Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/48a41944-9f97-3cf4-98d0-922f6e2cd348.roa
File:                     48a41944-9f97-3cf4-98d0-922f6e2cd348.roa (raw, json)
Hash identifier:          FwsfE30Av8wrlPIaHaMJzvt4Q7vnbyhSyfXNz3ARHyo=
Subject key identifier:   62:48:63:84:9D:8E:39:89:95:9C:BD:A6:DA:04:01:E0:A9:3F:F8:CC
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328583B911027A248E00BF542992340
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/48a41944-9f97-3cf4-98d0-922f6e2cd348.roa
Signing time:             Thu 09 Sep 2021 04:00:00 +0000
ROA not before:           Thu 09 Sep 2021 04:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     212799
IP address blocks:        74.119.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:91:10:27:a2:48:e0:0b:f5:42:99:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep  9 04:00:00 2021 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=ac43dc34-e324-47c4-b9c3-32f91f4ad64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:1c:e4:c2:01:44:25:fc:3b:52:de:7f:76:
                    06:76:23:6e:2d:c5:52:7e:9f:2d:db:6d:ee:61:24:
                    da:14:b6:58:be:2e:04:3a:43:5c:0b:0b:14:69:28:
                    de:c7:e5:f8:4f:f8:0a:6b:62:d2:dd:a8:1a:c9:ba:
                    d6:0f:12:a3:5d:36:5d:dd:08:31:d3:53:82:d8:09:
                    ff:c3:29:b7:0e:07:f8:02:b3:97:d3:d8:27:8e:6b:
                    49:60:4f:58:0e:d9:8d:0e:0d:4b:a6:c5:20:1c:82:
                    f2:4d:1c:c5:c3:7d:f7:c5:c2:a3:ae:f7:0d:05:94:
                    e1:e4:fa:36:db:e5:86:c6:22:9e:cc:b1:0c:06:ff:
                    df:1d:03:66:23:02:0e:dd:c2:5b:b1:29:65:eb:05:
                    4a:55:85:c1:50:c8:68:ec:52:9b:53:3b:97:d5:77:
                    d6:ea:81:0f:5b:c9:ac:ad:3f:a8:93:5a:4e:84:0d:
                    c8:d2:1a:ff:c2:d7:3f:2f:ce:73:31:8e:40:5e:a0:
                    1d:29:b9:65:4d:17:be:ad:37:3d:be:61:05:c3:fc:
                    dd:cd:07:ce:1a:d4:bc:b8:1a:c0:bd:2d:4a:15:2e:
                    90:d5:76:8c:ba:1b:99:fc:0c:00:ff:b8:5f:d2:5d:
                    bf:c5:2a:0c:85:c2:e7:d0:23:92:69:46:55:b2:13:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:63:84:9D:8E:39:89:95:9C:BD:A6:DA:04:01:E0:A9:3F:F8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/48a41944-9f97-3cf4-98d0-922f6e2cd348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:6d:38:24:83:e5:e4:7a:b9:5c:af:6b:bc:3d:b7:98:c6:
         b3:69:ce:fc:d6:9d:5e:fb:38:22:b7:0c:9f:2f:f7:4b:b5:26:
         ef:14:24:07:93:4f:b4:70:cc:e4:3e:7c:86:88:f9:8f:27:1c:
         12:fd:de:19:99:e4:55:d9:58:1a:24:5e:e6:1c:68:ad:32:05:
         ee:bf:cf:9d:cc:ba:49:97:17:63:d8:e9:3c:86:a1:e2:57:27:
         54:3c:2b:f0:23:65:ae:a2:89:25:c1:99:af:19:46:9b:54:46:
         7b:81:61:ce:21:3d:b3:73:6c:ef:65:5f:ee:ed:5b:3a:5c:cd:
         e6:b8:2c:cc:dd:7f:0b:d7:f2:f9:3c:b4:4d:5f:38:fe:96:48:
         0d:6a:84:b1:01:83:8a:b4:ac:57:5c:76:2e:2d:63:70:d3:a4:
         c5:91:b9:73:b0:a7:1a:42:20:ff:13:82:d4:90:a4:cd:84:6a:
         b2:d7:20:a6:be:c8:85:3a:bd:0a:1c:d8:26:1c:31:ef:6a:df:
         50:f3:24:57:26:92:83:3a:10:18:87:cf:c1:19:83:36:91:2b:
         db:5d:a8:56:fb:75:73:89:c2:99:2b:46:49:ae:16:7e:83:2a:
         b1:6d:67:c0:76:ed:dd:31:3a:c3:c9:02:d3:d3:5a:9e:72:1b:
         21:e3:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----