Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b87b1bb8-b5a0-3f9b-b156-17b6a6da2938.roa
File:                     b87b1bb8-b5a0-3f9b-b156-17b6a6da2938.roa (raw, json)
Hash identifier:          Ico8j7GkmuHcX4q9nXSNEajfK1CT5aN3Q9WJgmWiTGA=
Subject key identifier:   B6:1F:05:E8:24:99:7A:37:D1:BC:4E:52:62:E3:60:3D:FF:B6:19:C8
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C4219EE050833C42610F6EC00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b87b1bb8-b5a0-3f9b-b156-17b6a6da2938.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Sun 17 Mar 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        207.126.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:19:ee:05:08:33:c4:26:10:f6:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2024 GMT
        Subject: CN=0ebda2b3-1eae-450a-a476-badfcd4c1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:59:cf:f3:7d:b5:58:03:ac:da:8d:f7:16:
                    07:27:04:a7:33:dd:26:bf:5e:a7:0c:52:23:7a:79:
                    05:07:fb:08:ce:25:87:95:7a:97:cd:09:8c:95:7e:
                    59:30:00:e2:cf:a0:30:5f:58:09:c8:8c:0f:e2:3f:
                    3c:33:52:86:48:81:86:b1:b7:66:3d:04:51:d5:bd:
                    d2:30:c5:89:01:91:57:07:0f:40:b6:8a:be:32:13:
                    e4:44:1d:75:69:99:d3:be:11:0c:9a:d6:e6:68:a4:
                    f0:a9:03:29:e1:3c:38:62:b2:05:66:db:44:b4:3c:
                    56:1e:df:0d:2f:52:c9:dc:32:4f:25:4a:2d:a2:f4:
                    c3:04:60:5a:57:37:ed:57:4f:e2:3b:59:99:58:cd:
                    a2:45:cc:5a:dc:c7:9c:52:6a:8c:ab:a5:0f:a8:83:
                    32:66:2c:d3:47:b3:8c:1a:a1:a5:d5:fe:8c:0a:12:
                    88:4a:67:f8:35:a7:81:3c:e6:0a:06:bd:fa:e1:a2:
                    97:d1:8c:25:22:7a:18:f6:cf:c1:27:1f:14:61:22:
                    2c:68:f8:24:51:e3:9c:7c:01:95:d9:a9:7d:28:7c:
                    94:45:68:4f:fe:9d:44:28:65:85:87:ba:01:fe:d1:
                    17:d2:5f:4d:f5:e2:a5:88:17:73:71:f3:e8:53:27:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:05:E8:24:99:7A:37:D1:BC:4E:52:62:E3:60:3D:FF:B6:19:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b87b1bb8-b5a0-3f9b-b156-17b6a6da2938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:90:9c:05:1e:4b:aa:da:91:25:47:2d:15:a5:cc:c8:1c:
         71:35:17:e2:41:4f:64:90:a3:b8:19:71:3f:f4:51:50:42:9b:
         3f:30:8d:52:63:62:ce:ee:12:39:5b:da:8e:f0:c5:89:92:2a:
         7c:97:2e:9d:f2:c0:53:9d:fd:2b:a1:2d:a3:22:5d:e6:dd:b4:
         45:c8:36:40:65:fb:34:9e:9f:13:fd:23:64:a2:78:38:08:dc:
         8f:96:69:a5:7b:b7:e3:8b:40:c7:5e:ed:1e:a2:a4:2c:76:3b:
         f6:dd:54:fc:5e:f4:44:89:1d:8e:ba:6e:c1:fe:49:6c:07:18:
         bc:c9:74:16:fb:55:4b:8c:2a:02:1b:60:02:75:39:5e:a0:a0:
         e7:3b:49:94:67:88:a4:d1:ea:d7:63:7e:a1:c1:0e:22:5a:ca:
         f8:e0:8a:37:57:eb:ab:10:4d:42:9a:45:f9:ad:f2:40:55:c2:
         5c:6f:1d:1e:25:7f:a3:35:ca:ca:2a:96:c9:18:f3:53:65:f3:
         d7:ce:4c:d9:06:e9:eb:be:77:fd:36:3d:d5:9f:14:60:8f:c3:
         fe:d0:38:c4:b1:62:4d:45:d3:53:88:c8:46:0e:4b:ad:97:61:
         79:f1:d8:f9:02:b8:63:93:d4:3c:7c:56:02:60:2f:ee:15:dc:
         1e:86:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----