Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa
File:                     2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa (raw, json)
Hash identifier:          b5WrBodTbFh2bxqYSL3FVDeTC3iQxxfuVL1G5PrknpE=
Subject key identifier:   CA:5F:7C:7E:39:30:60:99:4A:C7:4B:9C:CF:3E:8C:E0:B4:61:E3:69
Certificate issuer:       /CN=77194d6a-d303-4561-96ca-9940e92f659c
Certificate serial:       010D0C9F4328583881103B3236DEDB9D03F938C0
Authority key identifier: 10:61:C7:0D:0F:3F:51:E3:62:1A:14:71:62:F1:E8:E3:7C:AF:86:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa
Signing time:             Mon 04 Jan 2021 05:00:00 +0000
ROA not before:           Mon 04 Jan 2021 05:00:00 +0000
ROA not after:            Sun 09 Apr 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        170.39.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:81:10:3b:32:36:de:db:9d:03:f9:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77194d6a-d303-4561-96ca-9940e92f659c
        Validity
            Not Before: Jan  4 05:00:00 2021 GMT
            Not After : Apr  9 04:00:00 2023 GMT
        Subject: CN=adc68d68-0aa1-4d66-a0fd-ea9543f2e896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a3:1b:4a:0c:6a:fe:d3:35:a4:e0:67:d8:ff:
                    bf:bb:c8:9e:9a:7b:40:3f:9f:e8:ba:b7:46:74:79:
                    c6:2a:ce:d2:81:42:dd:d2:9c:f4:c7:aa:c4:ae:08:
                    bd:43:5f:90:da:a5:42:ad:41:32:65:3b:80:31:cf:
                    bc:c6:70:9f:2d:62:06:3d:cd:d6:d8:85:0e:2c:6b:
                    5f:b7:c3:80:10:2a:0a:c9:fc:12:af:d5:4e:9a:35:
                    8a:27:70:22:de:b5:0a:ea:53:6e:f4:68:7c:ce:85:
                    a4:bc:be:40:0e:8b:88:ef:55:8a:17:74:98:1e:cb:
                    93:97:4b:d0:b4:38:c6:31:2c:44:92:94:1c:ac:9a:
                    e4:12:93:18:8d:df:2d:d7:14:c8:54:b9:ba:05:f2:
                    32:74:96:40:e9:77:f4:99:15:53:dd:07:c5:ac:29:
                    21:f3:bc:e6:0f:1b:81:64:26:9f:c8:cb:48:1e:bc:
                    a1:f4:d3:f7:7d:74:89:92:86:b9:9e:83:27:00:74:
                    9a:cc:23:a9:f3:bb:91:9f:5a:74:41:c6:15:41:17:
                    8f:9a:aa:2e:1e:ea:e2:6c:26:85:c5:de:c0:61:24:
                    40:44:b5:5e:af:6a:8a:8e:82:e1:fe:de:98:79:d5:
                    f1:97:be:a0:63:81:fa:ba:5b:b6:5a:32:05:17:80:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5F:7C:7E:39:30:60:99:4A:C7:4B:9C:CF:3E:8C:E0:B4:61:E3:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/77194d6a-d303-4561-96ca-9940e92f659c.crl

            X509v3 Authority Key Identifier:
                keyid:10:61:C7:0D:0F:3F:51:E3:62:1A:14:71:62:F1:E8:E3:7C:AF:86:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:60:df:74:22:2c:45:34:62:76:39:67:bc:d6:d2:ed:ce:5c:
         ce:ba:60:14:7d:d6:06:55:2d:73:ac:64:fe:99:89:81:b4:a5:
         78:68:70:a5:52:ff:21:ba:a3:7a:48:8b:17:77:b6:55:65:40:
         e0:fd:46:5c:13:bc:87:3c:d9:f4:0b:fb:20:0c:46:05:01:92:
         99:50:77:f1:1c:23:3a:6b:0a:bd:b8:77:f7:96:cc:f7:a7:70:
         16:04:75:7e:17:dc:46:ad:a3:d3:2c:1b:f3:71:42:e5:5c:d0:
         a1:ac:4c:8b:e1:bc:41:52:1c:d7:b9:88:43:bf:a5:d4:e5:8d:
         44:74:1c:df:46:f0:2e:0c:b9:35:a2:f9:2c:f4:2a:27:87:6b:
         3c:fa:ce:c2:6a:54:54:02:d6:3d:4d:9c:b8:83:f3:d2:b2:7a:
         2f:ca:36:3a:9a:96:66:fc:07:c7:af:17:32:24:ce:3e:3a:f6:
         06:42:a5:41:49:0b:0f:5b:0c:22:fc:07:27:d7:5d:2f:30:f8:
         55:74:48:c1:7b:1a:8d:f6:79:05:d8:e0:47:7a:6d:7c:ed:ab:
         69:64:f6:5d:4b:8b:ee:54:46:f3:8f:56:25:22:17:e4:3d:97:
         35:23:d0:49:58:86:b1:0c:d4:ff:89:60:f5:4e:05:e3:54:38:
         1b:ac:78:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDiBEDsyNt7bnQP5OMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzcxOTRkNmEtZDMwMy00NTYxLTk2Y2EtOTk0MGU5MmY2
NTljMB4XDTIxMDEwNDA1MDAwMFoXDTIzMDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YWRjNjhkNjgtMGFhMS00ZDY2LWEwZmQtZWE5NTQzZjJlODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaMbSgxq/tM1pOBn2P+/u8iemntAP5/ourdG
dHnGKs7SgULd0pz0x6rErgi9Q1+Q2qVCrUEyZTuAMc+8xnCfLWIGPc3W2IUOLGtf
t8OAECoKyfwSr9VOmjWKJ3Ai3rUK6lNu9Gh8zoWkvL5ADouI71WKF3SYHsuTl0vQ
tDjGMSxEkpQcrJrkEpMYjd8t1xTIVLm6BfIydJZA6Xf0mRVT3QfFrCkh87zmDxuB
ZCafyMtIHryh9NP3fXSJkoa5noMnAHSazCOp87uRn1p0QcYVQRePmqouHuribCaF
xd7AYSRARLVer2qKjoLh/t6YedXxl76gY4H6ulu2WjIFF4BqGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpffH45MGCZSsdLnM8+jOC0YeNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NzE5
NGQ2YS1kMzAzLTQ1NjEtOTZjYS05OTQwZTkyZjY1OWMvMmIzOTZmMGYtZWQ2Yy0z
NTIyLTkzYzctNWM1M2M3ZjI1NWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzcxOTRkNmEtZDMwMy00NTYxLTk2
Y2EtOTk0MGU5MmY2NTljLzc3MTk0ZDZhLWQzMDMtNDU2MS05NmNhLTk5NDBlOTJm
NjU5Yy5jcmwwHwYDVR0jBBgwFoAUEGHHDQ8/UeNiGhRxYvHo43yvhr0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NzE5NGQ2YS1kMzAzLTQ1NjEtOTZjYS05OTQw
ZTkyZjY1OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFg33QiLEU0YnY5Z7zW0u3OXM66YBR91gZVLXOsZP6ZiYG0pXhocKVS
/yG6o3pIixd3tlVlQOD9RlwTvIc82fQL+yAMRgUBkplQd/EcIzprCr24d/eWzPen
cBYEdX4X3Eato9MsG/NxQuVc0KGsTIvhvEFSHNe5iEO/pdTljUR0HN9G8C4MuTWi
+Sz0KieHazz6zsJqVFQC1j1NnLiD89Kyei/KNjqalmb8B8evFzIkzj469gZCpUFJ
Cw9bDCL8ByfXXS8w+FV0SMF7Go32eQXY4Ed6bXztq2lk9l1Li+5URvOPViUiF+Q9
lzUj0ElYhrEM1P+JYPVOBeNUOBuseC4=
-----END CERTIFICATE-----