Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/361d0826-1eff-3ad5-aa12-b839f1ad0b07.roa
File:                     361d0826-1eff-3ad5-aa12-b839f1ad0b07.roa (raw, json)
Hash identifier:          TBFIBZsTkvMJwa78y0tNwsY7eoAowCL2EhJk6vqTmL4=
Subject key identifier:   D0:5C:7D:70:19:01:CE:C0:E5:49:56:1D:FB:FC:DA:6C:43:BC:8C:1D
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328583AA7B5A5BF9818A82C274CBE80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/361d0826-1eff-3ad5-aa12-b839f1ad0b07.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        192.104.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b5:a5:bf:98:18:a8:2c:27:4c:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a4679b04-4e1d-400f-b240-b5ec81176463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:15:6a:07:17:7c:71:c0:f3:12:4b:ab:00:
                    2c:1d:bc:08:48:b5:04:61:6a:f4:b4:b1:23:41:4d:
                    b9:e5:d0:e5:ad:0a:e7:ba:e8:be:bb:97:e5:a7:79:
                    5d:bc:ff:58:d9:40:e8:91:e0:e1:c1:a3:29:21:ef:
                    5b:d7:d9:71:4e:1d:7c:56:ba:18:db:55:8e:c3:09:
                    e7:46:61:79:73:a1:ef:b0:fe:89:b9:bb:e4:e3:31:
                    2a:d1:e0:08:25:a7:5c:79:28:36:ef:e7:dd:63:37:
                    72:ac:98:b4:9a:79:fa:04:dc:eb:bd:3f:94:9f:01:
                    51:5a:21:a2:9c:28:b1:c4:0f:c3:b9:86:a9:fc:68:
                    6c:d5:31:c4:c3:db:52:be:f2:bf:ed:35:f4:59:b7:
                    41:46:22:b8:64:82:17:49:80:25:9f:5e:d5:93:42:
                    c1:62:3d:56:2c:0b:55:40:43:4b:96:62:4c:c9:40:
                    41:49:8c:90:6f:d1:7d:4c:6e:de:4f:87:0c:02:25:
                    1b:a0:1d:c0:cf:bc:65:31:6a:a6:a0:96:09:2b:65:
                    91:22:0a:5b:9f:3c:fe:b9:61:ae:87:b3:8b:bd:05:
                    d0:9e:77:3b:55:06:9d:f9:08:eb:76:82:44:c1:2f:
                    ff:82:1a:11:47:33:83:3e:e8:24:5b:21:61:70:f5:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:7D:70:19:01:CE:C0:E5:49:56:1D:FB:FC:DA:6C:43:BC:8C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/361d0826-1eff-3ad5-aa12-b839f1ad0b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:3c:56:ae:c6:70:16:1e:7b:c7:7e:48:5d:33:1e:75:ea:ba:
         30:a8:4a:4e:71:21:fc:82:9f:b5:8d:b0:e6:02:8c:86:96:05:
         1b:a4:f2:48:a6:66:6b:63:3c:71:31:cb:9f:d7:49:69:4b:69:
         fa:1f:fb:0f:6c:67:d4:4f:a2:4f:e0:d0:5e:2c:1d:21:76:d3:
         e3:46:d4:99:e7:a2:92:77:79:2e:16:82:a9:7d:d5:dc:1a:60:
         b4:18:1f:20:63:a9:26:06:8b:e9:f7:95:85:b1:da:0e:61:f2:
         a1:8b:8d:d3:e3:47:01:7f:ed:5f:67:c6:71:ab:6e:fe:9c:e5:
         14:93:36:57:09:e5:23:d8:1d:4a:e1:22:8f:95:18:80:9f:04:
         dd:4a:57:25:9d:1c:b1:56:90:40:bd:bf:a4:c1:90:30:35:ce:
         7d:d8:53:06:87:91:8a:00:58:38:ce:2a:db:7a:0f:a9:40:5f:
         12:d7:21:ce:dc:77:54:09:44:08:74:c4:23:53:68:9d:5a:c7:
         e8:c9:67:9b:14:d7:c5:2a:c3:13:91:05:aa:fa:83:32:9b:00:
         78:33:f2:c8:d1:0d:2b:cc:ca:bc:22:77:df:7d:ff:96:26:d1:
         55:0c:9f:04:5f:5d:1a:09:79:b6:f4:33:b3:37:6c:61:ed:05:
         f8:27:34:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----