Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/e4e27db9-6d9b-3e93-9e63-181b0aa5db95.roa
File:                     e4e27db9-6d9b-3e93-9e63-181b0aa5db95.roa (raw, json)
Hash identifier:          jqvxazksHiyAvgqMVo2C8RW0UKct7IGKxyW5rFz3okM=
Subject key identifier:   5F:97:00:41:49:AB:28:F2:BF:1B:24:90:4A:88:AF:B0:45:5D:78:86
Certificate issuer:       /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Certificate serial:       010D0C9F432858389AF1B448EC07E692277F8FC0
Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/e4e27db9-6d9b-3e93-9e63-181b0aa5db95.roa
Signing time:             Fri 02 Oct 2020 04:00:00 +0000
ROA not before:           Fri 02 Oct 2020 04:00:00 +0000
ROA not after:            Tue 18 Apr 2023 04:00:00 +0000
asID:                     398868
IP address blocks:        163.123.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:9a:f1:b4:48:ec:07:e6:92:27:7f:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
        Validity
            Not Before: Oct  2 04:00:00 2020 GMT
            Not After : Apr 18 04:00:00 2023 GMT
        Subject: CN=12ce6d8d-4104-4fc3-9832-107ab3c587ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:8f:2b:ff:3a:22:db:59:e6:bd:e8:40:f5:
                    ed:c5:94:1d:e6:8a:5e:6d:63:17:65:79:bd:86:d8:
                    fa:f4:08:81:54:c3:5d:33:ff:27:71:20:2b:96:4f:
                    d7:78:74:4d:e7:d6:95:b2:ab:0c:d8:7a:ec:e6:8a:
                    ee:50:33:47:42:b7:b1:70:76:d3:1b:dc:22:03:50:
                    f6:48:b5:0d:d1:c7:09:72:88:44:55:00:3b:73:df:
                    2a:69:b6:a4:62:1f:f7:95:69:d1:80:a7:55:88:c5:
                    b4:7c:d4:50:ac:c1:ca:9d:45:bf:af:01:a0:3f:7e:
                    8d:4a:42:f3:0d:f5:b7:c0:aa:40:f8:ff:59:e8:36:
                    5a:e0:1e:40:5d:cf:40:0c:6d:08:89:d0:98:27:eb:
                    de:dc:6a:02:41:a0:09:1d:e1:ab:ff:7c:04:5f:ed:
                    94:9e:0e:b0:1a:61:1f:3f:7e:9e:a4:89:27:36:ba:
                    94:f6:8e:2f:5c:82:b9:5d:3c:5c:31:dd:b5:e8:b0:
                    11:86:0e:09:ae:47:68:1f:56:13:e3:21:76:b2:10:
                    e5:60:8a:4a:05:11:3d:83:a2:56:bb:b8:64:91:4a:
                    55:41:16:16:c3:30:63:bb:94:48:f1:e6:e6:df:98:
                    c2:24:93:75:1b:41:22:1b:6f:a4:37:8d:b7:39:b3:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:00:41:49:AB:28:F2:BF:1B:24:90:4A:88:AF:B0:45:5D:78:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/e4e27db9-6d9b-3e93-9e63-181b0aa5db95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl

            X509v3 Authority Key Identifier:
                keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:64:91:8a:ec:b7:4c:7f:02:1b:e6:87:36:43:00:85:98:1a:
         bc:5d:7d:8d:0e:b4:d2:bf:0e:2e:aa:15:39:0f:84:88:d4:72:
         8e:05:12:63:0d:64:c3:e0:f7:e6:4d:f4:82:1d:15:a8:6c:80:
         77:3a:af:4b:39:14:67:4c:f3:4c:3a:c0:bc:19:41:d5:59:4f:
         c6:3d:f3:d4:ba:5f:f2:66:6b:ed:15:64:85:99:8b:9c:46:d7:
         19:ac:1f:29:66:7c:d5:22:df:3a:e2:04:2b:fa:c3:2f:32:d8:
         ed:6c:51:e4:fd:0a:25:3e:be:1c:10:11:33:eb:3b:18:dc:e9:
         e0:81:9e:df:44:dc:f2:01:40:da:93:2a:11:86:59:c4:20:cc:
         a9:71:cc:fa:27:48:9c:1b:04:4b:91:21:59:4f:6b:3f:46:7c:
         a7:2c:5e:5e:e1:56:65:14:6f:59:d8:59:bb:be:20:ff:26:0c:
         cf:3b:0e:c2:9b:f6:a2:49:d8:d1:93:f9:86:48:96:f9:41:bc:
         d5:c4:8f:e2:79:dc:8f:a1:0f:f5:62:f3:e6:05:7a:7c:dd:24:
         a0:b2:68:a6:18:af:42:ee:01:d3:88:5a:2e:a4:0e:38:d7:f7:
         da:9e:81:7b:52:c0:b3:6b:97:1e:a4:24:48:c7:fb:31:db:1d:
         e5:e0:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----