Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/dbfa0835-e9d9-3ad8-9d0d-be39b39faf58.roa
File:                     dbfa0835-e9d9-3ad8-9d0d-be39b39faf58.roa (raw, json)
Hash identifier:          RKuV4hweZ1joQS5Bl6mZpQJHGPxGQL2YPiVWSWtSi2Q=
Subject key identifier:   46:35:43:98:C7:92:EE:EA:D1:A2:5C:A8:94:B4:28:49:F0:AD:C0:EA
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328583BB7ECAA90C55F1C5584A39980
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/dbfa0835-e9d9-3ad8-9d0d-be39b39faf58.roa
Signing time:             Mon 15 Mar 2021 04:00:00 +0000
ROA not before:           Mon 15 Mar 2021 04:00:00 +0000
ROA not after:            Mon 29 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        207.170.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:b7:ec:aa:90:c5:5f:1c:55:84:a3:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 15 04:00:00 2021 GMT
            Not After : Jan 29 05:00:00 2024 GMT
        Subject: CN=ac17db61-45f3-41a0-be0b-4b860beea7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:78:9f:07:27:31:3e:c5:f3:61:53:2a:da:
                    65:e2:60:c1:4f:de:89:64:fc:33:49:e8:87:22:a6:
                    71:98:9e:dc:f7:96:74:ad:9d:62:32:fe:3a:08:3e:
                    66:73:96:92:a3:7c:ef:7c:98:f4:f3:c8:85:b1:ff:
                    9f:31:c7:a2:84:65:d5:98:db:5b:e9:e9:85:a9:cc:
                    20:4b:9c:19:bf:57:ca:54:91:f8:9f:98:4d:0f:1a:
                    63:08:fc:a3:7f:1c:79:0d:50:ed:d7:3f:cb:e1:32:
                    ca:b7:a8:55:31:eb:7d:46:4f:39:ed:fe:37:40:c4:
                    ae:ee:9e:5d:e3:2e:5c:4a:dd:d0:5e:d8:42:be:5f:
                    0c:9e:70:c7:41:15:7b:ac:7c:6a:b0:d3:f2:ca:8e:
                    5c:2c:55:36:45:dc:e0:0b:40:c3:1f:3d:9c:67:53:
                    47:58:5c:01:86:8d:fa:d7:b6:1a:dc:fe:8f:c9:6a:
                    ad:ae:1c:49:f2:84:0e:53:78:2c:c4:11:e0:2c:e5:
                    66:b1:85:74:03:a5:61:fc:fc:bd:e3:76:cf:c0:f3:
                    a6:fb:a7:66:df:c3:d5:8e:28:29:17:8c:0e:48:38:
                    35:f8:7c:aa:04:96:e3:b0:f4:1a:c2:27:bb:40:b9:
                    01:87:cb:4b:05:bc:4e:8f:9e:42:d5:44:52:c2:a4:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:43:98:C7:92:EE:EA:D1:A2:5C:A8:94:B4:28:49:F0:AD:C0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/dbfa0835-e9d9-3ad8-9d0d-be39b39faf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:26:48:7e:3a:15:d0:74:82:76:94:b4:80:ee:14:fc:6e:
         4f:dc:0a:f9:27:62:95:8b:07:e9:d0:ee:4e:5b:75:af:b7:6a:
         3a:68:1f:6a:04:2c:a8:94:30:50:fe:95:69:78:d9:c1:6d:8c:
         7b:72:29:a2:00:0c:3e:11:9d:0b:9b:05:0d:30:e8:29:c4:a4:
         a5:29:0d:85:fc:00:01:dd:e1:51:24:95:7a:e4:f5:56:2a:c7:
         60:f6:92:09:0a:13:00:31:0f:fb:7a:c8:22:c3:61:91:08:30:
         6f:20:ae:99:33:2e:3f:20:74:d3:22:bb:40:c6:81:a2:12:f2:
         bf:4b:07:ef:3f:c6:34:cb:1b:5c:b0:c4:90:ca:94:e7:5f:9e:
         a0:ad:01:e7:cc:00:60:b4:57:3a:8f:48:39:02:41:29:b1:3d:
         58:ad:43:11:0b:59:bf:7b:db:9b:5b:fa:f3:f5:50:91:e3:16:
         1b:e9:f4:38:f7:38:ed:df:5d:9d:9b:f5:4f:eb:a8:00:18:66:
         9a:92:4a:75:f3:80:13:b9:a0:7c:2c:9b:a9:cb:48:bd:05:20:
         e6:1b:05:61:af:e6:d7:cb:af:21:1c:cc:c1:c5:52:82:d5:a6:
         67:00:e5:db:31:20:31:6b:b5:bd:bb:29:52:f8:7d:c8:e4:6d:
         9f:88:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----