Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b903fe0-6300-3a0a-aca8-bfbe68a8de9e.roa
File:                     7b903fe0-6300-3a0a-aca8-bfbe68a8de9e.roa (raw, json)
Hash identifier:          ra4lkx/QM3It3qUPYJdV7WGrFru1kW5N2vmHFnErmSU=
Subject key identifier:   91:C3:E0:44:E4:1F:88:69:8C:A0:AE:8B:5F:61:3E:59:4B:47:68:26
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285838279AC21D2DC39F57E952F080
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b903fe0-6300-3a0a-aca8-bfbe68a8de9e.roa
Signing time:             Mon 16 Nov 2020 05:00:00 +0000
ROA not before:           Mon 16 Nov 2020 05:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     22773
IP address blocks:        64.40.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:27:9a:c2:1d:2d:c3:9f:57:e9:52:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 05:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=2b421354-8923-4d4e-8228-6ff305448293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:00:ff:7d:3e:50:2e:89:93:f5:59:a1:05:
                    60:7e:5e:c7:3a:ed:3a:ab:86:8f:17:65:cb:1f:f9:
                    8a:05:51:19:82:05:7d:1d:4b:a6:18:41:96:57:54:
                    a0:cd:a1:04:c6:2b:d7:e1:44:c3:75:e8:be:8c:8c:
                    57:66:92:9b:a9:59:5b:a6:1c:36:d8:18:a7:4b:56:
                    76:2c:ab:ac:3b:39:f6:c7:8e:f2:69:77:6d:e1:1b:
                    5f:5e:f1:c5:b7:b3:c1:fe:e7:f4:77:4b:2a:91:ef:
                    3c:28:56:85:77:a5:cb:9f:fe:fe:19:2a:32:c3:8d:
                    4d:ef:be:26:8a:60:83:d3:cf:87:49:4d:7b:a9:01:
                    ff:60:8d:da:27:77:10:3c:fc:4c:7e:49:d1:16:95:
                    81:8e:e4:e4:bf:4f:62:9a:33:e9:ee:ad:52:65:b4:
                    ac:32:64:2e:b0:c1:28:93:6c:3a:31:6e:56:e6:57:
                    08:26:47:1f:a9:52:f1:ca:64:e8:df:9b:5a:af:00:
                    cf:1f:dd:e3:f6:e0:60:49:3c:a1:a8:3b:13:e4:25:
                    f1:47:30:c5:03:ad:f0:83:17:f7:3b:f1:dd:37:f6:
                    ed:fd:c5:cd:0d:33:b8:7e:8a:f6:0f:38:19:44:34:
                    22:f3:67:b3:84:0c:ee:49:1c:67:27:ca:91:45:83:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:E0:44:E4:1F:88:69:8C:A0:AE:8B:5F:61:3E:59:4B:47:68:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b903fe0-6300-3a0a-aca8-bfbe68a8de9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:12:4d:60:00:8a:49:07:19:44:dc:84:47:85:c8:9a:5b:
         5e:88:75:5d:06:22:22:8f:7b:87:4f:41:3f:96:c9:46:a6:99:
         fb:f5:dc:0a:31:39:8b:ad:51:80:25:a0:9e:41:5b:eb:06:be:
         10:1d:44:45:ee:e3:c1:60:f6:97:ba:93:9c:4c:98:42:0e:6e:
         f6:82:5d:e8:03:14:c7:6c:f1:ac:e5:92:c2:e6:0d:c7:e1:01:
         8e:85:5b:3f:e9:99:35:1a:be:d6:97:bf:b9:9c:a7:a3:de:2b:
         96:2e:0a:68:06:36:4f:1b:ab:30:95:8a:f3:9a:37:8d:d8:f0:
         59:e1:cd:75:2f:45:ca:76:81:a0:3e:8c:26:a7:f1:30:27:78:
         7e:2a:13:9f:d5:c4:51:1b:7d:fb:a4:92:3a:e3:f7:9d:b1:bc:
         40:f3:9c:de:1c:2c:a5:a4:8a:ba:7c:00:97:f7:1c:da:e8:ed:
         04:0f:ce:20:08:99:60:6e:46:f2:c5:05:de:be:9b:75:77:a6:
         4f:d3:bb:90:c9:f7:67:25:cc:01:7a:6c:bb:72:1a:7e:35:7e:
         3b:72:eb:30:e9:0d:14:c1:61:d9:e4:bd:5b:3c:96:f5:1f:ef:
         0f:ca:94:80:52:8e:63:d8:1b:6d:79:3c:4e:95:1e:e4:bf:a0:
         b7:da:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----