Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/cd4fde5f-99c0-331f-8905-318b27358bfe.roa
File:                     cd4fde5f-99c0-331f-8905-318b27358bfe.roa (raw, json)
Hash identifier:          dB6XZfumsUZdVE9KQRvv354yKJjWRzMzQ4muaGZAPUw=
Subject key identifier:   24:F2:52:F0:60:CD:0C:AE:36:F5:50:0E:5A:AD:18:42:E1:E4:A5:1A
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC174087CE7F0
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/cd4fde5f-99c0-331f-8905-318b27358bfe.roa
Signing time:             Wed 19 Aug 2020 04:00:00 +0000
ROA not before:           Wed 19 Aug 2020 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        74.117.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:08:7c:e7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Aug 19 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=0ea49dbd-2867-4bf0-83b6-aef5b7b53584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:4d:0a:06:80:41:2d:a2:d4:01:27:88:01:
                    ce:a9:16:16:12:56:1c:e2:a5:f2:a5:7c:35:f9:c6:
                    32:ad:6c:fb:87:41:00:a8:71:29:62:c5:37:70:32:
                    7c:34:18:f9:a7:94:cb:30:c5:d7:43:c5:e0:f5:5e:
                    ac:af:18:3f:01:3f:36:ba:49:01:a2:c1:78:f2:a3:
                    06:f2:16:bf:8b:2b:ef:a8:5d:b4:f8:b6:ce:08:ac:
                    58:16:7b:47:70:7c:ae:f4:35:cf:90:04:52:50:24:
                    e2:27:de:08:2a:00:b2:73:81:cd:ab:58:2b:00:82:
                    1a:e6:e5:c7:e8:6c:a6:27:a1:6c:9a:86:ff:fc:97:
                    e4:8a:be:26:88:23:14:f6:03:09:29:ce:e0:cd:5b:
                    70:77:95:99:2d:60:80:5f:a9:5d:03:3b:8c:13:ac:
                    5a:e1:88:54:81:28:f5:51:0d:8c:e4:93:89:39:a4:
                    c7:7e:5f:d1:f2:5e:9a:4f:a1:27:64:88:dc:9e:15:
                    bc:50:69:38:56:ba:05:1c:f9:fb:1f:5c:4c:89:6e:
                    ff:a1:a4:9c:65:04:77:d1:29:01:6c:23:3b:aa:ba:
                    11:c0:b1:b1:25:eb:ae:92:43:a6:fb:76:66:89:d4:
                    bc:f3:66:7e:e3:3c:fa:2c:41:47:89:af:5e:1e:29:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:52:F0:60:CD:0C:AE:36:F5:50:0E:5A:AD:18:42:E1:E4:A5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/cd4fde5f-99c0-331f-8905-318b27358bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:03:7c:b9:85:c5:11:55:29:95:d6:0e:7d:39:26:a2:0f:bd:
         8b:3c:1d:ec:06:61:b7:a0:64:84:d0:e8:f6:08:fd:38:e6:bb:
         3e:3b:cd:bf:e9:30:f5:0a:7a:88:52:37:dd:09:1b:eb:3a:97:
         c1:65:58:53:5d:bd:39:dd:ae:f9:c4:86:69:e2:e7:3d:2a:87:
         c3:e7:0e:dd:08:82:45:75:c0:36:6a:5d:29:d9:30:27:69:ff:
         61:fe:e9:02:ab:7b:61:2c:57:bb:88:0d:e2:06:12:a2:39:0c:
         f5:72:ce:a1:17:5e:cf:04:60:71:07:be:50:83:07:3f:38:af:
         60:a9:5d:0c:41:b7:1f:84:ae:b8:0a:ae:2e:a6:99:d5:9e:4b:
         8b:d9:b7:0a:9b:69:d8:97:f2:9a:0f:b4:16:c5:e7:e6:ff:4e:
         54:67:4b:4f:2c:bc:cb:c7:b2:aa:31:51:49:7f:92:86:80:f5:
         62:6a:d5:80:7d:df:6b:ff:eb:b8:03:e2:bc:2a:7a:6e:f4:7f:
         c2:33:e9:91:a0:c1:2b:0f:d7:2d:21:30:3e:f7:a4:d3:7c:95:
         af:a9:67:65:ce:b2:02:0d:6b:d0:ad:49:67:8d:d9:81:da:2b:
         a3:31:92:c4:a3:ad:3e:6c:a4:b9:bd:de:d5:66:1f:67:39:a4:
         46:fb:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----