Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/acfdc16b-4aa6-3e93-964f-3ceba480c272.roa
File:                     acfdc16b-4aa6-3e93-964f-3ceba480c272.roa (raw, json)
Hash identifier:          fknYCtFJNqCMzR8hiBQusNX9DCyRHN9Wq0u6YGD4NUM=
Subject key identifier:   BC:1E:97:86:85:3C:22:F2:9D:29:A3:7F:9B:BD:A0:7F:B7:BB:34:3C
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F432858391149B25D317B4CD3D65B9280
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/acfdc16b-4aa6-3e93-964f-3ceba480c272.roa
Signing time:             Wed 24 Feb 2021 05:00:00 +0000
ROA not before:           Wed 24 Feb 2021 05:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     395104
IP address blocks:        205.157.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:11:49:b2:5d:31:7b:4c:d3:d6:5b:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Feb 24 05:00:00 2021 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=e2fbf0b1-7796-4b18-9125-682fde96b599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:35:d1:4a:4c:0a:10:a8:f9:8c:8a:f1:a0:
                    d6:dd:bf:b4:7d:f1:6c:0a:4e:a9:f5:41:f1:36:29:
                    5e:e2:9a:1f:30:bb:de:d6:d0:ec:b6:ba:68:ca:92:
                    c8:7e:88:e5:78:b3:48:d7:7e:02:b6:57:97:b2:8a:
                    81:7f:0c:70:75:43:b1:b3:cd:54:29:4d:a3:6d:d8:
                    a3:25:92:08:c8:86:be:8c:b6:f3:5e:77:dc:3e:ea:
                    58:db:a7:e5:9a:98:5f:74:b0:ab:03:ae:4d:7c:82:
                    25:71:09:29:fe:e5:16:19:27:b7:a3:97:a7:9a:f7:
                    3d:ae:36:ff:fb:ed:d6:59:1c:20:bd:a1:6c:b4:31:
                    97:2c:d0:0d:98:5f:40:29:61:f6:9f:38:c2:3c:2d:
                    09:d3:b8:7d:cb:5f:59:3c:a5:15:1f:2e:fb:f0:2f:
                    61:3e:97:27:45:aa:ff:29:a9:e9:c8:a1:65:c4:27:
                    4d:6c:eb:b2:4b:14:4b:86:7c:60:2f:2e:0c:4c:4c:
                    37:fc:64:df:ca:a3:95:7b:6f:85:9b:20:c7:69:ba:
                    dd:26:f8:e8:b4:d9:54:c4:10:e7:c9:20:97:67:38:
                    81:5d:89:28:93:d2:4f:7f:bd:2e:5c:cd:d8:f6:ce:
                    7a:30:ea:eb:fa:52:de:80:30:02:2a:22:fb:bd:75:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:97:86:85:3C:22:F2:9D:29:A3:7F:9B:BD:A0:7F:B7:BB:34:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/acfdc16b-4aa6-3e93-964f-3ceba480c272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:6b:2e:a7:d6:78:13:22:ff:98:7d:09:e6:48:54:f0:9c:cf:
         b7:4a:e3:d3:89:50:d7:79:5f:bf:fe:d3:83:6a:56:b7:f7:1b:
         b4:1a:06:51:33:25:77:cf:b6:0e:61:f9:6b:c4:5a:a3:0b:ad:
         60:2c:c5:4f:77:f3:da:dd:0b:0a:44:fb:dc:23:91:42:1f:07:
         ac:50:ce:4b:b5:6b:fd:8a:72:ed:fe:0a:c6:f9:7b:07:f6:8a:
         4b:84:07:c3:5f:e6:ec:a3:0d:ce:b2:14:2d:83:9f:68:5d:1d:
         d1:14:3d:30:63:ad:4e:be:8f:25:f0:d0:62:23:22:14:d8:63:
         9d:4a:e3:e2:4a:f2:10:54:e0:b1:21:72:be:e2:70:d7:f8:b5:
         03:be:8e:29:e8:7b:d8:75:31:41:70:11:3a:3d:8e:56:02:10:
         fe:fd:41:17:a6:43:4a:67:17:da:44:8c:87:23:39:14:0a:7e:
         40:46:86:34:ee:44:4d:d6:a9:b9:5e:38:7e:9e:c6:27:cb:63:
         9a:10:02:ff:34:f7:b2:f1:02:74:64:b8:7b:dd:3b:42:ca:68:
         00:f3:cd:2d:dd:3b:00:03:f0:15:8d:08:b7:ec:53:66:66:69:
         05:e3:1a:9b:85:e2:83:2a:24:bb:ed:ac:33:ed:7a:49:b3:4a:
         a4:0f:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----