Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/90cb567e-3f5f-3b4b-af6e-a9cb4486bf32.roa
File:                     90cb567e-3f5f-3b4b-af6e-a9cb4486bf32.roa (raw, json)
Hash identifier:          sWZR52ReWC4TH82LW49D8Je65QtP1wwv/DBXSqMyYuM=
Subject key identifier:   E1:08:E8:A0:2F:29:8B:49:5A:CE:96:0F:9B:15:BB:FC:7B:7C:03:CA
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B9678A1CD0C1286F6E2080
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/90cb567e-3f5f-3b4b-af6e-a9cb4486bf32.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:67:8a:1c:d0:c1:28:6f:6e:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=132edcd2-9b00-4e45-99bb-2f56f2a6f114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:a6:9f:36:75:8f:3c:ac:0b:35:5d:f1:04:
                    06:15:41:9c:c9:12:f9:56:c8:32:b6:a6:aa:18:7c:
                    39:1e:8f:82:a6:61:af:dc:ec:e6:03:8d:ba:a7:2d:
                    3e:41:4f:22:ca:c6:76:56:da:70:81:ea:6d:f6:d1:
                    02:e7:ad:23:28:f1:73:09:7e:2a:8b:f1:cb:6b:54:
                    fa:04:2a:a4:33:ad:42:da:e0:45:24:01:53:40:f3:
                    e8:df:7f:24:22:39:cb:da:a2:6c:19:d8:57:ab:aa:
                    23:d7:7d:8a:91:2b:5c:0f:90:a0:a3:42:3d:59:d3:
                    8b:94:18:28:a5:e7:0a:1a:b4:d2:d8:09:72:74:8e:
                    04:a9:29:a2:4a:ad:df:ab:f9:e9:5d:5e:24:7e:2b:
                    8f:55:29:88:93:15:04:62:39:89:90:2d:11:0d:48:
                    32:e8:e5:af:ff:4a:46:b0:84:b7:c0:38:28:3b:c6:
                    77:e8:b6:5b:b8:e8:cf:a3:35:a9:60:f7:5c:1b:2e:
                    21:39:52:4d:b4:89:42:05:86:1a:e8:87:d8:9d:b6:
                    b5:86:fe:c3:41:9e:e5:f9:ee:05:47:c4:74:f9:74:
                    c7:35:fd:e3:ca:d0:da:57:11:64:7d:45:1e:0c:fe:
                    6a:33:67:81:87:cd:db:f7:de:9f:31:36:11:47:39:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:08:E8:A0:2F:29:8B:49:5A:CE:96:0F:9B:15:BB:FC:7B:7C:03:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/90cb567e-3f5f-3b4b-af6e-a9cb4486bf32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:52:57:6b:fe:73:b6:ef:70:c7:1c:4e:08:10:c3:45:b8:
         72:7a:ce:0f:94:94:68:f2:71:45:6f:bd:06:89:d2:01:c6:9a:
         38:f1:8b:67:40:6c:37:0e:98:67:0d:4b:8f:b2:b4:90:25:5b:
         f9:6c:da:28:21:a4:7b:d7:41:2a:32:20:04:62:46:02:ed:62:
         5c:45:98:82:f0:93:2d:2b:48:39:69:4f:50:56:2d:a3:97:4a:
         e8:b2:7b:e9:2b:08:5b:6d:90:db:3c:26:57:4c:2a:7d:de:09:
         e0:60:ca:e7:20:08:ff:74:9c:68:47:6b:0d:4e:a4:8c:1d:3d:
         0b:f5:53:b4:d8:d6:a0:5a:d6:0e:3e:a8:eb:df:87:90:d4:70:
         8a:94:b3:fc:89:2e:c1:ec:34:9c:f0:96:fa:e1:ac:95:8e:57:
         31:45:95:b5:8c:06:97:d6:c3:1a:a2:8d:c9:0f:11:75:3b:34:
         4e:62:cd:1f:b1:4d:7f:32:bc:3f:93:01:c1:d1:20:7e:10:f7:
         ae:47:31:81:da:c1:62:d7:7c:0c:aa:56:8b:f9:ba:31:13:f1:
         f3:a7:da:b7:6c:64:e9:49:50:31:46:49:f8:54:81:58:2f:bf:
         19:30:42:c6:30:1b:e4:47:7e:c0:a5:c7:98:9b:67:b2:d0:43:
         f3:b5:60:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnuWeKHNDBKG9uIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MTMyZWRjZDItOWIwMC00ZTQ1LTk5YmItMmY1NmYyYTZmMTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ymnzZ1jzysCzVd8QQGFUGcyRL5Vsgytqaq
GHw5Ho+CpmGv3OzmA426py0+QU8iysZ2Vtpwgept9tEC560jKPFzCX4qi/HLa1T6
BCqkM61C2uBFJAFTQPPo338kIjnL2qJsGdhXq6oj132KkStcD5Cgo0I9WdOLlBgo
pecKGrTS2AlydI4EqSmiSq3fq/npXV4kfiuPVSmIkxUEYjmJkC0RDUgy6OWv/0pG
sIS3wDgoO8Z36LZbuOjPozWpYPdcGy4hOVJNtIlCBYYa6IfYnba1hv7DQZ7l+e4F
R8R0+XTHNf3jytDaVxFkfUUeDP5qM2eBh83b996fMTYRRznbSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOEI6KAvKYtJWs6WD5sVu/x7fAPKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTBjYjU2N2UtM2Y1Zi0z
YjRiLWFmNmUtYTljYjQ0ODZiZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjpUldr/nO273DHHE4IEMNFuHJ6zg+UlGjycUVvvQaJ0gHGmjjxi2dA
bDcOmGcNS4+ytJAlW/ls2ighpHvXQSoyIARiRgLtYlxFmILwky0rSDlpT1BWLaOX
Suiye+krCFttkNs8JldMKn3eCeBgyucgCP90nGhHaw1OpIwdPQv1U7TY1qBa1g4+
qOvfh5DUcIqUs/yJLsHsNJzwlvrhrJWOVzFFlbWMBpfWwxqijckPEXU7NE5izR+x
TX8yvD+TAcHRIH4Q965HMYHawWLXfAyqVov5ujET8fOn2rdsZOlJUDFGSfhUgVgv
vxkwQsYwG+RHfsClx5ibZ7LQQ/O1YNM=
-----END CERTIFICATE-----