Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2b4893c9-0f89-35c8-8a22-9d3b1868f268.roa
File:                     2b4893c9-0f89-35c8-8a22-9d3b1868f268.roa (raw, json)
Hash identifier:          E0+tTJAYGTUO6H9PP7uNka+j9IhRQQyy1G2IsmLuCwI=
Subject key identifier:   50:EA:C1:CC:68:BF:B2:41:D9:DF:A7:E2:A6:81:C8:13:42:EC:68:51
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285839F9DDC481E5C8D97287DAC0D0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2b4893c9-0f89-35c8-8a22-9d3b1868f268.roa
Signing time:             Tue 18 May 2021 04:00:00 +0000
ROA not before:           Tue 18 May 2021 04:00:00 +0000
ROA not after:            Fri 22 Dec 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        130.254.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:f9:dd:c4:81:e5:c8:d9:72:87:da:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: May 18 04:00:00 2021 GMT
            Not After : Dec 22 05:00:00 2023 GMT
        Subject: CN=fde768db-d902-4c16-94d8-583024ee8152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:27:f9:ef:64:ea:9e:e0:6c:3d:04:f6:a2:
                    d1:85:52:2f:00:9a:b8:3b:22:e8:c8:f3:04:8d:c5:
                    14:04:53:f4:5b:c3:26:bc:ee:53:09:e1:29:88:0f:
                    08:cc:cf:f9:47:36:c5:63:a2:94:06:de:bd:37:9f:
                    91:54:85:68:7d:3c:12:36:e5:91:8a:2a:a4:36:a7:
                    53:5a:cb:36:6e:d4:89:b7:50:82:83:3f:be:82:59:
                    87:ec:c5:9c:41:a0:72:6e:b2:cf:bd:90:c6:1f:71:
                    6a:41:f7:1f:02:de:b1:aa:c5:ba:9a:42:ce:e9:a6:
                    7e:49:56:a9:ba:f7:5a:b8:34:a5:43:38:4e:a0:75:
                    b2:c6:c0:a2:8f:cf:cd:da:f0:88:92:0a:1b:c2:3c:
                    8a:82:11:bf:74:de:13:d7:4f:94:e6:80:65:7f:b7:
                    30:df:6d:8a:75:b9:71:62:4f:a7:ea:fc:39:bd:41:
                    7d:b7:c2:e3:6f:ba:4f:24:29:d7:81:51:91:81:1e:
                    db:de:4a:84:a1:98:f6:ee:cc:c3:6d:ad:55:71:7d:
                    3d:00:0e:61:df:2a:15:17:d3:d0:66:2b:52:e5:a8:
                    d1:93:7e:60:9c:b8:1b:a8:c8:9f:c9:6a:51:7b:52:
                    31:6e:5f:63:4f:45:32:fd:a7:6f:00:6b:42:db:2b:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EA:C1:CC:68:BF:B2:41:D9:DF:A7:E2:A6:81:C8:13:42:EC:68:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2b4893c9-0f89-35c8-8a22-9d3b1868f268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:78:05:68:53:c6:15:55:f2:fb:ec:3b:04:27:8c:77:8b:85:
         4d:0b:c6:f4:24:4c:fa:b4:40:c5:ce:26:2a:98:7c:c5:c9:61:
         1e:ec:f0:30:92:ff:7c:55:0c:cd:84:c3:8c:e1:ba:a3:55:9f:
         99:57:d9:f7:33:1c:68:bf:c8:b7:cc:3d:b8:69:61:ce:2d:8a:
         72:2b:79:74:34:7c:e3:3a:4b:b6:68:f8:6c:f9:63:7d:34:d2:
         53:79:86:3d:88:e4:16:88:3f:3f:37:db:fc:04:05:3d:36:04:
         b8:5b:b5:96:5b:f9:0f:56:fe:7d:3e:3d:80:f7:25:b5:4b:7a:
         be:05:59:77:a0:14:0b:9c:4a:57:e9:80:48:e4:af:b2:5f:ca:
         31:1f:e2:53:6c:25:e3:97:45:1e:5a:f0:28:af:4e:1d:34:b6:
         82:9e:b0:07:36:f3:cd:67:09:41:bf:6c:d4:92:95:4c:21:b3:
         7f:43:9d:a6:a6:1c:83:c4:32:17:12:47:bf:1c:cc:9d:7b:4e:
         f3:dc:64:d4:7f:02:c5:f2:3d:2c:cd:90:2c:e8:25:2c:d1:26:
         f9:b1:16:27:ed:5e:52:c7:35:aa:a5:79:8b:c0:64:91:e7:ad:
         96:23:eb:aa:48:24:42:61:15:81:3b:65:1e:31:89:19:7f:02:
         8d:49:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----