Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/671c888e-4c06-38d2-ab38-b3ae0b675658.roa
File:                     671c888e-4c06-38d2-ab38-b3ae0b675658.roa (raw, json)
Hash identifier:          WjPHsc708AZomrPo6Wbt41vpA44bqSkgIDa+9Va4YIw=
Subject key identifier:   FC:5B:91:42:49:B4:C3:C7:FD:B7:3E:3F:05:CE:8F:1B:4B:70:EB:63
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285841E46E196E8DB94808E38CA840
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/671c888e-4c06-38d2-ab38-b3ae0b675658.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 19 Jul 2023 19:38:27 +0000
asID:                     21743
IP address blocks:        64.84.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:19:6e:8d:b9:48:08:e3:8c:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 19 19:38:27 2023 GMT
        Subject: CN=69cc1b6b-9749-4e28-be8c-52bd71803b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:80:7b:69:1a:05:98:14:58:dc:73:4e:4d:
                    85:af:d8:3a:a3:c9:a8:88:9c:8a:6e:34:79:24:f7:
                    b4:fc:0e:34:1f:ff:e7:7f:3f:94:84:19:08:09:65:
                    2d:ed:81:b8:d2:37:a2:68:63:e6:68:d6:00:0e:19:
                    ac:37:ec:3f:bf:b9:10:d0:d7:99:1b:53:b6:b7:ad:
                    f1:f2:dc:00:d6:3e:4b:1b:be:fd:2c:89:79:22:1f:
                    b8:f1:6c:00:f3:75:aa:04:bf:79:10:ac:23:b5:5c:
                    88:a4:75:66:06:93:de:a4:2b:21:09:ee:e7:db:19:
                    30:49:21:f9:ce:66:29:b0:fe:d9:b2:48:8b:a4:fd:
                    21:37:ac:7b:3f:8b:94:c8:02:64:33:bf:ec:22:0d:
                    be:a0:6d:73:da:e2:80:58:7a:82:28:e4:c7:9d:02:
                    27:bf:b7:86:be:d7:1a:df:c5:6d:04:2c:13:8b:c5:
                    a8:b3:8e:46:64:a3:b0:aa:f3:7f:38:a3:df:84:be:
                    1d:f9:16:52:53:dd:17:1d:5f:cc:76:57:42:d2:16:
                    22:cc:cb:a5:8a:d1:8c:82:2c:c6:40:a0:b5:a8:75:
                    1f:21:f9:fe:a2:ae:68:0d:4a:3b:54:97:65:eb:24:
                    3e:19:29:97:3d:06:4b:3a:fd:d0:55:0a:b4:78:42:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:91:42:49:B4:C3:C7:FD:B7:3E:3F:05:CE:8F:1B:4B:70:EB:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/671c888e-4c06-38d2-ab38-b3ae0b675658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1e:98:a7:e5:00:86:cd:6c:f0:61:53:9e:91:2c:a4:a3:78:
         91:fe:86:c3:e1:97:1f:b2:64:e5:2d:72:fa:d1:81:27:13:e4:
         db:53:01:1e:c7:8d:19:2e:dc:2b:2e:01:a3:50:bf:a0:e0:1d:
         b3:34:9a:0f:16:02:cc:b8:7d:06:b2:e2:ea:09:2b:4a:a6:61:
         15:36:83:c1:b8:87:11:93:66:c4:02:25:b1:70:e8:5f:38:bf:
         04:c1:c5:f1:35:6d:d2:97:46:ed:14:87:79:47:d8:71:33:8f:
         4d:91:3f:bd:0d:23:39:d5:08:8c:05:9c:59:5c:d6:3c:02:32:
         a7:54:d5:14:7a:3d:80:05:5f:c9:d0:be:01:16:67:7f:48:fe:
         f0:93:45:99:16:29:b8:c4:10:4c:ea:6b:c6:09:58:27:62:e2:
         e5:80:7d:57:3d:27:0d:32:bd:c0:40:de:e2:50:36:4c:28:cb:
         71:b1:ad:20:f9:1a:3b:30:e9:61:a3:b0:87:db:ef:38:4c:62:
         00:e8:3f:43:ba:ec:dd:e6:da:0b:06:15:9c:bf:db:44:74:09:
         43:8b:81:97:ce:e6:f1:f8:a1:e6:87:7e:e2:eb:b9:7f:44:ea:
         11:6b:72:20:44:4f:74:a0:89:13:fd:5f:f6:0b:1d:e0:3a:eb:
         43:58:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----