Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fd893c83-851a-392c-82c5-541bd767bde6.roa
File:                     fd893c83-851a-392c-82c5-541bd767bde6.roa (raw, json)
Hash identifier:          AJ48JsuS41OT1AgJ3GSoOnhquxAVGyEAc9EA9WiG4gU=
Subject key identifier:   35:8D:96:51:44:7B:99:BF:5D:A2:9B:D2:94:62:DE:D7:24:E2:DA:63
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7A4F8FF20BF747C849344C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fd893c83-851a-392c-82c5-541bd767bde6.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.164.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a4:f8:ff:20:bf:74:7c:84:93:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=27694f8e-abb3-48cc-802b-2e62d2a2d5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:20:15:88:45:20:fe:c8:e7:36:d1:2e:5c:08:
                    b2:e2:6b:c9:bd:bc:cf:bd:43:ce:98:ae:a1:a2:5a:
                    52:ab:35:4a:f2:ee:53:2b:cc:ed:04:01:b3:0f:27:
                    21:5b:b5:af:df:b0:40:68:77:72:64:88:82:70:4e:
                    f6:2e:3f:cd:b3:2f:66:cc:5f:37:42:a6:f0:47:41:
                    b8:3a:0d:79:f1:02:81:85:9d:2c:67:0c:e9:05:83:
                    f3:9c:a9:d9:ef:af:dd:57:20:5e:5d:2f:ca:70:01:
                    31:be:cf:ec:a8:29:da:91:25:e4:08:99:a9:01:d0:
                    b0:78:c5:ef:2a:86:f9:be:7c:be:b5:fd:8a:5b:25:
                    6c:5f:1a:47:a9:24:da:7f:91:1f:88:7e:73:40:44:
                    28:51:a9:46:7f:b7:1e:6d:48:3a:5c:d9:0f:ec:54:
                    c5:3e:ef:18:7b:b3:3d:e9:ca:b9:93:af:9d:73:ce:
                    ef:4d:51:06:4d:ee:42:44:c2:79:f1:95:1e:99:9d:
                    e5:ab:23:cb:c2:a1:6e:df:f3:72:fd:33:5b:b3:47:
                    d2:23:a0:f7:ee:11:12:89:01:bb:d2:c7:b3:bc:aa:
                    97:29:cc:08:37:81:13:df:45:20:14:bf:9e:e3:9f:
                    29:a7:c3:45:3b:30:f0:dc:bd:49:c6:41:19:17:da:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:96:51:44:7B:99:BF:5D:A2:9B:D2:94:62:DE:D7:24:E2:DA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fd893c83-851a-392c-82c5-541bd767bde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:06:f1:97:93:9c:e3:ae:bd:94:98:b4:59:94:fd:5a:5b:7f:
         f6:0c:96:0a:fe:35:62:c8:c8:c9:de:44:ce:90:93:f8:1d:1a:
         2d:e8:50:0c:12:26:e7:fb:00:06:bf:4d:49:e1:d6:a0:26:fa:
         93:54:b4:f7:b0:e2:89:d0:c0:ef:aa:19:88:18:91:0e:f9:8d:
         d5:35:1f:8a:d6:8b:98:5b:26:08:77:8f:6d:1d:d4:a9:53:48:
         78:1d:f8:3c:1e:e0:8a:bc:8e:67:2c:27:2c:77:91:ee:4f:d2:
         bb:d1:ea:c2:78:7c:ea:67:cd:f5:81:07:aa:63:fd:97:8b:82:
         66:dd:3d:ef:2a:ff:f2:ff:21:20:05:92:f5:18:51:b4:b5:a7:
         cd:a4:52:25:fb:b8:9c:10:5e:7f:f8:e0:07:52:ba:5e:b2:97:
         e1:f1:17:88:b9:95:00:60:0d:11:e8:cc:dd:5a:f9:e7:df:43:
         d9:e2:30:68:3a:1c:75:b5:61:40:6f:7c:ed:46:78:8b:2c:b8:
         94:4d:6c:ee:4e:d1:8e:6f:4e:13:c0:31:e0:ca:1c:b7:c5:e3:
         84:bb:ac:a7:96:fc:fd:21:a7:b8:56:17:c1:aa:c2:f8:e1:b1:
         4e:31:0f:95:41:3f:27:3d:88:87:e1:6e:03:75:eb:ac:c3:f4:
         3d:51:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----