Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e457f57b-a08e-3b60-aba8-caddf81ec864.roa
File:                     e457f57b-a08e-3b60-aba8-caddf81ec864.roa (raw, json)
Hash identifier:          /ntAAjZDxtbcpWDjJjUldh8VyxD+MZty8L8sZFNBrTM=
Subject key identifier:   50:13:C6:AB:EF:72:4F:5A:80:8E:BA:0B:9D:41:9B:BF:43:E7:A1:13
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C099182E657129D019F6AB4A0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e457f57b-a08e-3b60-aba8-caddf81ec864.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        207.126.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:82:e6:57:12:9d:01:9f:6a:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=7254a1e8-5bcb-4718-9911-2cdf2fcb1528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:4e:e1:0b:01:b8:b9:23:21:19:94:04:6d:
                    52:6a:19:f3:1b:2a:2c:f3:67:6f:51:e3:92:9f:d1:
                    b9:06:5d:44:5c:e8:73:99:27:a2:b4:4d:52:92:55:
                    0a:0e:ff:e5:aa:20:b0:cd:81:5c:17:c3:3f:0b:39:
                    73:2f:c5:ea:70:75:f1:4f:37:eb:38:eb:e9:63:18:
                    45:da:c6:7e:e6:d4:38:fa:df:cc:30:e0:ac:89:76:
                    95:56:a4:e4:0f:2a:e6:5d:81:5e:09:98:a9:81:53:
                    f4:d6:98:ac:de:35:6d:3c:41:24:1a:3d:a0:9f:83:
                    8a:58:db:8f:14:bd:dc:fa:a6:37:33:ff:96:67:c9:
                    e2:a2:9e:21:68:82:bd:76:a0:bc:97:bf:3f:5a:93:
                    7a:c8:1a:70:47:c3:0b:8a:66:06:67:b3:91:57:4c:
                    38:94:c0:8e:a7:97:53:4b:33:56:f9:89:8d:91:bd:
                    84:0f:53:a9:d0:62:f0:37:8f:bf:a2:3b:d7:67:91:
                    e9:f0:c6:23:be:a6:33:d7:2c:8c:df:cb:87:24:f8:
                    bb:10:ae:97:d6:6b:d2:d9:d9:19:8e:a4:2a:ca:8e:
                    e0:06:18:bf:90:e9:b9:97:4b:2a:1a:5e:79:bd:3c:
                    09:49:55:80:f6:b3:4a:dc:2f:29:e2:dc:64:cf:95:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:C6:AB:EF:72:4F:5A:80:8E:BA:0B:9D:41:9B:BF:43:E7:A1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e457f57b-a08e-3b60-aba8-caddf81ec864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:12:c8:2d:58:f5:89:5f:79:9a:4a:44:cc:b4:27:81:3a:c2:
         a3:2c:3f:87:35:b6:04:bc:9a:85:0d:db:a3:01:d3:63:93:73:
         c1:a3:55:ea:4e:15:1b:af:b1:b6:fb:73:e9:9d:25:01:8a:b3:
         b0:b4:6e:98:a3:cb:1b:80:50:a6:15:d9:31:09:dd:c3:ee:a3:
         1f:af:1b:67:a7:70:11:d2:41:22:6a:2c:de:3d:3f:0d:e2:7c:
         13:9c:71:f5:3a:0b:91:c4:60:fc:38:23:56:d1:0c:1e:c2:c2:
         69:ea:d1:50:ea:10:cf:7f:4b:c7:80:14:45:60:de:e7:79:9c:
         6f:4e:ec:a9:00:68:e8:d0:32:34:94:07:4b:f3:75:91:0b:22:
         e9:1d:66:59:c5:18:bb:cc:b8:0e:55:42:3f:e6:ea:80:30:4c:
         6d:2f:c4:0e:19:d7:56:65:8e:8c:3e:e0:75:71:40:34:51:26:
         0f:6e:de:f5:db:69:ad:a8:92:fc:62:b1:64:4a:92:43:7e:27:
         f7:1f:1d:03:0a:57:1e:0a:0c:94:1a:d7:a7:54:b0:66:69:13:
         1f:04:b2:45:8b:e5:5d:b4:1d:3d:e7:f7:fe:21:78:0e:97:a4:
         5e:51:86:fb:93:68:a2:2a:a1:a2:d8:df:d7:5d:b8:0d:25:77:
         ba:97:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----