Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f90eb74c-091e-37ba-b8f3-68131325fbff.roa
File:                     f90eb74c-091e-37ba-b8f3-68131325fbff.roa (raw, json)
Hash identifier:          vaYc9aq33MBLVFDipie/Olc8xsBSLSQHOixy2bnhjXw=
Subject key identifier:   99:CB:70:F2:F4:CE:4E:91:E6:1D:28:CA:87:BC:F2:04:CC:D5:1E:18
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7A2A92BA1F54FB854787F40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f90eb74c-091e-37ba-b8f3-68131325fbff.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.239.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:a9:2b:a1:f5:4f:b8:54:78:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=6e995b21-1b15-465a-a5fd-e02c0d894c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:92:98:f1:5f:c3:ec:e5:c2:76:f3:89:ab:
                    58:d3:f9:c2:52:46:03:78:8f:5b:bf:a9:88:1e:dc:
                    1a:5e:ba:2c:2a:d5:31:dd:d8:6e:61:fe:24:a1:ca:
                    36:53:cb:3a:bb:88:c7:e9:6f:d8:52:51:a8:75:1b:
                    fe:6e:53:33:7d:f3:15:bb:e6:b3:d9:85:ab:68:44:
                    62:30:43:2f:66:73:5f:79:21:40:53:a0:f1:40:f2:
                    1c:28:9d:0c:e8:5c:3d:f2:61:98:34:49:2b:8f:ea:
                    5c:b8:99:9d:de:b9:6a:a5:19:62:60:1e:d8:64:1a:
                    94:ad:c0:c3:03:b0:97:2d:dc:27:d9:90:80:ad:dc:
                    81:af:84:4c:a3:00:c8:39:51:3b:bb:75:d3:ad:d4:
                    90:f6:d4:07:03:d5:9c:c2:f0:3e:99:4d:44:b6:cd:
                    11:85:4d:29:f3:32:9b:2f:7e:36:e8:c0:6e:03:ca:
                    eb:e1:87:23:ab:23:e4:04:ab:13:96:cc:99:f3:aa:
                    3c:6f:8a:3f:17:e8:16:30:b3:3e:e5:fd:e9:ec:ca:
                    a0:ac:ec:63:7a:95:b6:34:2e:55:40:6a:37:3e:ca:
                    9f:bd:97:fa:83:62:fa:75:1d:58:df:92:89:2a:a7:
                    41:de:ba:f6:91:91:c9:69:dc:8b:57:1c:06:39:2d:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CB:70:F2:F4:CE:4E:91:E6:1D:28:CA:87:BC:F2:04:CC:D5:1E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f90eb74c-091e-37ba-b8f3-68131325fbff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:86:e3:9e:86:76:0e:ed:cb:17:6d:c6:de:98:d0:06:f5:50:
         2b:a4:5d:87:76:8b:21:1b:af:ea:89:0b:7b:40:ce:0e:f6:a6:
         e5:4d:fc:be:ad:7f:26:fb:87:54:59:07:99:c2:46:db:fd:6d:
         c0:f4:d7:4e:f5:1f:04:a7:a4:51:a3:3b:6c:cb:0d:89:62:21:
         61:11:e7:eb:26:36:5f:a0:08:3f:d0:94:cb:7a:79:00:de:fd:
         6a:c6:3d:fd:da:f1:ad:4d:1f:95:1f:cc:59:52:c9:9e:0f:bc:
         1f:68:5e:ef:07:86:8b:4a:9e:c0:ec:49:3d:1b:54:fc:e8:c2:
         02:7d:bd:74:b0:3f:36:dd:e2:2f:6c:ff:f0:99:4e:68:dc:3e:
         66:0d:e7:30:97:23:7b:e5:0d:de:11:93:3e:55:30:53:d1:a6:
         df:8b:7d:47:7c:f0:bf:f0:9d:09:59:96:b0:7e:b2:f2:af:df:
         9f:27:a8:2a:cd:47:4a:5f:c2:22:74:d1:50:15:96:d8:8d:a7:
         63:8c:3b:f9:50:95:21:6d:f3:95:1c:94:25:d8:97:ab:28:51:
         70:72:6e:33:fd:91:70:fd:76:ca:4a:1e:7d:f0:f2:58:aa:64:
         bd:55:3c:08:c6:68:fd:4e:bc:14:78:b4:2c:2e:d5:71:82:78:
         26:58:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----