Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c3eaa5b-a439-3e55-879e-7db32d9023d4.roa
File:                     6c3eaa5b-a439-3e55-879e-7db32d9023d4.roa (raw, json)
Hash identifier:          qc0rgN+F2+0KXDQxjO/B0oloQZwB9qgkoKPV2AFzv+s=
Subject key identifier:   50:17:F6:9C:84:31:8F:F2:EE:86:6E:C6:99:35:F0:8D:7E:D2:E2:1F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A96C2CE63F45D645536100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c3eaa5b-a439-3e55-879e-7db32d9023d4.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.250.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a9:6c:2c:e6:3f:45:d6:45:53:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c5c75ccd-bb03-4cc1-8f8b-753d728c48af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:4d:5e:90:fc:b7:a9:97:09:55:ca:14:73:
                    d1:80:e4:dc:03:82:59:3e:61:77:7a:de:cb:d5:3b:
                    52:ac:94:e2:9f:6f:50:64:44:04:75:7d:ff:46:a5:
                    4e:02:4b:77:2a:31:20:63:b4:30:0c:75:82:c1:df:
                    b6:3a:18:88:19:e6:4d:c2:14:4d:52:c8:09:5d:d4:
                    dd:0b:3e:e1:64:5c:0c:32:fb:d7:23:5c:4d:d0:1c:
                    97:10:9c:9e:3b:f3:b8:9f:f3:b6:b5:03:8b:b3:2b:
                    c6:e0:d6:de:28:c1:39:66:04:b0:4f:86:9c:e6:8b:
                    05:d0:da:42:f7:1d:3f:5c:04:f6:9b:01:5a:e5:7d:
                    15:e2:1e:7d:10:8c:cf:58:d3:3f:8f:a5:b9:bc:80:
                    58:1e:17:08:98:83:da:a3:da:4b:1c:7e:97:42:0a:
                    bc:a1:fe:19:bb:f2:af:7c:ee:81:dc:d7:49:59:cc:
                    26:ff:64:6f:dc:7f:32:69:51:a6:47:b3:1b:79:e4:
                    14:48:9e:d8:63:df:54:cb:14:d4:9b:4b:b8:86:20:
                    ac:8f:02:75:7d:a4:cd:f2:a2:3c:87:35:f5:c7:59:
                    1b:a0:2b:b1:99:45:09:38:0a:56:ff:5b:28:91:60:
                    0f:23:4b:f0:b4:24:f7:6d:42:5d:6b:4d:e0:0b:13:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:F6:9C:84:31:8F:F2:EE:86:6E:C6:99:35:F0:8D:7E:D2:E2:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c3eaa5b-a439-3e55-879e-7db32d9023d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:07:a8:cc:d1:69:e2:86:f5:08:1f:f1:40:a9:1b:ab:f9:56:
         37:65:5a:3a:5d:0e:dc:76:45:ef:8d:b1:a1:d7:a4:96:10:b2:
         b7:ab:13:5d:37:fd:55:a4:64:83:05:f6:49:07:25:58:11:8c:
         15:9c:1b:78:d7:fa:b9:1e:08:5a:63:ba:90:3c:8a:3d:ea:df:
         cc:66:3a:d8:73:ab:e0:34:b1:f7:cb:99:80:fa:3b:ca:63:18:
         f8:2e:9b:98:1a:fa:82:10:b2:5d:a1:af:c8:15:ec:48:d0:ba:
         d2:fb:0f:27:34:9c:f2:95:71:7d:48:13:6d:67:c6:79:df:d9:
         b5:a4:cc:64:d2:c6:31:5f:b2:5c:59:09:6f:26:ce:b8:43:ee:
         24:c8:65:4f:d6:32:92:5d:b2:60:a9:8f:50:5e:cc:15:30:23:
         e4:21:e0:87:6f:dd:a3:76:7d:7a:c2:aa:49:bc:92:c4:10:5e:
         b4:2b:16:ec:dc:ef:36:59:47:ba:12:d7:df:83:94:fb:2b:0c:
         45:c9:46:9c:5a:99:09:98:e3:39:ce:e4:e7:56:89:38:4d:36:
         80:f5:99:e9:2a:26:f9:bc:8d:73:d2:04:7e:e3:4a:b5:f9:f1:
         b7:3a:e1:95:bd:7c:36:ef:e0:67:ec:15:e5:70:3e:91:3a:37:
         ff:4a:d1:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqWws5j9F1kVTYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzVjNzVjY2QtYmIwMy00Y2MxLThmOGItNzUzZDcyOGM0OGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydlNXpD8t6mXCVXKFHPRgOTcA4JZPmF3et7L
1TtSrJTin29QZEQEdX3/RqVOAkt3KjEgY7QwDHWCwd+2OhiIGeZNwhRNUsgJXdTd
Cz7hZFwMMvvXI1xN0ByXEJyeO/O4n/O2tQOLsyvG4NbeKME5ZgSwT4ac5osF0NpC
9x0/XAT2mwFa5X0V4h59EIzPWNM/j6W5vIBYHhcImIPao9pLHH6XQgq8of4Zu/Kv
fO6B3NdJWcwm/2Rv3H8yaVGmR7MbeeQUSJ7YY99UyxTUm0u4hiCsjwJ1faTN8qI8
hzX1x1kboCuxmUUJOApW/1sokWAPI0vwtCT3bUJda03gCxOPgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAX9pyEMY/y7oZuxpk18I1+0uIfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNmMzZWFhNWItYTQzOS0z
ZTU1LTg3OWUtN2RiMzJkOTAyM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAn6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEHqMzRaeKG9Qgf8UCpG6v5VjdlWjpdDtx2Re+NsaHXpJYQsrerE103
/VWkZIMF9kkHJVgRjBWcG3jX+rkeCFpjupA8ij3q38xmOthzq+A0sffLmYD6O8pj
GPgum5ga+oIQsl2hr8gV7EjQutL7Dyc0nPKVcX1IE21nxnnf2bWkzGTSxjFfslxZ
CW8mzrhD7iTIZU/WMpJdsmCpj1BezBUwI+Qh4Idv3aN2fXrCqkm8ksQQXrQrFuzc
7zZZR7oS19+DlPsrDEXJRpxamQmY4znO5OdWiThNNoD1mekqJvm8jXPSBH7jSrX5
8bc64ZW9fDbv4GfsFeVwPpE6N/9K0Q8=
-----END CERTIFICATE-----