Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/c8b516ff-bcf3-3797-847e-4b593d78127c.roa
File:                     c8b516ff-bcf3-3797-847e-4b593d78127c.roa (raw, json)
Hash identifier:          L43tGjJu11lR86qeNB7mBXtcXnX2BIpAQ9S/LXukX6w=
Subject key identifier:   61:FE:53:8C:A2:71:59:DD:92:73:4B:27:88:38:B5:68:4E:5F:26:A4
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F43285839114AB74BF9A550A501B55A80
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/c8b516ff-bcf3-3797-847e-4b593d78127c.roa
Signing time:             Wed 24 Feb 2021 05:00:00 +0000
ROA not before:           Wed 24 Feb 2021 05:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     396065
IP address blocks:        205.157.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:11:4a:b7:4b:f9:a5:50:a5:01:b5:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Feb 24 05:00:00 2021 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=50a2c56a-0678-4b6f-99a2-0ddb7d4fefd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:7e:20:f2:65:93:3c:31:a5:35:45:ee:a5:
                    d2:2c:51:a0:9a:24:d8:68:da:d1:62:b0:4b:4d:4a:
                    ab:a7:77:78:8d:60:06:a1:43:89:98:6a:1d:94:e4:
                    ec:b4:e2:27:b8:bd:ae:c9:1b:e5:13:60:e0:bd:ce:
                    85:3c:d1:31:7e:51:e8:94:f7:d6:2a:23:76:75:51:
                    33:36:63:ab:a9:99:f2:f0:2b:de:08:10:3d:cd:b7:
                    b6:d3:b8:04:cb:cc:28:f9:f3:42:fa:0c:9d:f3:ea:
                    95:72:6e:82:6b:a8:49:cb:e9:47:81:98:51:eb:cc:
                    9b:a6:c8:8c:7d:9a:7b:96:9e:e7:78:de:ad:15:e4:
                    68:83:fb:c0:88:32:c1:80:bb:14:bb:f4:a3:3f:40:
                    b0:65:dc:33:c0:cf:75:00:b7:7e:ba:e2:a2:5e:18:
                    77:4c:56:fe:60:9e:19:85:bb:ec:98:b5:37:97:c7:
                    5c:05:33:13:4b:a2:cd:7e:69:1e:10:3c:4c:ee:c8:
                    03:0b:a4:8d:4b:48:c0:b2:9b:24:25:e0:67:be:7a:
                    6a:50:06:a9:65:bf:30:6c:71:bf:43:54:d1:dc:d6:
                    26:46:e5:56:cb:44:bb:be:55:a7:e0:2e:7a:6d:08:
                    59:80:51:8c:5e:f9:ef:43:f6:aa:80:91:fe:25:eb:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:53:8C:A2:71:59:DD:92:73:4B:27:88:38:B5:68:4E:5F:26:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/c8b516ff-bcf3-3797-847e-4b593d78127c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:9f:d5:48:b3:0a:21:c5:e6:35:bf:86:8e:d0:4f:55:49:
         44:f0:f4:6d:56:82:4d:d5:0d:a4:3d:6d:de:46:60:ad:fc:8d:
         f5:ee:bf:41:b6:5f:ca:6f:ab:74:2c:b4:e2:8f:33:e5:fc:1b:
         9c:ee:9c:41:3a:a0:8c:52:d0:6b:e6:ce:7a:05:ac:84:26:8e:
         ab:dd:ee:80:16:88:25:07:69:cb:28:48:7f:2d:7e:7d:61:4c:
         3a:46:a9:b2:32:99:65:84:9f:be:b4:29:e0:b2:b2:44:a3:dd:
         f8:d7:61:e4:8c:21:9a:49:a9:16:63:c5:8f:45:32:40:06:be:
         f3:a9:86:12:02:85:01:99:96:63:d8:de:f3:e5:55:64:fd:e7:
         78:e7:3c:24:5c:f2:36:4c:97:da:b1:a8:5d:b1:f7:c2:59:2f:
         bf:76:cf:e5:2c:98:40:37:0d:97:79:4b:41:27:43:ac:32:26:
         71:78:00:1c:85:7c:91:c3:3a:a8:57:a0:06:cf:3b:e1:25:15:
         f4:3e:a5:27:77:99:5d:b8:5c:99:65:c9:f6:35:a4:ed:c0:2e:
         1a:3a:f4:9a:a8:79:7c:8b:24:6c:64:7e:87:9b:2d:b3:f9:6a:
         7d:12:d3:f0:39:2c:4c:3f:0c:02:8a:17:e7:64:85:90:e0:c7:
         c8:2f:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----