Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b53cd074-2819-3278-bb67-ec66bd43c99d.roa
File:                     b53cd074-2819-3278-bb67-ec66bd43c99d.roa (raw, json)
Hash identifier:          1DfzXMYzjG2ls8XpiNznEyabEySY+204I8mRrkemXHo=
Subject key identifier:   59:C8:BA:05:52:E9:11:A8:36:96:D0:78:07:E3:89:08:3D:0D:AE:4A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7BBD0D5FD4A87B093A42A80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b53cd074-2819-3278-bb67-ec66bd43c99d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:d0:d5:fd:4a:87:b0:93:a4:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=931ffb7b-9f76-4eea-b635-dd470fa2b9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:12:0a:fa:bd:39:f2:ad:c5:66:85:c5:88:92:
                    d3:0d:d8:dc:ab:af:5c:a8:45:d2:3c:ea:64:6e:5a:
                    b8:8a:62:e9:25:e3:7d:52:9e:05:cd:c9:91:f9:7b:
                    88:e4:12:26:3a:3f:69:83:81:ec:36:d9:16:b0:e2:
                    fb:cf:1c:4c:19:23:36:43:d4:26:a8:00:f4:3e:df:
                    10:49:a7:30:19:4c:cc:05:ad:6d:83:c2:7f:0a:54:
                    84:6d:c8:7e:63:f3:60:62:eb:d3:cc:19:35:0a:3e:
                    21:4b:a3:8f:9f:20:33:37:bd:47:a7:6a:01:58:f1:
                    60:bb:90:2d:62:6d:21:ee:6f:92:98:84:60:bc:50:
                    23:3a:90:45:e4:3c:fb:74:7e:6f:9f:1a:da:c0:7f:
                    b9:a3:fb:d7:90:41:3e:4a:6a:04:64:a4:7b:e9:e4:
                    d3:4f:07:35:28:a6:35:28:b4:8b:04:1e:00:1f:a9:
                    89:a2:a7:43:4a:fc:a9:59:a3:3d:db:7c:ad:0f:3d:
                    3e:d4:fb:1b:ae:16:95:f1:9e:e7:55:20:3c:54:dc:
                    38:f3:07:d7:bc:53:87:6d:58:4f:09:32:dc:12:63:
                    58:59:66:24:98:3d:3f:1b:8c:a2:33:bf:47:52:01:
                    98:36:a1:71:19:c7:99:2f:00:38:b3:c8:42:19:14:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:BA:05:52:E9:11:A8:36:96:D0:78:07:E3:89:08:3D:0D:AE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b53cd074-2819-3278-bb67-ec66bd43c99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:42:2d:ab:fa:36:c7:76:18:3f:3d:45:56:39:0d:07:f6:ed:
         8f:60:73:a4:a1:25:8d:e6:9f:03:d6:bd:81:03:cd:5d:13:d5:
         96:d1:ea:04:71:f5:ff:3d:42:d2:5c:28:c0:2e:61:52:86:b0:
         c3:c6:dd:49:d5:55:ba:bc:af:a8:f2:84:51:91:da:5e:ef:5a:
         8f:02:dd:ec:df:3e:17:09:12:e3:eb:6a:77:3d:cb:4f:c0:80:
         9f:75:b1:3a:2b:2d:fa:4a:0e:bb:0f:2b:0b:10:df:44:5e:46:
         39:d2:62:35:ed:89:41:4c:64:67:54:fa:93:af:ff:c9:cf:17:
         8f:04:2b:16:15:31:fc:93:83:c5:72:b1:3a:f4:f3:70:14:09:
         6e:42:3f:9a:5d:79:63:4e:44:93:e9:73:7d:74:f2:62:9f:31:
         66:6c:7c:a0:92:53:c9:da:99:53:49:f4:b7:2a:f4:30:51:b1:
         f3:16:87:f7:70:44:3d:fb:e1:7b:27:c8:80:53:4b:2c:ea:30:
         1d:c0:c9:51:a5:20:19:39:80:85:d6:07:b8:2d:ec:5b:fe:f0:
         b1:41:de:9f:da:6b:5e:41:2a:39:4d:c3:90:59:d8:19:2b:23:
         ab:21:64:57:4b:b2:bd:b8:e4:fa:93:82:a0:52:42:f4:81:f9:
         55:03:8d:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnu9DV/UqHsJOkKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTMxZmZiN2ItOWY3Ni00ZWVhLWI2MzUtZGQ0NzBmYTJiOWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRIK+r058q3FZoXFiJLTDdjcq69cqEXSPOpk
blq4imLpJeN9Up4FzcmR+XuI5BImOj9pg4HsNtkWsOL7zxxMGSM2Q9QmqAD0Pt8Q
SacwGUzMBa1tg8J/ClSEbch+Y/NgYuvTzBk1Cj4hS6OPnyAzN71Hp2oBWPFgu5At
Ym0h7m+SmIRgvFAjOpBF5Dz7dH5vnxrawH+5o/vXkEE+SmoEZKR76eTTTwc1KKY1
KLSLBB4AH6mJoqdDSvypWaM923ytDz0+1PsbrhaV8Z7nVSA8VNw48wfXvFOHbVhP
CTLcEmNYWWYkmD0/G4yiM79HUgGYNqFxGceZLwA4s8hCGRRsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnIugVS6RGoNpbQeAfjiQg9Da5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYjUzY2QwNzQtMjgxOS0z
Mjc4LWJiNjctZWM2NmJkNDNjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFCLav6Nsd2GD89RVY5DQf27Y9gc6ShJY3mnwPWvYEDzV0T1ZbR6gRx
9f89QtJcKMAuYVKGsMPG3UnVVbq8r6jyhFGR2l7vWo8C3ezfPhcJEuPranc9y0/A
gJ91sTorLfpKDrsPKwsQ30ReRjnSYjXtiUFMZGdU+pOv/8nPF48EKxYVMfyTg8Vy
sTr083AUCW5CP5pdeWNORJPpc3108mKfMWZsfKCSU8namVNJ9Lcq9DBRsfMWh/dw
RD374XsnyIBTSyzqMB3AyVGlIBk5gIXWB7gt7Fv+8LFB3p/aa15BKjlNw5BZ2Bkr
I6shZFdLsr245PqTgqBSQvSB+VUDjVQ=
-----END CERTIFICATE-----