Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/ba72269f-4825-37b3-bfca-cc58f25ffd6d.roa
File:                     ba72269f-4825-37b3-bfca-cc58f25ffd6d.roa (raw, json)
Hash identifier:          uoRLVtw30rhfkztEIhx0yq1z5XMFzplpVVwGVE+WYbY=
Subject key identifier:   79:C0:87:5B:99:F4:6C:07:20:A0:A5:73:08:4B:F3:18:A4:47:2F:63
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC174087D74CA
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/ba72269f-4825-37b3-bfca-cc58f25ffd6d.roa
Signing time:             Wed 19 Aug 2020 04:00:00 +0000
ROA not before:           Wed 19 Aug 2020 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        74.117.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:08:7d:74:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Aug 19 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=dec1d3c2-f0e5-4034-baa1-2df61d8fff25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:56:59:80:eb:a7:2a:08:d7:92:7a:eb:fc:
                    26:a1:f0:1e:85:b6:a5:77:3b:6e:11:3d:1f:c7:98:
                    8d:ee:16:9f:9a:0d:7d:23:24:72:da:6e:53:ef:50:
                    d4:2b:77:bd:ad:0b:dd:4f:36:cf:e3:04:4a:e1:83:
                    51:6a:12:b1:2e:07:e7:d2:c5:53:ff:21:74:67:a5:
                    b4:14:a4:da:17:12:96:18:4c:2b:d3:55:09:e9:83:
                    51:17:e3:f1:68:aa:9f:2b:0c:42:4e:cd:00:36:08:
                    34:67:91:c5:4e:4e:db:6b:be:33:42:d3:7f:b4:eb:
                    37:f2:08:5d:9d:3d:00:a6:02:cb:eb:86:66:00:65:
                    c2:d5:25:59:f6:49:0f:e3:44:b9:a4:00:1c:ad:c2:
                    97:be:66:7b:f6:c8:99:89:b2:5a:8c:d4:71:34:38:
                    56:c8:9c:80:c5:60:52:97:af:dc:45:99:9c:ff:7a:
                    ec:28:cc:5d:83:51:45:1f:8b:0b:db:7a:e6:1f:81:
                    83:3c:3a:a1:c4:7c:90:f4:b7:38:a5:26:c3:e9:61:
                    3d:3c:32:20:99:66:61:27:aa:1d:ca:7d:5f:7b:85:
                    bc:a8:f0:3f:62:11:4f:6e:99:42:a2:db:40:27:44:
                    ec:d1:b8:95:ed:a0:dd:3c:11:62:9e:50:4b:50:e5:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:87:5B:99:F4:6C:07:20:A0:A5:73:08:4B:F3:18:A4:47:2F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/ba72269f-4825-37b3-bfca-cc58f25ffd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:0a:d7:76:17:79:b8:93:c5:b7:75:45:0b:79:f1:02:73:
         f4:5c:7a:e1:9f:38:90:1d:d7:73:a8:60:5f:94:04:b2:ed:79:
         14:4e:e3:58:1e:b3:df:aa:91:3d:c1:cc:9d:81:1a:da:6c:6c:
         6c:91:5a:be:0b:d9:ed:b8:7c:fb:af:d9:3a:b1:c7:fd:c7:98:
         63:5a:3f:57:18:25:95:68:75:91:0c:5e:a2:ca:bc:c9:78:ca:
         87:f9:9d:f0:7c:45:23:c7:d8:cc:a9:53:19:0a:0e:77:a5:48:
         8a:d7:48:56:83:ca:ce:5f:4d:f4:9b:9d:8e:f7:94:5a:70:c9:
         fd:f6:1b:78:56:d4:3a:37:de:7b:4d:c7:01:6a:73:88:00:0e:
         64:c1:16:44:b2:04:68:0e:56:e5:ee:65:c0:97:29:f1:9a:15:
         17:ed:36:be:56:e7:99:cf:e8:69:45:cb:62:dc:f7:7c:1c:0e:
         db:6f:75:b7:3c:55:29:1c:1c:13:0e:4d:ee:13:b6:f9:54:f6:
         6e:1e:48:ff:c8:6f:fa:ca:15:a3:c3:5a:7e:7d:3a:a6:51:0e:
         40:0c:fd:e9:c3:66:10:0b:94:fc:fb:22:7c:dd:31:4d:b3:32:
         3d:fb:30:7f:de:c0:8d:0f:b8:a9:b8:24:9b:b9:1c:38:3a:06:
         95:3d:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----