Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/0b34b5ae-ee1f-3b95-9617-02580d3f229c.roa
File:                     0b34b5ae-ee1f-3b95-9617-02580d3f229c.roa (raw, json)
Hash identifier:          el4F8W1j2S1/pcKTm5Uj+5WVENPAFuAILV+UDeALBao=
Subject key identifier:   B6:A8:30:A4:C6:DE:1A:B3:C7:4B:81:4E:C8:D2:87:26:79:5F:49:14
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F43285837FCC28EEF1C15906D8DAC3A80
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/0b34b5ae-ee1f-3b95-9617-02580d3f229c.roa
Signing time:             Tue 17 Nov 2020 05:00:00 +0000
ROA not before:           Tue 17 Nov 2020 05:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     16504
IP address blocks:        157.96.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:fc:c2:8e:ef:1c:15:90:6d:8d:ac:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Nov 17 05:00:00 2020 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=a800a553-968c-4cb4-8934-a51cff60019a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:d5:fa:d5:50:ec:bf:b8:f3:19:66:39:8e:
                    4e:72:d2:bf:1f:1e:2e:1c:e6:b7:e1:8c:5d:5a:a7:
                    2e:07:65:85:f2:cb:d3:47:46:09:a8:70:0e:fd:3b:
                    1c:5d:3b:2d:88:d7:a3:80:01:92:fc:10:0e:15:67:
                    14:79:02:50:a9:86:4d:6c:f8:e6:ec:e7:d1:60:39:
                    da:77:9c:79:c4:82:9e:a7:6b:78:36:28:8f:f3:3f:
                    6d:ba:c0:5e:cd:0d:a0:31:2f:b8:50:4d:09:62:32:
                    6b:33:7b:59:fd:87:27:71:89:86:90:56:d4:25:cd:
                    eb:75:7c:64:cd:80:e7:e1:41:4d:17:16:5a:74:de:
                    d3:71:1a:e8:ae:51:6c:1c:86:e7:7f:f0:b6:79:fa:
                    d3:76:5a:52:a6:b5:3e:26:a4:df:07:bf:97:55:2d:
                    6c:b1:b2:1d:c6:54:15:2c:fb:fc:f7:1c:9e:37:fa:
                    90:f6:50:32:f5:ad:ce:a0:8b:bd:68:41:9f:e2:6c:
                    5d:bf:69:18:a9:9b:85:7c:f3:15:a0:9b:d2:b8:cc:
                    14:b7:61:ed:da:07:d5:67:81:f9:a6:c4:13:49:1e:
                    34:15:08:af:69:2d:b5:96:20:5f:bc:65:7b:e2:18:
                    1e:cc:ac:59:f5:6d:89:c8:d1:2e:25:5a:cb:07:b6:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:30:A4:C6:DE:1A:B3:C7:4B:81:4E:C8:D2:87:26:79:5F:49:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/0b34b5ae-ee1f-3b95-9617-02580d3f229c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:7f:4c:e6:21:26:14:63:36:94:1e:66:0c:53:f5:46:23:20:
         c1:a6:ae:47:41:a8:d9:70:bc:08:59:c8:6f:94:df:5a:f8:4b:
         d4:62:97:91:a7:94:0d:31:fd:a5:72:89:b2:c7:6e:b0:b4:10:
         44:6a:3d:4e:86:89:c5:af:6a:08:6f:4e:47:36:78:3b:eb:98:
         5b:33:53:53:36:b0:34:07:9f:64:f9:eb:c4:62:0f:fd:a0:9b:
         2d:2e:d2:69:51:39:b0:c8:a5:7e:cb:d4:6c:3b:d5:e9:4a:14:
         b3:90:6a:80:64:b0:c9:ce:c7:29:0c:6a:41:8e:24:3f:24:1b:
         2c:33:27:22:02:ad:0c:14:44:f7:06:65:69:73:b0:58:a0:ab:
         1f:f8:ca:ff:26:23:17:9f:00:6f:36:e5:71:b9:29:98:c8:1f:
         a2:5f:a9:df:dd:b2:13:70:41:20:6e:e2:d4:5d:b0:57:30:13:
         83:1f:6f:d4:0b:12:9d:80:ba:15:0c:1c:9d:9d:35:48:12:60:
         65:8b:84:0b:0e:ed:71:a4:5a:10:32:a1:1a:e5:d7:b5:2c:0d:
         45:a4:ad:d9:c8:49:21:43:4c:31:42:f4:80:82:ba:92:37:93:
         3d:8e:6a:cb:44:c4:83:4b:4e:1c:96:76:64:96:d8:7b:77:76:
         ba:54:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----