Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e7359e89-ddf6-3a20-b197-5786a950a942.roa
File:                     e7359e89-ddf6-3a20-b197-5786a950a942.roa (raw, json)
Hash identifier:          9KLYXrWk7AnnJJtjWuHSCUA59L3znNiIM558A0FHQKY=
Subject key identifier:   F0:A4:B2:59:B7:38:1D:36:C5:C4:05:86:FC:33:06:A7:3B:00:D3:8F
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7C5104F581147880DCA2380
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e7359e89-ddf6-3a20-b197-5786a950a942.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:10:4f:58:11:47:88:0d:ca:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5785bba7-85ab-4841-945f-9e355f4106f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:91:49:bd:ea:9d:49:05:0d:cf:a6:31:b3:
                    e7:ad:e0:3e:82:de:50:85:42:65:08:4c:0e:59:ed:
                    69:e0:ff:4d:f3:b4:95:f9:95:6a:c2:81:a2:3c:a6:
                    db:f0:b3:54:30:eb:21:c9:c9:e3:51:6e:c7:1f:74:
                    c5:a1:32:6f:f6:88:03:7d:d3:93:96:37:45:be:a0:
                    bc:d0:c0:bb:75:d4:7b:cd:85:95:26:61:6b:4e:6c:
                    f2:cc:6b:cf:2b:9b:24:e6:70:ee:80:0e:a6:f6:67:
                    c6:fd:69:c9:87:84:90:a1:36:42:fa:e0:eb:7e:1f:
                    3f:70:f6:98:59:33:2e:3b:02:f9:d2:7f:a8:b0:6c:
                    ee:38:7f:39:80:e9:c4:3d:fe:9b:c9:d7:91:d7:9c:
                    1e:07:f9:01:29:f3:40:85:e5:e8:40:3c:a5:ba:32:
                    3a:5f:2b:56:8b:45:a2:d4:c0:9a:b9:21:45:7f:a5:
                    ef:c1:af:1a:92:ac:12:56:5e:91:ed:ed:0a:c8:73:
                    d6:98:01:3e:e6:b9:bc:78:2a:4c:2f:fa:2c:d4:7f:
                    08:a3:86:cd:9f:0c:e4:d8:db:45:c5:b3:7b:08:a1:
                    eb:1e:aa:8a:da:50:e2:56:ec:da:c4:85:01:8a:3c:
                    1c:ef:78:45:a5:ed:05:d3:dd:68:55:26:1b:f6:e2:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A4:B2:59:B7:38:1D:36:C5:C4:05:86:FC:33:06:A7:3B:00:D3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e7359e89-ddf6-3a20-b197-5786a950a942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:26:c2:5c:f7:b0:59:91:be:6c:0c:e0:a6:7f:57:7b:aa:
         ad:dc:78:06:a8:5b:c5:67:08:de:35:43:f3:e0:62:d0:3d:ad:
         0f:ce:98:8a:10:5d:c1:21:47:ec:3a:0f:e6:48:5a:46:73:98:
         39:c3:4f:2f:0a:85:66:73:c1:bf:74:c7:9c:70:f9:80:c1:33:
         aa:5b:d0:83:f0:6e:22:fe:de:76:53:42:6c:80:d2:1a:3c:f5:
         fd:1f:b5:96:35:31:2a:1d:00:1f:20:de:29:d8:1c:a0:a3:fb:
         40:0d:4f:4c:8c:be:11:35:ee:63:d2:2b:e1:96:98:7a:d7:af:
         e8:8b:69:2d:2d:8a:e7:92:0b:8a:ce:0b:45:6e:4c:ef:3e:89:
         9e:4f:61:01:77:a0:f8:e4:82:fc:d3:f1:ff:bf:fb:22:3f:bd:
         04:af:2d:16:aa:81:da:3a:fc:fb:49:32:dc:c3:6a:8e:1d:3f:
         11:af:7a:1d:51:43:ef:2c:aa:48:72:30:c9:ea:b8:49:1e:a1:
         cb:f3:1f:ef:bb:40:7e:4d:54:8f:09:57:2b:56:9f:d1:4e:5f:
         0a:e8:16:bf:14:aa:a1:21:be:20:0a:db:4b:cf:8a:00:67:c2:
         09:ec:6b:e3:82:3d:f6:86:a3:ca:4b:1c:9e:d8:82:5e:2a:1c:
         d3:4b:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----