Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0b444219-59f2-3448-a975-bc195e71820d.roa
File:                     0b444219-59f2-3448-a975-bc195e71820d.roa (raw, json)
Hash identifier:          t8GRSYiVJMnpj7aH620rPScOg0Hqu443cwnig9Q3IwA=
Subject key identifier:   85:C9:9F:6B:65:74:B8:6E:DC:22:5D:0A:BA:81:FC:13:87:1B:54:3B
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7BAA5C0AD17A83ED31F72C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0b444219-59f2-3448-a975-bc195e71820d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ba:a5:c0:ad:17:a8:3e:d3:1f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=314531c3-b96d-489b-8220-50bb4860dca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:0b:cf:88:7d:d7:cb:a2:35:a3:ec:36:ae:
                    49:6b:ae:ef:35:1b:ac:20:9e:40:f8:9b:85:2c:94:
                    84:2f:12:70:71:94:da:c0:d7:6e:22:2b:d2:22:a3:
                    94:d2:99:c3:c0:ee:cd:c2:3d:dc:d0:f1:81:3c:f4:
                    77:9a:d5:f1:93:7b:3c:75:75:08:f7:50:db:fb:f5:
                    f4:1c:b7:b2:94:ac:55:7a:92:bc:b4:39:4a:9b:9b:
                    b6:a7:64:29:92:32:15:72:13:48:f4:0e:62:28:dd:
                    6e:80:8a:d2:4d:00:e2:f1:5c:e1:c5:b9:11:ca:0b:
                    d5:ee:fa:36:cb:60:7f:ef:0b:38:e6:d4:de:88:45:
                    e8:06:59:a7:f5:ab:16:41:33:89:ab:6b:b7:52:2f:
                    f0:5e:d9:ad:bd:77:5a:cd:e0:87:71:a5:62:32:37:
                    47:16:b5:c3:4c:3f:cc:27:78:3b:f8:8e:7c:ac:51:
                    2d:39:f5:15:8c:4c:c0:bd:68:a1:9b:7a:b0:55:cb:
                    75:26:81:4a:2e:2e:93:0d:2b:fb:a3:89:7c:e6:ac:
                    f5:1a:4e:50:54:91:e2:60:8e:1b:fa:79:65:d9:4d:
                    c6:76:10:01:cd:0d:b1:c0:25:b7:40:93:27:af:2e:
                    19:82:a6:33:36:90:96:26:f9:76:de:5c:78:bf:29:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:9F:6B:65:74:B8:6E:DC:22:5D:0A:BA:81:FC:13:87:1B:54:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0b444219-59f2-3448-a975-bc195e71820d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:13:d2:70:f4:14:a5:49:dc:31:27:b1:0c:bf:29:ca:ba:
         97:a2:32:28:a8:0e:8b:d8:df:52:7f:a0:07:a2:e0:c6:99:53:
         56:a7:27:d2:a9:8d:5b:0f:57:96:85:20:ac:c7:c0:4f:6a:75:
         80:a7:23:f5:03:ed:62:bf:57:3d:1d:f4:c2:fd:de:11:e3:ad:
         50:e3:b2:06:b2:fe:43:34:57:c9:09:5c:46:4c:4a:c6:3e:41:
         8d:3d:76:97:4d:ba:0b:ba:a2:09:25:1c:cd:8c:0a:86:e0:25:
         05:1b:9e:6f:d1:14:a7:96:b5:40:e4:c3:c9:ea:1b:d3:fd:0f:
         3e:ac:ba:03:c9:69:2d:e2:f2:6d:c2:f3:4a:bb:75:f1:51:d7:
         56:8f:a9:08:76:ff:89:1b:4b:bb:be:47:b1:70:06:dc:45:1c:
         61:89:c6:ed:0f:ef:bc:23:7a:7a:05:47:e1:fa:49:9f:1b:4b:
         0f:8c:31:6d:b3:41:d6:ff:0d:1a:20:02:af:ed:7d:57:23:90:
         f6:2e:53:c8:b6:4e:44:81:18:dc:e3:c7:ba:08:b1:81:bd:ef:
         80:3f:7d:0b:7c:b1:90:19:3d:09:ac:60:96:18:28:94:c5:e8:
         11:85:c4:9f:67:5b:97:a2:32:11:7a:e7:db:7f:fe:85:51:32:
         b4:4b:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----