Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/74defd66-7e74-3954-b12f-3917d45a4f12.roa
File:                     74defd66-7e74-3954-b12f-3917d45a4f12.roa (raw, json)
Hash identifier:          MMPI4mDctB8SuGt8QHpc33R0MYXqioR94lOiiX6Sl3k=
Subject key identifier:   A8:1D:D5:7D:39:81:A1:00:F1:CC:37:B1:B8:63:F4:A9:7C:1B:E2:81
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C4219E134BF7884B1CAF97C80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/74defd66-7e74-3954-b12f-3917d45a4f12.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Sun 17 Mar 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        207.126.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:19:e1:34:bf:78:84:b1:ca:f9:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2024 GMT
        Subject: CN=75de8212-a568-4021-bc6f-0d73fabce973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:66:4f:1f:1e:b9:2e:45:0b:0b:56:a5:0e:4d:
                    43:1c:03:a0:83:d8:0b:31:b6:9f:3f:a3:ad:f4:02:
                    59:ba:41:72:83:60:e0:5b:e9:18:3e:b8:91:0a:62:
                    b1:b7:a3:1c:9e:52:80:b6:53:a5:c2:4b:7b:a2:20:
                    e9:fe:ac:64:64:9e:3e:52:ea:0c:f0:65:df:9c:db:
                    08:58:04:df:32:92:93:b1:dc:bb:85:8a:23:e0:51:
                    84:52:1d:9a:99:63:9a:6c:7c:21:8e:52:6d:98:24:
                    d2:bc:5d:a5:b4:cf:3c:ae:0c:22:50:d9:25:98:a2:
                    16:37:93:7f:7d:d2:c8:80:5d:6d:44:2d:9e:23:a7:
                    11:97:21:27:da:39:7e:1a:4f:5a:c5:96:4d:50:73:
                    6f:df:c7:9d:e6:40:6f:12:ef:76:08:2a:86:0f:6e:
                    52:b8:50:e9:fb:2c:93:c1:08:48:85:0c:09:aa:39:
                    84:03:35:77:32:13:f1:97:84:ee:78:b4:a7:e2:d4:
                    6e:bf:fb:7b:99:b1:2e:3d:9c:5e:00:1e:eb:db:7a:
                    e4:c1:0d:7c:5d:e6:9b:24:67:58:dc:ea:11:9d:d2:
                    82:79:44:fe:2f:18:0e:a2:1c:68:1c:48:b3:83:4b:
                    eb:d8:da:75:e6:91:3e:58:cb:78:fd:c1:fb:05:41:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:D5:7D:39:81:A1:00:F1:CC:37:B1:B8:63:F4:A9:7C:1B:E2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/74defd66-7e74-3954-b12f-3917d45a4f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:7f:4c:0d:f7:34:7f:bc:10:c2:81:2e:71:9c:e4:d1:0f:
         74:3e:22:a4:df:75:28:f3:48:b3:27:3a:63:e5:f9:ad:7a:0d:
         2e:5c:32:20:3f:75:6f:3f:a7:e0:c6:fe:62:8c:73:ed:86:ec:
         89:20:63:2c:d6:a6:8b:5b:7f:5e:e7:7a:2c:55:54:9d:85:cd:
         ea:32:43:dd:5b:52:fc:1c:12:4a:30:cc:b9:2f:1b:7b:b0:a2:
         84:37:16:47:6f:58:63:f2:20:b5:34:a6:cc:2f:2a:d5:bd:4b:
         bc:9b:9c:e2:71:f3:70:26:b5:e4:a4:8c:ad:f8:75:eb:4e:44:
         71:ca:32:eb:24:b9:ac:4e:8b:c9:91:bd:97:13:9c:65:95:69:
         5d:75:a5:70:07:6a:be:27:14:c6:9b:e0:08:0e:fe:99:3d:83:
         f2:8f:2a:0b:94:82:85:25:72:20:41:fe:e2:60:af:3d:66:c9:
         6f:b2:2b:d5:50:1a:a3:a7:a8:9f:d3:eb:3c:e4:5f:00:fa:28:
         05:5c:a0:df:8f:67:14:80:13:36:77:03:8c:8b:7b:1e:d1:bf:
         43:37:43:15:b0:3e:4f:cb:b2:ca:b6:31:4b:71:33:98:a2:bd:
         55:ba:28:eb:9f:c4:98:46:02:ea:d4:87:7e:0a:90:ea:3b:8c:
         53:d2:f1:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxCGeE0v3iEscr5fIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTIxMTIxNDA1MDAwMFoXDTI0MDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk
NzVkZTgyMTItYTU2OC00MDIxLWJjNmYtMGQ3M2ZhYmNlOTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WZPHx65LkULC1alDk1DHAOgg9gLMbafP6Ot
9AJZukFyg2DgW+kYPriRCmKxt6McnlKAtlOlwkt7oiDp/qxkZJ4+UuoM8GXfnNsI
WATfMpKTsdy7hYoj4FGEUh2amWOabHwhjlJtmCTSvF2ltM88rgwiUNklmKIWN5N/
fdLIgF1tRC2eI6cRlyEn2jl+Gk9axZZNUHNv38ed5kBvEu92CCqGD25SuFDp+yyT
wQhIhQwJqjmEAzV3MhPxl4TueLSn4tRuv/t7mbEuPZxeAB7r23rkwQ18XeabJGdY
3OoRndKCeUT+LxgOohxoHEizg0vr2Np15pE+WMt4/cH7BUFbPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgd1X05gaEA8cw3sbhj9Kl8G+KBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvNzRkZWZkNjYtN2U3NC0z
OTU0LWIxMmYtMzkxN2Q0NWE0ZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDQf0wN9zR/vBDCgS5xnOTRD3Q+IqTfdSjzSLMnOmPl+a16DS5cMiA/
dW8/p+DG/mKMc+2G7IkgYyzWpotbf17neixVVJ2FzeoyQ91bUvwcEkowzLkvG3uw
ooQ3FkdvWGPyILU0pswvKtW9S7ybnOJx83AmteSkjK34detORHHKMuskuaxOi8mR
vZcTnGWVaV11pXAHar4nFMab4AgO/pk9g/KPKguUgoUlciBB/uJgrz1myW+yK9VQ
GqOnqJ/T6zzkXwD6KAVcoN+PZxSAEzZ3A4yLex7Rv0M3QxWwPk/Lssq2MUtxM5ii
vVW6KOufxJhGAurUh34KkOo7jFPS8Ts=
-----END CERTIFICATE-----