Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa
File:                     cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa (raw, json)
Hash identifier:          e10pUTkpcDEO/DKc8Qm/d/ecl06tJhthStEj2HAROns=
Subject key identifier:   C8:A4:B7:D6:7B:F3:87:AC:35:CA:52:A7:A6:85:E8:88:BA:9F:08:79
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7C0E9CCDE833656E1A5B200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:e9:cc:de:83:36:56:e1:a5:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a356fcf3-0333-48d2-a9f0-cb37a5233bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:99:42:a6:3e:e2:d3:fc:e4:f3:36:be:3a:
                    94:70:04:05:59:80:f1:f3:56:e5:a4:80:78:4b:a9:
                    de:94:6e:c3:5f:30:9c:a7:d7:01:2e:41:78:d5:aa:
                    e8:ce:f9:95:ae:b8:e8:49:e8:f2:c8:2a:b7:1f:db:
                    8b:44:19:99:47:b5:ec:91:63:88:d5:0c:25:2c:ea:
                    d2:08:de:ff:3f:e9:c1:b1:10:dd:05:13:8d:00:34:
                    ae:6e:78:84:4f:ba:43:2d:79:70:76:d2:f7:d2:d7:
                    95:b2:a6:31:4d:8f:35:47:4c:34:5b:3d:49:d1:30:
                    76:ec:c7:87:9f:1d:4a:8d:f3:a7:29:e0:d5:b8:48:
                    fd:fc:65:a8:20:a6:96:f1:e7:b5:33:3d:0b:a6:88:
                    17:64:d1:a1:38:df:b5:6b:32:5f:6d:92:89:46:56:
                    45:da:79:fc:ea:4a:b8:67:23:f5:00:4e:7d:94:c1:
                    e6:3f:3e:77:bb:1f:b0:01:f3:ae:b4:c1:37:37:ed:
                    4b:54:33:0f:dd:5d:f8:b8:48:92:79:17:9a:ea:33:
                    78:de:9a:d4:2a:04:e7:1f:5a:b8:71:dc:c3:f9:53:
                    29:b0:a5:91:49:84:e2:ba:44:5b:a1:eb:36:d2:d8:
                    06:d7:5c:bf:ae:bc:e7:f3:76:b7:c7:75:e1:24:f1:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A4:B7:D6:7B:F3:87:AC:35:CA:52:A7:A6:85:E8:88:BA:9F:08:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:f6:75:e8:ce:46:20:91:16:25:db:65:53:fa:71:25:f1:
         5b:5a:a7:8f:41:bd:71:db:58:3a:ba:cf:0f:f0:38:21:8d:92:
         d7:93:ec:13:91:69:7d:0d:1e:ed:24:46:13:48:01:2d:cc:36:
         92:95:f1:6b:5a:0a:a3:ad:d7:b9:71:25:6d:56:24:ec:c6:b8:
         e5:a3:8b:bb:50:69:f0:b8:d7:31:a1:8a:3e:ea:87:5f:93:3b:
         ee:67:e2:8e:d1:1a:5d:22:e8:b0:62:76:77:d2:60:c8:64:3b:
         b5:46:8c:c1:16:dc:8f:26:7c:c3:e1:09:3d:2c:48:06:ca:a9:
         5d:50:fb:83:0f:89:53:fa:3f:2c:02:03:57:0a:b4:b8:b2:61:
         a0:3d:d3:ac:04:57:3c:0a:fd:52:24:f9:8e:2d:32:5f:db:05:
         9d:44:79:bf:61:c8:3b:2a:84:6d:5c:88:f4:eb:1f:a8:2d:e1:
         cf:b5:ec:b9:65:ae:1c:a6:c9:72:ca:5f:f6:52:e6:55:60:9f:
         4f:89:0f:e7:5f:32:78:74:6e:d8:96:5b:62:ca:c2:30:be:a8:
         3b:2d:94:a1:02:09:43:cd:28:b1:16:8b:09:cd:3c:19:ab:f5:
         e3:47:53:16:9e:e9:fb:5c:4e:8e:b9:d2:5f:b0:98:ac:81:b7:
         d1:0d:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----