Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa
File:                     7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa (raw, json)
Hash identifier:          1U8on1d5IB0uIbuGvEOoTy8MJ+s5yYgNu5zzzp4Okp4=
Subject key identifier:   3C:AB:3B:0B:46:BB:1F:30:23:BA:6B:7F:B4:6C:B5:93:A3:B3:AE:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C50A6C424770E90F0E92A8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.97.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:0a:6c:42:47:70:e9:0f:0e:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0996247d-e516-4f70-ab51-9e5ec28cf671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:f9:09:00:4e:e8:45:6c:d0:b3:49:dc:a2:
                    25:37:55:87:36:a7:39:bd:92:e4:30:ae:ed:31:2b:
                    49:3f:3a:7a:18:84:f8:c2:bc:6b:6f:ac:5d:9e:df:
                    ef:16:85:2a:05:b4:ce:76:72:42:54:ff:32:b4:a2:
                    11:f3:30:d3:93:29:de:ea:ee:8c:61:a1:e6:a0:c1:
                    2c:a9:e4:04:3b:de:7f:2c:19:90:18:b3:37:9d:d7:
                    06:06:26:82:08:f2:bb:86:c0:db:77:1e:57:1b:87:
                    bf:12:ef:11:86:93:5d:0f:a2:39:c2:9f:fb:a2:0b:
                    00:b4:3c:72:0f:95:5b:e9:be:da:e0:a1:0b:4a:9b:
                    34:3d:c4:7d:28:ff:2d:71:b1:ca:64:f4:50:9b:4b:
                    af:92:1c:d8:a6:70:40:ca:be:d2:e6:d4:00:bb:06:
                    e3:53:e7:ca:19:85:f2:29:29:11:c3:00:64:e6:0b:
                    8c:2d:6a:92:29:c1:47:09:b7:fc:05:a0:ee:19:a5:
                    b8:ae:4c:ce:01:d8:e7:d7:2a:6f:f8:1e:21:04:ff:
                    2c:0c:1c:77:a2:4b:70:22:70:1f:a7:45:65:7c:8a:
                    f1:12:73:60:51:10:8f:05:1f:d8:2d:a6:7a:9d:e0:
                    e4:7f:82:27:c2:9b:28:7c:1b:46:1f:c0:df:ae:20:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AB:3B:0B:46:BB:1F:30:23:BA:6B:7F:B4:6C:B5:93:A3:B3:AE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.97.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:64:2c:d8:02:9f:4a:21:55:76:fc:05:8b:83:58:9c:54:02:
         b0:bc:6a:c4:df:6c:ac:49:91:29:44:b4:14:ec:0a:2d:6e:db:
         d2:2f:b7:a1:0c:b4:a6:c1:b9:33:39:73:04:f9:64:02:ee:87:
         8d:18:f1:8f:a4:56:9b:b0:da:f5:48:7f:99:5c:1f:41:35:49:
         0f:47:6d:9d:2a:f4:99:a1:a7:f5:bf:a5:00:04:79:7c:a9:3d:
         79:27:57:df:a9:53:8f:33:1a:71:d0:0c:23:14:ac:bf:2e:36:
         f7:ef:40:c8:22:15:cb:26:5e:90:38:39:80:04:32:74:cd:9a:
         98:64:d9:a0:fa:2e:c3:55:9e:46:be:45:10:ab:48:58:b5:f7:
         62:1e:93:33:77:68:11:31:3b:a4:8c:4a:2b:3d:ec:8c:ec:c4:
         fb:d2:88:c4:a9:f7:60:fc:95:5b:23:d8:cc:ee:b2:3e:ef:05:
         ad:40:7f:df:31:45:db:19:a5:46:57:eb:43:44:ca:58:15:0c:
         d0:7d:d8:4e:14:5d:ac:a1:05:7c:dd:09:8f:ac:ac:82:12:e8:
         5f:0a:7d:ba:3f:73:0c:13:9d:f8:5a:7a:4f:b0:0e:4b:2f:0f:
         d4:1c:db:20:0c:f4:c8:1d:dc:82:35:94:b5:87:b3:f3:44:1f:
         64:9f:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----