Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/654f4f7e-d747-31c6-88f8-4d8e11c1f38c.roa
File:                     654f4f7e-d747-31c6-88f8-4d8e11c1f38c.roa (raw, json)
Hash identifier:          CuBFg5uduHf/Oq3/aXeuTR3i5heBBdbwt+Zvarzv2AM=
Subject key identifier:   B3:A2:72:86:47:EF:9A:67:52:D1:49:99:D3:C8:60:65:5A:A1:33:0E
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583BD2BC2EB1AFE3FF4C025C8AE0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/654f4f7e-d747-31c6-88f8-4d8e11c1f38c.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Wed 30 Aug 2023 04:00:00 +0000
asID:                     55293
IP address blocks:        200.69.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:d2:bc:2e:b1:af:e3:ff:4c:02:5c:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Aug 30 04:00:00 2023 GMT
        Subject: CN=f899a474-0278-41c0-b44d-d5438a11bc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:13:c5:69:c1:c8:0f:73:dc:04:b7:34:9b:51:
                    50:70:98:c4:29:60:c8:74:8e:96:ab:a4:b4:26:e0:
                    04:ba:e2:6f:da:6b:09:dc:a6:1e:67:e2:5f:cc:70:
                    ac:51:59:57:37:bf:fb:2e:45:d1:4e:c7:8e:23:f9:
                    ca:55:7b:19:1f:58:02:e8:4f:d5:4d:5d:6c:69:7e:
                    04:cd:20:86:d3:7b:03:fa:e0:98:05:a5:f5:cb:9e:
                    c2:13:93:cd:7a:a8:67:97:de:2c:75:f3:01:47:3a:
                    a8:0c:58:84:e9:03:ab:a0:6f:0f:a3:e8:86:a2:40:
                    19:00:cb:b4:18:e5:b2:fa:d4:ac:ad:44:77:62:7a:
                    14:f1:91:74:55:4e:a1:a9:f0:5c:51:99:34:73:84:
                    6d:6a:ca:af:df:99:e3:b8:a1:c0:df:56:91:26:d3:
                    16:d2:9f:ed:93:89:53:12:21:b5:c9:25:40:97:5d:
                    54:99:0a:26:b8:21:bc:3c:06:50:31:5b:c5:f9:d0:
                    e9:0a:59:f0:c0:53:79:18:8c:0b:15:4c:78:7d:65:
                    a2:87:4d:71:79:64:e8:ea:5a:ed:c5:6e:c4:3c:e7:
                    2e:a4:a8:d9:ab:b1:f8:44:ac:65:a1:d8:71:13:14:
                    17:1b:3a:da:34:d8:49:66:09:e9:a1:10:e6:4b:27:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:72:86:47:EF:9A:67:52:D1:49:99:D3:C8:60:65:5A:A1:33:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/654f4f7e-d747-31c6-88f8-4d8e11c1f38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:c3:20:df:50:6b:eb:ca:2a:c1:aa:0e:dd:24:75:f0:41:
         44:f0:3d:a0:c7:e9:42:c7:a8:8a:2e:e6:e5:1c:1d:fe:e0:ab:
         86:40:67:26:1e:9d:aa:2e:ec:1d:94:64:29:ed:4c:5c:69:d9:
         c0:ff:60:cf:76:39:f4:69:ed:c0:76:51:ea:65:8c:1e:26:03:
         ae:50:3a:b4:c1:cb:3d:1c:84:69:2d:74:53:1c:b5:71:e8:9c:
         a4:03:67:9b:66:33:9d:0a:60:62:fd:34:3c:58:33:c2:d6:6d:
         0d:50:9d:ab:56:c2:d9:b5:68:de:84:f9:aa:a6:35:fe:eb:88:
         8f:5c:47:1b:8b:97:c5:0c:8e:bd:5f:ed:35:5c:62:ac:1f:23:
         b8:5d:6d:f7:d4:e5:ae:2d:9f:e5:d5:0f:1a:0e:e1:df:d3:bc:
         76:44:60:c6:32:0f:a2:e6:a2:5d:d7:65:82:aa:c4:39:82:37:
         cb:4f:fa:4a:e6:35:af:28:db:55:8f:b4:6d:ac:ca:01:c8:29:
         fe:75:3d:b6:2a:bb:95:89:df:6f:48:93:c1:65:b8:3c:32:87:
         b9:32:75:9e:8c:9a:fc:83:0e:a1:fe:97:7c:c6:89:c6:c2:b5:
         cf:e1:5e:e3:4a:95:cb:b1:74:15:07:6d:17:b4:16:c1:29:4f:
         cd:70:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----