        64.114.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d6:f6:ba:77:1d:20:9e:e6:f6:a7:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=65878713-b77c-4d50-a808-a5302dfdc6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:dd:a7:0a:23:e2:ca:64:cf:bf:10:36:43:
                    90:8e:5f:e9:cb:48:9f:8a:ea:2b:92:0f:6a:cd:b7:
                    72:e1:42:0f:ac:7d:6b:48:7e:fe:17:eb:2c:7f:6b:
                    97:6c:aa:18:7d:fe:55:fb:f7:87:c0:72:ef:4d:16:
                    ce:99:66:8f:43:28:83:75:d7:87:44:63:80:7f:7f:
                    f8:1c:13:e7:de:ed:8d:be:47:fb:bb:99:ed:84:24:
                    f2:3e:76:11:a0:f9:98:54:42:78:f5:cb:09:dd:eb:
                    5f:4e:8c:72:f9:c2:dd:1a:de:a8:47:76:94:cc:56:
                    58:c0:58:d1:8b:f9:a6:bc:15:d3:e1:f7:b2:ea:ed:
                    f7:b3:63:54:cc:8e:ce:f2:04:84:ec:84:2e:a9:bc:
                    bf:b9:7d:d7:51:ca:93:e1:02:86:2c:f8:55:c1:cd:
                    38:cf:34:a6:b7:88:3b:d9:35:f3:72:3d:eb:a4:1b:
                    51:9c:b8:e9:97:46:62:c8:5e:ee:20:1c:ca:19:19:
                    fd:04:3e:77:ac:62:87:02:c4:d4:c1:64:bb:7d:12:
                    3f:5e:98:ea:90:ba:13:08:83:d2:98:80:b0:cd:c1:
                    58:5c:38:2e:a9:2a:7e:68:37:bc:bf:64:a5:9d:d9:
                    3a:df:4c:a3:e1:64:08:63:a1:ae:cb:24:ac:cd:29:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:35:26:99:67:2B:57:25:AB:89:8E:71:72:14:13:67:42:25:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b0fb815a-c3b3-3d26-822a-11f2447966df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ee:ca:23:cc:20:b8:de:98:af:56:bf:40:f1:5e:32:38:cd:
         0c:ca:12:24:db:90:c7:20:ca:7e:9e:fd:f3:e5:b8:c2:59:f9:
         67:c2:55:a1:d9:e1:5f:67:eb:b5:74:0c:96:fa:a2:cf:65:6d:
         ea:6c:40:fd:7c:35:b6:56:09:73:5b:9a:26:be:fe:2d:20:a8:
         04:79:9e:16:5f:77:25:0f:aa:7a:df:98:e5:53:d1:20:e3:cb:
         12:b9:ca:26:62:4a:55:7d:e9:a7:14:d9:b2:b6:d2:1e:62:84:
         bb:87:ca:74:24:b6:f7:b1:aa:6f:f0:a5:5f:02:16:11:b5:ac:
         8a:d2:1d:68:7f:76:02:c5:c5:e6:29:3f:06:9c:0b:ec:b8:08:
         88:7a:96:23:24:f7:38:ae:fd:b7:b3:4c:9e:f2:7c:cb:19:93:
         a5:99:93:36:e1:73:a3:a6:df:23:aa:1b:07:af:aa:20:6a:66:
         aa:ba:26:d2:3a:70:c6:57:d6:c1:f3:6d:74:c2:18:d9:d8:7c:
         77:15:cf:54:f6:3e:ea:bd:2c:70:46:58:ce:7f:be:31:e6:a7:
         c4:33:bc:77:04:bf:da:ff:b8:9a:25:63:40:8a:7d:87:ac:39:
         ff:58:58:dc:a9:87:05:2a:ef:1e:47:7c:b6:49:a4:96:de:4c:
         0e:d0:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----