Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22fd9580-7b28-3725-8355-05a494aca6e4.roa
File:                     22fd9580-7b28-3725-8355-05a494aca6e4.roa (raw, json)
Hash identifier:          wy2BFZKFS76JPi0KOKy/6dXMYCsJTcA8sDvkjjim50s=
Subject key identifier:   C7:AA:54:79:38:A8:9B:36:4A:24:FB:D2:A8:E9:B5:49:49:4C:C5:41
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AE5223DA864006F8593280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22fd9580-7b28-3725-8355-05a494aca6e4.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        104.154.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:52:23:da:86:40:06:f8:59:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e5be5629-319b-4dbe-a3c0-320512edb1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:60:05:f3:a5:a5:1c:a0:83:97:b6:97:d6:
                    f8:ac:ce:bb:ad:40:aa:0f:c1:72:42:e9:6f:85:17:
                    7d:7d:f8:b1:06:29:fd:23:c5:06:f5:9b:76:70:07:
                    e2:35:fc:20:d5:fe:11:e0:2a:74:86:5a:85:9d:db:
                    70:54:ee:d6:fb:4b:12:37:a6:a5:8a:ba:42:51:44:
                    92:2c:eb:f3:93:5c:44:a4:97:58:8d:66:45:35:20:
                    e9:7c:c6:e2:43:57:07:05:39:8a:2c:28:56:74:a6:
                    a0:63:25:12:4c:7a:4b:0e:18:c7:38:55:a1:64:1e:
                    6e:5d:fb:e5:a5:e8:f7:b5:d3:d6:b7:0e:ab:95:cc:
                    0d:29:04:2a:2b:27:97:9c:bc:70:1a:e9:90:10:1c:
                    47:66:92:32:2b:5b:26:98:69:ea:8a:c4:df:a2:a7:
                    6c:d3:d5:bb:3b:df:cd:40:b4:8f:96:24:84:0b:0e:
                    d0:a3:4b:57:fc:c0:3e:66:0a:da:5f:ce:12:fd:a9:
                    bd:4b:e3:b4:24:b9:ed:40:da:7a:1d:25:84:27:17:
                    f0:59:c4:af:94:e4:c7:4b:e7:c6:df:1a:3a:69:4b:
                    9a:7d:35:b0:f8:72:d1:34:58:e4:88:99:78:25:a3:
                    0d:fd:cf:b9:91:7b:6e:13:97:44:ef:c3:94:ae:8b:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AA:54:79:38:A8:9B:36:4A:24:FB:D2:A8:E9:B5:49:49:4C:C5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22fd9580-7b28-3725-8355-05a494aca6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:55:ee:ea:50:82:0c:44:a6:ec:54:4c:97:44:a4:cc:4a:2c:
         80:56:a8:30:2b:ea:df:d3:a8:8a:16:35:19:0f:96:0c:88:0f:
         94:d2:7b:6d:e5:35:36:f6:c7:e8:20:2d:81:73:69:9b:09:1d:
         ed:d1:19:2f:20:20:34:e7:4b:84:b4:36:0a:54:96:25:a1:e7:
         ca:be:d2:5f:e5:ab:5b:be:a9:42:c9:56:31:ff:d0:13:47:64:
         d2:69:fd:15:b4:df:0c:91:84:99:8f:85:62:4f:8a:58:c7:e7:
         3e:38:b0:d9:59:9b:cb:7b:e5:8d:99:fe:60:ca:bb:74:0c:38:
         57:9a:d7:67:aa:58:69:5f:95:c2:44:63:8c:04:2a:b1:7b:f6:
         0a:3b:6d:23:25:e7:90:be:61:3e:aa:93:e1:3d:60:47:2e:67:
         eb:06:b7:24:67:ec:db:40:b9:a2:8b:3d:81:8b:69:9b:fb:c0:
         45:4e:c5:4a:53:c2:62:8d:b6:9a:d0:1c:cd:9b:4b:3b:da:3a:
         df:7b:db:18:ba:c5:2e:9c:83:76:3d:a0:8d:be:0c:74:12:77:
         54:82:7e:4b:24:aa:56:4b:99:a0:40:f6:4c:25:7d:4f:2e:c1:
         a4:ff:f3:16:82:41:c2:83:6f:8a:0a:54:51:e0:3d:28:18:fb:
         22:a3:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----