Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/fde4324c-3c7f-3e68-97e5-3529a8767c1b.roa
File:                     fde4324c-3c7f-3e68-97e5-3529a8767c1b.roa (raw, json)
Hash identifier:          GYcE2YjCdFUr3cswXUfA1UNWzJFuNGiieCNJ7bBWEIs=
Subject key identifier:   32:6B:F8:46:1E:09:7A:CD:62:7A:46:8B:BB:1B:E2:B9:F2:D5:F1:FD
Certificate issuer:       /CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
Certificate serial:       010D0C9F43285838FA20D640F3A348718D9FB480
Authority key identifier: 74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/fde4324c-3c7f-3e68-97e5-3529a8767c1b.roa
Signing time:             Thu 14 Jan 2021 05:00:00 +0000
ROA not before:           Thu 14 Jan 2021 05:00:00 +0000
ROA not after:            Fri 21 Apr 2023 04:00:00 +0000
asID:                     399248
IP address blocks:        198.207.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:fa:20:d6:40:f3:a3:48:71:8d:9f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca55544e-ec3b-4452-8f13-dcb54ad7f4ec
        Validity
            Not Before: Jan 14 05:00:00 2021 GMT
            Not After : Apr 21 04:00:00 2023 GMT
        Subject: CN=69a0076c-9320-47e5-bfb2-63655236b44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:7e:ff:d4:93:0e:c0:39:48:e2:be:1f:6f:
                    2c:a5:f7:4f:5a:92:46:51:30:78:67:04:c9:14:f0:
                    69:40:d9:ec:3e:ce:56:6c:24:7c:f4:1b:46:a8:21:
                    89:ac:ba:1c:1d:7f:64:99:54:11:62:97:30:dc:f0:
                    f1:0e:34:4d:08:10:65:7e:2f:30:6f:1d:7d:ed:36:
                    94:b6:c9:f9:69:e2:e9:ee:07:cd:33:af:04:5f:80:
                    e3:aa:ea:11:6e:d3:45:23:6a:91:3e:84:8d:37:0d:
                    23:81:e5:23:e2:0b:45:a7:3c:10:3e:5b:f7:26:25:
                    c6:da:45:59:fb:4b:c2:43:d4:c0:63:1d:b2:60:1a:
                    20:6c:98:49:bd:85:33:98:fc:aa:e6:c2:a8:15:15:
                    cf:78:98:f4:4b:98:6d:16:27:94:a8:77:3c:ff:5d:
                    ab:e1:4e:79:fe:9c:16:b8:18:40:b0:17:8e:f6:db:
                    ad:4c:f0:0e:25:05:da:b4:bb:2d:3f:38:e6:c7:cb:
                    9f:08:17:a4:a2:b8:3f:3d:8b:15:06:9e:41:7d:e6:
                    ed:cc:e0:87:78:54:e4:69:3f:7d:19:70:14:6c:5f:
                    c5:46:9b:31:3a:11:ae:bf:5e:9b:48:13:f8:d6:af:
                    72:89:6d:99:d8:26:46:65:a2:47:fd:70:91:70:48:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6B:F8:46:1E:09:7A:CD:62:7A:46:8B:BB:1B:E2:B9:F2:D5:F1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/fde4324c-3c7f-3e68-97e5-3529a8767c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:2E:34:FF:2B:04:3F:7A:C9:15:F4:94:2B:53:76:65:9F:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ca55544e-ec3b-4452-8f13-dcb54ad7f4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:d1:b3:9e:b3:c8:14:c5:0d:21:f6:fc:2c:e5:3c:76:ae:
         64:51:c3:70:30:64:43:d8:f5:7b:21:1a:83:88:a4:31:e5:d1:
         fd:6d:90:1a:db:86:ea:e0:af:26:e9:76:e1:4c:f2:48:69:b1:
         b6:69:e0:22:4f:8b:50:c3:a3:1e:d6:0b:fb:02:7f:5e:81:88:
         30:38:9f:bb:03:b5:a8:e1:76:cd:04:4a:07:f8:c5:56:ac:39:
         1f:ea:ae:4a:ed:bc:e5:24:cf:e6:8d:9b:10:29:ef:a9:1a:97:
         4f:2f:66:ca:53:b0:0e:93:0d:e9:92:f8:6f:92:fe:c8:24:dd:
         6f:6b:a5:68:0f:ee:5f:a1:24:d9:25:10:f2:83:e1:f5:26:a8:
         85:8d:73:79:4a:76:84:f9:1b:7c:24:f5:12:1c:91:cb:a5:b7:
         43:8d:83:ae:8a:11:39:42:39:f6:59:57:2b:60:f8:65:fd:1d:
         87:ba:ac:45:4a:cd:54:a0:09:bd:87:8e:16:61:41:7e:b5:ac:
         e6:f5:03:37:8b:29:f6:8e:95:4e:f3:cf:f9:70:89:23:01:53:
         87:af:1b:f8:3e:4a:1e:c6:07:21:e4:6a:45:61:f6:58:06:15:
         cd:e7:be:78:9b:a4:8d:22:d5:c6:92:c1:4c:87:4b:f9:49:71:
         2e:f7:c9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----