Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/45a94b5a-fdb8-3e35-83a8-1dd0e533e2c9.roa
File:                     45a94b5a-fdb8-3e35-83a8-1dd0e533e2c9.roa (raw, json)
Hash identifier:          8YDhmEy8hupvpcmW6qodylqcazL8CCV/di3R/4+jw+s=
Subject key identifier:   8C:F7:7E:71:89:0F:99:91:6F:56:6C:C1:53:87:96:7B:14:F8:0B:9A
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C0991038FA74FA2CDCC2DD000
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/45a94b5a-fdb8-3e35-83a8-1dd0e533e2c9.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        207.126.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:03:8f:a7:4f:a2:cd:cc:2d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=ed6be0ce-5b37-42d6-8a9b-d75bfb7fa422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:74:bd:1d:40:cd:2f:fa:64:cc:c6:a4:0f:
                    ca:b4:95:09:e9:be:1d:bf:be:51:b3:8c:cc:83:60:
                    12:82:27:85:13:48:9b:04:84:dd:5d:16:f7:23:79:
                    32:42:40:9b:52:08:50:a5:dd:75:e2:c5:95:e5:c3:
                    fc:be:0d:fd:99:4b:78:e1:df:48:69:07:7f:d4:a2:
                    1a:a7:a0:26:a3:e3:85:8e:34:41:48:f5:2d:8e:d0:
                    bf:35:54:20:56:a8:0a:c9:5a:be:48:34:c9:d7:35:
                    be:39:39:01:50:91:5e:0e:6a:c7:e1:f9:ed:98:49:
                    b5:40:fe:0a:26:b9:24:10:ce:98:43:9b:9c:0d:69:
                    46:c3:ee:97:1a:58:2c:c9:26:97:81:88:38:3f:46:
                    7d:36:df:83:f9:4f:cc:8a:f6:80:7d:3d:23:31:35:
                    42:92:4f:e7:db:37:ba:cc:8d:ae:b5:8c:0e:8b:a6:
                    cc:f6:c8:b0:a2:0a:f1:ad:7c:fa:33:a0:d2:7d:d8:
                    10:cf:84:e9:09:29:2d:07:69:1d:84:a3:b8:ec:a9:
                    59:1f:da:85:61:55:cf:48:12:b5:89:66:21:fd:05:
                    dd:ef:a2:3e:d5:27:71:51:e9:c5:6a:0d:a9:0f:7b:
                    9d:f7:b6:5b:87:53:2c:cb:dc:19:ce:b0:7b:76:7f:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:7E:71:89:0F:99:91:6F:56:6C:C1:53:87:96:7B:14:F8:0B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/45a94b5a-fdb8-3e35-83a8-1dd0e533e2c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:f5:af:8a:30:02:80:3a:ad:41:6e:58:5a:e4:1b:b0:22:
         0e:98:6f:99:22:75:24:fe:15:31:09:7f:e3:a9:ab:24:4f:d1:
         04:a5:90:85:c7:ee:1d:4e:dc:da:da:07:5e:80:ea:34:48:1f:
         c4:23:8a:a0:35:12:6d:3f:5d:0f:4f:b1:be:1e:7d:20:27:e4:
         75:19:d6:96:2a:f4:3e:6d:96:2e:97:d2:69:e1:5b:c6:36:09:
         3c:ac:69:d3:42:3c:89:0a:c6:97:5d:33:e9:52:6c:64:e8:7c:
         9b:c5:d3:68:0a:5d:2f:5d:ac:cc:fd:18:8f:b4:0e:ef:48:5e:
         62:39:ec:82:0e:18:44:a7:47:a2:40:f7:f7:03:fa:ad:8e:05:
         21:05:05:1a:97:9e:ae:da:9a:81:6e:fc:40:c7:e2:23:a2:ad:
         8c:46:f9:b4:e3:5b:b1:9c:d6:ff:41:30:ed:61:49:a5:5e:77:
         46:d3:dc:25:ae:67:df:dd:60:f8:e5:04:18:ef:45:33:96:91:
         fb:df:03:a2:6e:8f:cb:55:fd:42:6e:a3:6b:0a:73:dc:34:1c:
         c7:38:ad:98:c9:c9:96:c0:6b:0b:d6:4c:9b:d0:0b:d5:d1:3e:
         5e:53:42:11:85:c4:af:9e:09:8a:e6:db:a3:c7:c6:92:da:a6:
         de:b3:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----