Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/a135fdea-20ea-35a9-8861-0149b24ae2a5.roa
File:                     a135fdea-20ea-35a9-8861-0149b24ae2a5.roa (raw, json)
Hash identifier:          9cm+ldSZR1AKqvGBHWS4OZa8L4gOp5lcpHke7/NEO5o=
Subject key identifier:   9C:A6:75:D7:4E:44:56:2D:6B:31:59:E8:EE:17:D7:AA:92:B7:73:E8
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F432858394585592E0C42D6F239F04680
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/a135fdea-20ea-35a9-8861-0149b24ae2a5.roa
Signing time:             Thu 27 Aug 2020 04:00:00 +0000
ROA not before:           Thu 27 Aug 2020 04:00:00 +0000
ROA not after:            Sun 18 Jun 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        199.255.210.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:45:85:59:2e:0c:42:d6:f2:39:f0:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Aug 27 04:00:00 2020 GMT
            Not After : Jun 18 04:00:00 2023 GMT
        Subject: CN=e4647957-26fb-4e43-a82a-8796f75f83b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:be:96:f8:1b:c3:a1:06:92:2f:c3:fe:ae:
                    88:9d:75:1b:a1:5c:cd:38:2e:9e:22:40:88:ca:f5:
                    09:c2:06:f6:6a:88:9a:b7:e8:77:ba:d0:b8:70:d6:
                    08:a2:38:d1:d9:36:ae:88:76:09:c8:75:d8:c5:0e:
                    20:46:5d:39:b5:bc:17:fd:ee:a4:48:7d:5a:29:1e:
                    a7:24:d3:ad:e1:7d:fe:6a:e6:b5:70:cb:eb:f1:c2:
                    ef:10:7a:fe:dd:b0:e3:9d:ab:23:3c:8d:73:ea:76:
                    69:d7:55:89:71:e1:74:fc:bf:f5:62:dc:49:b3:da:
                    ad:6e:8d:b3:d9:0a:88:c9:14:fc:67:48:bf:6a:a3:
                    c9:13:e6:89:b7:f3:ca:71:96:90:e8:ea:b1:0f:94:
                    45:df:51:b5:61:3f:56:8b:fc:b5:4b:1d:20:58:4a:
                    f4:38:58:8f:26:49:59:16:cc:a2:ea:26:14:aa:86:
                    7c:3a:d0:e4:60:ca:e9:bc:28:bf:94:ea:36:03:e9:
                    5b:11:2c:db:b8:54:bd:02:42:8f:90:22:63:75:eb:
                    ba:2a:1e:24:e1:2a:61:23:9f:1d:93:3a:97:01:a1:
                    cf:47:93:19:09:ba:99:2c:53:87:57:9e:d2:f6:54:
                    1b:f1:0b:c9:aa:7f:8b:e2:6f:c6:c7:96:2f:b7:47:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A6:75:D7:4E:44:56:2D:6B:31:59:E8:EE:17:D7:AA:92:B7:73:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/a135fdea-20ea-35a9-8861-0149b24ae2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:90:f2:3a:83:c3:45:94:83:0c:19:d3:ee:92:d3:f7:27:
         e6:a4:29:8f:e2:d6:d7:02:a4:f9:e9:fd:1f:07:20:e1:b8:f5:
         32:29:13:47:7f:2e:12:81:d8:bb:19:6d:89:e0:27:2c:7c:0f:
         59:19:34:58:82:f0:fe:dc:17:90:5e:84:d4:72:5f:41:b8:5e:
         81:93:be:f6:a8:65:ef:a9:56:70:5a:98:96:18:58:e8:41:75:
         29:65:b9:24:d0:1d:a7:84:0d:68:48:8c:0f:45:0c:6d:f7:99:
         a0:2c:27:46:34:93:b4:b7:a1:0a:39:9f:b3:81:a2:05:99:df:
         2e:78:be:55:7d:9b:ee:f5:13:37:96:b4:0d:d9:4b:1c:58:08:
         df:42:0e:51:90:2c:c7:f5:bc:1a:67:d0:42:75:f8:8a:6a:3a:
         7c:2d:10:88:f9:8b:51:86:84:11:d5:a2:d9:c3:18:54:40:b2:
         52:6a:77:90:cc:23:30:0e:c3:21:fd:49:b2:59:03:aa:cd:e0:
         b1:07:23:a9:e0:f6:6c:97:d5:58:48:4d:72:15:45:22:ef:f7:
         9a:b9:c0:48:00:1c:af:ee:4b:1f:e7:57:e3:a4:02:c8:0e:1d:
         0e:80:53:86:65:b9:a8:bf:17:e1:ec:29:97:d0:3e:2c:a1:c1:
         f2:c0:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----