Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00e56428-4139-34a6-883d-b9051369b54d.roa
File:                     00e56428-4139-34a6-883d-b9051369b54d.roa (raw, json)
Hash identifier:          rIqb6O4jQfxgJrlCwXXGZmELnSv7IrCKoQizkONAWpQ=
Subject key identifier:   D6:38:9B:B8:17:17:55:4D:74:3F:0E:E4:47:6E:C8:2A:CA:35:B7:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E5F002AFD030A7DC45140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00e56428-4139-34a6-883d-b9051369b54d.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     395007
IP address blocks:        184.105.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:5f:00:2a:fd:03:0a:7d:c4:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=a266e0ff-9061-457c-a21a-e22a7e788882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:80:54:43:bf:05:ec:61:19:62:45:8b:15:
                    72:06:3a:53:af:93:3f:c7:d2:b5:e3:dc:de:af:1b:
                    e0:b5:5d:33:73:2c:3e:3f:3a:b1:0f:0b:bc:e5:e0:
                    87:b2:00:15:f7:19:56:48:83:ee:ef:1b:10:85:2d:
                    50:4b:52:aa:59:69:fc:4c:b6:9b:08:af:99:04:bb:
                    a3:9a:e1:a5:55:2c:7a:0f:ff:fe:d1:36:6d:13:f4:
                    9c:8f:38:ae:ac:3c:29:11:9d:79:d0:7b:cd:6f:99:
                    46:c5:6c:ce:c5:e0:f8:6a:3a:cb:f6:ff:6c:2a:56:
                    e4:38:96:c1:6a:fc:eb:d8:8b:77:f4:0e:ca:9a:a7:
                    8d:14:1d:76:ed:8f:fa:00:eb:e8:7f:48:ad:f8:2b:
                    5b:6f:d1:2c:d3:87:a4:47:30:99:a8:94:31:5a:7d:
                    d3:b6:b5:f6:7c:09:7e:b6:1c:4e:50:1f:2e:64:9d:
                    a5:1d:00:e9:81:3c:52:71:cc:c6:d5:f1:10:c8:83:
                    02:d7:fb:82:27:12:62:84:39:d8:ab:04:9a:3a:bc:
                    c9:3b:d4:6f:d4:29:70:0e:90:3d:aa:25:59:3b:c0:
                    e6:a8:87:13:cc:21:7a:66:5b:ef:16:76:91:95:8f:
                    e0:e8:37:4c:22:9c:f9:99:47:66:6c:ac:cc:d8:b7:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:9B:B8:17:17:55:4D:74:3F:0E:E4:47:6E:C8:2A:CA:35:B7:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00e56428-4139-34a6-883d-b9051369b54d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:c2:fa:2f:86:f4:a2:a1:f7:0c:d1:07:88:05:bf:7c:34:
         d4:f0:c3:cd:d3:97:ad:49:22:9f:7c:5c:5d:6f:b7:e7:9d:94:
         3e:3a:6c:26:b3:91:24:ca:85:7a:3f:2a:38:0a:60:bc:d6:ee:
         b0:94:3e:5e:fb:0b:e4:eb:57:6a:54:d0:2c:3a:5c:50:72:a7:
         70:cc:da:3d:be:a9:4a:ed:31:78:24:77:e4:6d:07:4b:8c:2a:
         4e:7f:33:ac:3b:5b:a5:cb:3a:b3:5c:b8:f8:e7:1a:25:97:56:
         75:84:5a:5a:df:de:c9:f2:3b:d9:59:72:c7:56:96:30:f0:28:
         29:b3:4a:75:b6:75:5b:17:92:a9:47:7d:a1:2e:03:18:21:ca:
         83:43:ff:12:96:3b:e7:83:b2:78:eb:16:68:cf:85:74:ea:79:
         d1:95:94:90:75:3a:a2:ce:f6:de:b5:0c:ac:7f:a2:fd:1d:b3:
         0e:2d:00:00:db:ad:be:63:ab:da:09:04:24:61:a1:f0:18:eb:
         47:30:94:a9:03:c8:01:bc:d4:f6:6b:7f:82:73:0b:ec:25:e6:
         47:49:f1:75:67:e6:c5:01:c7:6d:e6:84:d0:2d:9d:17:61:67:
         ce:0a:ea:96:c7:df:cb:b9:27:b4:23:26:c7:ca:49:56:6e:98:
         c9:21:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----