Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78076468-52ef-3056-9cc7-f143d9facdb8.roa
File:                     78076468-52ef-3056-9cc7-f143d9facdb8.roa (raw, json)
Hash identifier:          08dS/UyxCrDCvdQWIoQQn82NV4G+bXwVhKRa76m2ySw=
Subject key identifier:   F5:7E:2D:F1:D2:22:B5:35:75:05:E3:FF:E5:04:1E:A2:5F:24:A3:DD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46D978981492645078EBDC8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78076468-52ef-3056-9cc7-f143d9facdb8.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 18 Jul 2023 03:35:08 +0000
asID:                     60721
IP address blocks:        104.247.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:97:89:81:49:26:45:07:8e:bd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 18 03:35:08 2023 GMT
        Subject: CN=cce19b00-8663-4422-a0aa-2fec6a346773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:49:2e:ea:39:c1:ab:74:92:e1:f2:69:cb:
                    34:5f:3e:b0:bb:4b:f3:e9:4f:20:38:b7:26:cf:6a:
                    42:5c:f7:51:40:24:75:dc:47:30:47:0a:1b:e5:e1:
                    93:57:d4:e4:b4:a5:12:56:85:72:d8:b4:63:5f:2f:
                    02:50:ea:df:19:83:bc:c0:71:de:8b:5e:ea:95:16:
                    8e:2f:48:e7:ab:b9:86:de:f1:36:dc:ec:c1:e6:00:
                    47:9b:56:69:72:a4:38:b0:93:5e:bf:8b:5e:64:ea:
                    65:4a:1a:42:61:06:c5:55:d7:e4:35:2a:db:e9:f3:
                    4e:2a:3b:85:c4:b1:42:ea:f1:cf:a8:6d:0b:8c:a0:
                    03:34:c7:52:cb:fe:4b:62:1b:1e:a4:51:77:85:72:
                    b8:e8:72:65:21:15:63:69:24:cb:c8:cb:23:fc:74:
                    fa:b9:9f:44:36:cc:03:c1:f8:75:f0:b4:fc:3a:2d:
                    e3:13:d8:40:ad:9b:50:6c:18:1d:b1:66:d0:9d:e9:
                    a5:bc:08:3b:32:c2:ce:63:93:af:bc:fd:5f:d6:fd:
                    f2:2b:1a:87:fe:6a:ad:2c:b7:20:d7:b2:d4:1c:33:
                    4b:e1:d4:bb:aa:28:e1:e6:91:9f:5c:aa:32:be:0b:
                    1f:55:aa:9b:52:c9:9e:5a:d5:ab:fa:71:3d:75:50:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:2D:F1:D2:22:B5:35:75:05:E3:FF:E5:04:1E:A2:5F:24:A3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78076468-52ef-3056-9cc7-f143d9facdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d6:82:75:12:d1:cd:9e:47:f0:41:7d:92:9f:1f:d2:04:bc:
         25:71:2d:91:5b:81:f1:52:13:23:8d:84:48:95:7d:8c:e2:1a:
         58:70:6c:c8:51:81:74:14:f2:9f:a8:5d:00:ad:28:0c:18:c9:
         66:f7:b9:29:f5:2d:6b:57:32:42:68:2c:f1:22:c1:f7:3d:37:
         6d:9d:04:cf:3d:25:0a:60:1d:21:b9:36:2b:14:15:ce:73:03:
         d8:e0:cb:c0:0f:ba:5b:9c:46:52:b7:3a:e1:eb:67:4f:d7:a7:
         a1:b0:55:e8:7c:b2:e8:23:88:94:72:22:54:ba:3b:af:37:30:
         8c:33:ef:a0:c4:d3:d0:1e:69:ab:32:2d:cc:1f:d7:44:1b:34:
         07:39:27:68:43:fd:00:b1:e7:9b:60:4a:70:1c:6b:8f:94:da:
         96:57:c1:cc:8b:70:96:eb:6c:a3:7c:81:88:3f:3e:3a:f0:d6:
         cd:2e:b3:37:c8:04:2b:88:73:75:30:c8:48:a9:07:33:ab:fb:
         f1:87:59:0f:d0:b2:19:d2:47:dc:cc:84:7a:70:ef:31:04:7a:
         86:ef:19:df:41:16:e5:11:a7:96:fe:b5:17:63:4b:9d:6f:7a:
         e1:67:f4:68:bf:1d:8a:50:a1:63:90:b9:4e:4f:28:0b:84:c0:
         94:20:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----