Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ae5a0c04-020a-331d-85bb-581568cebd6d.roa
File:                     ae5a0c04-020a-331d-85bb-581568cebd6d.roa (raw, json)
Hash identifier:          YvPa5sCjByplWM9YS7qn0VaGxeRpjT5U5nfhkM81VpA=
Subject key identifier:   6A:B6:70:12:06:95:E1:FB:B7:5A:63:55:40:5F:F0:4B:CF:99:5F:0A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7C2742DC256A2B4EDCA98C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ae5a0c04-020a-331d-85bb-581568cebd6d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:74:2d:c2:56:a2:b4:ed:ca:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=80d0742f-587c-4ba5-bf02-c0d195467dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:60:c7:95:08:ec:e0:c6:75:d7:1e:05:97:
                    8a:6e:ac:35:4c:0e:56:3c:e7:f9:cc:d9:27:88:d2:
                    89:73:96:2d:cc:2f:b4:eb:db:ac:9e:a5:30:44:ab:
                    66:a4:9d:53:25:e1:60:f4:9f:d3:cd:bb:6c:3a:6b:
                    36:f6:aa:81:a6:dc:50:f0:36:41:14:30:d1:95:91:
                    8c:00:40:00:f7:6f:f5:a0:20:bc:8d:64:c2:53:9d:
                    77:43:f6:07:5a:0d:99:96:c7:34:40:bd:24:c8:be:
                    78:f7:e9:f1:99:64:e1:01:45:c3:e1:c6:11:f3:92:
                    e6:70:02:3f:d6:20:40:72:19:bc:89:af:dd:80:85:
                    c0:d1:74:b7:5f:8a:30:cf:d2:b8:7d:46:79:b8:fd:
                    e6:68:e0:56:86:70:18:bc:b1:1d:f0:17:aa:00:0e:
                    58:1e:3c:b7:73:3a:2d:a6:5a:a1:90:3e:09:2b:99:
                    2c:96:49:bc:e9:80:76:2e:ed:4e:16:08:c8:6f:4f:
                    36:c3:7d:cf:aa:04:8b:fd:d6:0d:ed:22:79:01:ea:
                    63:e9:45:d1:23:42:98:8d:2f:59:75:1d:30:d6:67:
                    19:10:2b:a3:49:e0:e8:ce:27:27:64:9d:e1:5c:1e:
                    c4:61:79:96:0e:93:22:be:3d:57:a8:39:d4:71:00:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:70:12:06:95:E1:FB:B7:5A:63:55:40:5F:F0:4B:CF:99:5F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ae5a0c04-020a-331d-85bb-581568cebd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:38:09:ae:24:7a:10:dc:66:ee:89:11:10:e5:70:37:c1:
         24:a5:6d:6d:dd:ee:99:18:9d:3e:d2:49:aa:67:3f:02:5c:6c:
         04:6d:75:38:1d:48:e0:bb:fd:e3:8c:d3:c2:19:29:b2:c8:b4:
         08:1b:df:2e:26:22:6e:72:13:0f:ad:3b:c4:f7:04:e3:a4:1f:
         11:37:6f:a6:17:49:2c:dd:62:88:94:96:92:18:29:3b:5b:ac:
         39:56:d7:f8:51:f8:44:9d:48:11:ef:af:f7:0a:b5:72:6f:1f:
         9c:1a:d7:df:b8:6a:47:b4:23:85:02:08:f7:9c:fa:29:8a:7e:
         e0:5a:20:47:7b:c4:0f:09:b6:45:e7:97:dc:f6:ad:27:5a:62:
         f0:ac:f2:58:88:85:69:4c:8b:90:f8:06:03:76:7e:6d:e6:4e:
         f7:ca:6e:76:55:4e:62:d3:11:90:d8:25:59:b3:0b:4f:48:6b:
         e8:0e:23:29:2f:e0:97:36:ee:0f:11:ca:dc:b8:a2:2a:05:01:
         0f:70:c3:a8:d5:4e:a7:2c:64:9c:8d:f6:f4:8b:b1:c8:ae:3a:
         3b:e6:58:96:72:3f:f7:6f:4d:ad:45:55:42:2f:38:88:53:91:
         31:a7:a1:a9:e0:c1:ec:d3:a1:c9:97:60:a1:ff:f5:c6:e5:3b:
         06:74:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----