Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c594b4c-8822-3921-a1b3-44f7a92073a0.roa
File:                     7c594b4c-8822-3921-a1b3-44f7a92073a0.roa (raw, json)
Hash identifier:          hjHqJoOK4j73lxuf567DpQMHC+VpZ32YrL0IfnrsrX4=
Subject key identifier:   7E:A6:D8:5A:20:B0:A0:D6:24:8F:72:F0:C7:62:07:FA:22:D2:9F:73
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B941CA0782B5218E6C7E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c594b4c-8822-3921-a1b3-44f7a92073a0.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.196.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:41:ca:07:82:b5:21:8e:6c:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d6ede30f-f517-441c-ae61-4c0c17a6ccdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:82:1d:0e:4b:5c:b4:d7:42:3b:4e:3d:8d:
                    eb:f2:43:08:a6:d0:71:22:3f:3a:02:ad:cd:8e:5f:
                    57:6c:a5:96:ec:e2:de:5c:50:cb:55:1c:d2:66:0f:
                    21:24:61:52:e9:ce:c0:73:b4:92:53:42:27:fb:57:
                    c8:c1:9e:f9:ab:37:4f:ef:52:e0:41:49:86:61:a2:
                    82:04:37:cf:18:75:fc:f9:a6:8d:08:c0:bf:3a:43:
                    96:f6:1f:cf:25:14:9c:16:88:75:19:25:77:4b:25:
                    64:16:07:96:12:23:fa:da:d9:6f:7f:68:31:04:94:
                    57:a5:c0:f0:3e:39:f6:c0:a8:4e:d7:02:ee:2f:74:
                    5f:50:e1:bf:4c:19:af:78:9a:f6:ca:64:04:41:34:
                    60:91:b4:76:ae:e3:42:a3:ad:49:fb:95:b1:56:a2:
                    bc:f9:6f:60:f8:6e:2b:24:d7:e6:d2:fb:da:1b:fd:
                    f7:e7:06:3f:65:42:22:8b:1d:15:ea:f3:db:c7:b5:
                    84:cd:c5:96:c6:e8:26:fd:1e:73:3d:b8:6f:f7:1b:
                    a9:65:77:31:ed:d3:70:4c:57:b1:48:80:af:d9:32:
                    47:54:95:e1:e8:50:b0:75:c6:18:42:cd:f9:0d:83:
                    d0:40:c8:5c:0d:96:6b:72:bd:b7:3e:09:09:d6:9c:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:D8:5A:20:B0:A0:D6:24:8F:72:F0:C7:62:07:FA:22:D2:9F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c594b4c-8822-3921-a1b3-44f7a92073a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:18:e5:e4:72:80:9c:e8:c7:77:e8:86:10:21:d5:46:60:55:
         b4:32:5b:4d:f2:67:39:b2:9d:72:06:b8:b6:65:55:f2:57:fe:
         b9:eb:38:ac:38:c9:f0:78:4d:80:38:d0:76:2a:6f:19:e2:51:
         64:f0:91:9f:3d:ff:e2:6a:32:fa:cb:64:7c:89:cb:c1:8a:d6:
         3d:6d:d9:8e:25:7a:01:60:2a:1d:1b:4f:57:2a:61:88:e4:39:
         9e:79:6c:dd:6e:24:3f:99:f6:c3:e9:06:be:ed:24:3b:2d:7c:
         50:e8:5b:90:7e:68:fd:37:ab:4b:c4:af:92:56:70:4b:08:4f:
         5c:9c:6c:8a:9d:7c:6d:bb:52:78:7d:20:9e:27:a1:9e:2c:0f:
         09:a0:a4:1b:38:4f:77:92:cd:91:01:e6:c6:b1:84:c4:db:52:
         37:4d:18:6c:2a:2c:57:2e:fc:21:e8:70:1d:1d:2d:a7:f9:18:
         87:5b:fc:f1:ad:3e:87:10:3d:f0:35:20:c3:b4:38:65:5a:74:
         97:2e:62:51:ee:e1:bc:76:10:99:be:67:1d:6d:1b:86:2a:5a:
         a0:f9:bb:8e:d6:31:af:7d:4c:19:d3:d3:81:b2:c4:af:aa:cd:
         3a:70:cb:3d:96:10:d6:33:b2:de:e0:53:0e:a1:66:da:e9:47:
         38:0d:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----