Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29660955-1952-30c1-b11b-900a059fa953.roa
File:                     29660955-1952-30c1-b11b-900a059fa953.roa (raw, json)
Hash identifier:          znpPFXAnVBaG6Qqxkf6ECMNYEJkEjxbYQ6JMI03oWy0=
Subject key identifier:   C0:7A:91:80:F5:9C:C1:C4:17:92:5F:49:2D:AB:51:26:6F:75:C6:1C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7ABE8942DB26B9C0F963980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29660955-1952-30c1-b11b-900a059fa953.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        172.253.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ab:e8:94:2d:b2:6b:9c:0f:96:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f085d78a-edc1-4d3c-ac96-fa03e66b658e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:2b:a8:a4:05:2e:5b:bc:f3:f3:ae:1a:13:
                    e9:cc:c6:35:c6:1e:ce:65:7e:2c:e1:81:f6:d4:d8:
                    7e:78:41:73:0e:67:49:59:f0:29:51:9d:9b:f1:30:
                    90:dd:23:2b:6d:68:1c:d1:83:f9:df:03:4b:d3:28:
                    27:ec:a9:d3:96:ae:f8:df:a7:9f:29:d4:1b:2f:04:
                    83:c7:2f:59:aa:f0:74:71:4b:d4:7f:85:c7:c8:2d:
                    75:f2:71:7f:0d:b9:97:81:43:d4:33:07:cc:17:81:
                    37:22:66:89:e0:21:9a:ed:ed:98:0c:41:35:e3:30:
                    10:47:08:85:75:e5:0f:40:43:5b:d4:c9:ea:83:be:
                    74:d1:d3:36:ec:1f:bc:50:1d:a9:5f:a2:98:4d:65:
                    41:3d:f6:45:81:60:9a:2c:bd:67:4d:57:16:30:83:
                    9f:e9:31:82:37:da:a2:b3:83:6f:8c:a7:88:30:fd:
                    11:ce:6c:26:d0:8b:71:b2:00:f1:f0:bd:8e:23:d3:
                    07:06:c6:e2:70:fd:ea:2f:71:36:9e:30:f3:01:cc:
                    0c:bc:a1:88:65:31:67:89:3b:04:5f:1b:36:0b:7f:
                    23:9b:07:de:91:f1:75:6c:29:d1:77:a5:44:db:34:
                    8a:c6:0a:9e:b1:4a:47:4d:d8:98:45:24:38:22:b3:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:91:80:F5:9C:C1:C4:17:92:5F:49:2D:AB:51:26:6F:75:C6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29660955-1952-30c1-b11b-900a059fa953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:88:5f:1a:5b:44:21:4f:b4:4c:4d:8b:b1:59:ad:dc:af:ae:
         e8:6f:46:d3:88:84:a1:81:e9:e6:d2:bb:7f:50:dc:3c:30:44:
         49:fc:15:c0:ad:a7:71:10:65:92:f0:c7:22:a0:d0:73:cf:de:
         af:ad:37:a9:b8:6e:fc:35:ac:67:69:ba:86:91:cf:0a:f9:07:
         fd:ba:a3:e1:4c:86:bf:76:b1:99:a4:63:1e:20:2d:fe:7e:03:
         93:3c:6f:ca:33:1d:5b:a3:08:31:86:e9:64:bc:f0:06:93:fd:
         9c:c3:c2:0b:c1:3d:06:1f:8c:ea:4b:e9:97:ae:4a:01:46:34:
         1f:a7:1c:60:a5:8d:ca:7a:55:20:c3:fc:10:33:0d:72:cc:f5:
         4f:3e:e0:8e:44:1a:7d:32:e0:47:21:d0:69:a5:f4:57:0c:de:
         47:fe:c7:5a:64:01:ea:e0:c1:f8:78:6b:7f:e7:62:94:ad:d4:
         7b:3f:52:2c:99:df:fd:ad:8c:21:3b:55:0b:6a:c7:fe:d4:aa:
         9a:4b:52:f1:43:a6:c7:fd:00:27:b3:83:b0:0e:63:c9:b9:e9:
         4a:44:c1:23:45:c2:fa:86:46:24:a9:ed:ab:89:20:aa:44:92:
         ac:a0:3e:56:b9:2a:4f:70:08:64:bd:a8:cc:6c:61:07:18:7e:
         3b:63:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----