Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a90da1de-1d67-37cb-bb0f-e31b4cdb81e3.roa
File:                     a90da1de-1d67-37cb-bb0f-e31b4cdb81e3.roa (raw, json)
Hash identifier:          qq0apnFUVglskU68Fmm3OV0UBgFHBPuctWVNMSFfJt0=
Subject key identifier:   83:B7:0B:A5:6E:5C:7A:40:5E:E4:61:2C:AE:1B:69:55:2C:93:8D:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A20A77510894F24C806DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a90da1de-1d67-37cb-bb0f-e31b4cdb81e3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        23.236.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:0a:77:51:08:94:f2:4c:80:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fa4b01aa-3f63-4a6b-b823-cedeb2e8217d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c1:86:f5:31:71:17:22:cf:6d:cb:fa:da:30:
                    18:b6:d5:ec:a5:8a:6d:41:c7:f0:4a:8b:a9:f6:74:
                    d2:e0:93:71:68:dd:0f:ad:e3:f7:c8:dc:90:74:b5:
                    e5:d0:54:9e:9d:36:90:1d:70:94:d8:1d:c8:25:63:
                    85:16:4e:66:3b:50:19:16:a7:84:5b:6e:40:42:91:
                    da:0e:61:4f:5a:c5:f5:40:50:6e:63:86:f7:d0:31:
                    67:e7:c3:9e:75:aa:86:f8:5f:eb:40:59:a6:5d:bb:
                    e0:fe:35:6b:83:a8:b0:50:30:53:97:64:58:60:e3:
                    d5:19:9e:bf:a6:29:12:fa:de:6e:dd:41:05:41:f1:
                    c6:77:ef:3e:32:87:e3:d3:cd:91:c2:0d:23:de:18:
                    a7:e5:4c:65:cb:fa:f4:6d:6a:fd:bc:34:a4:8b:57:
                    7b:44:72:0a:99:aa:7e:7e:6f:f9:a6:d3:3a:c2:90:
                    55:98:07:a0:5f:4a:9f:6a:e7:f6:d4:b0:b9:89:43:
                    b7:91:fe:a3:c7:55:a0:b4:c1:56:dc:76:ab:a3:84:
                    66:e7:f1:1a:b4:7e:0f:cc:be:44:9d:2a:80:9b:f2:
                    5a:31:6b:2b:1f:32:c7:15:47:e7:ef:59:f9:e3:d0:
                    98:48:d6:91:f6:57:98:4d:db:ae:d4:c8:66:d0:8a:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:0B:A5:6E:5C:7A:40:5E:E4:61:2C:AE:1B:69:55:2C:93:8D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a90da1de-1d67-37cb-bb0f-e31b4cdb81e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.236.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:c8:cf:83:1b:01:46:7d:3e:12:7a:d9:47:33:d7:73:f1:
         cd:5d:16:1a:4d:68:7c:5c:d0:09:50:ec:69:73:57:07:3c:0e:
         15:cf:56:da:19:63:ba:1d:49:16:3f:92:ca:bf:f2:e2:18:87:
         ee:5b:43:99:b2:a2:de:33:b4:07:a0:6d:80:5c:a0:80:9b:35:
         b7:02:d1:57:41:01:f3:9f:ee:28:4d:d1:2f:c8:ed:22:c4:a7:
         04:8f:a0:a7:d8:44:b0:6f:bb:0e:58:1d:11:06:bd:ea:b1:15:
         a0:47:54:0b:da:65:8e:e4:eb:86:31:96:ce:ab:67:35:5f:8f:
         3e:9e:00:98:a3:82:0e:ad:6f:fa:ca:0b:3c:1d:c1:8b:72:47:
         bc:e3:93:01:16:81:d9:22:2c:20:af:00:79:1f:f8:4a:cd:6a:
         2f:5d:64:fd:53:6c:ac:00:a0:b5:ce:43:3c:a3:74:19:e6:95:
         bd:9a:a7:19:e2:34:80:fe:94:a5:25:76:9d:f2:16:ad:1b:dd:
         08:41:31:85:25:b2:8d:e3:ab:c7:15:49:2f:9d:0d:63:7b:3e:
         74:5d:3b:2d:0b:e2:83:55:17:cd:03:0d:28:36:2d:e6:ec:79:
         03:50:cf:44:c0:bf:8e:3c:25:8c:7c:ed:f4:f9:50:24:88:d5:
         e2:07:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----