Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23e88bef-4283-304f-8d2d-d72b48d2986a.roa
File:                     23e88bef-4283-304f-8d2d-d72b48d2986a.roa (raw, json)
Hash identifier:          yQhQ6dvrxMXplivGfiz43gO07L1Gew4h8FoLE07tLZk=
Subject key identifier:   87:23:B0:DC:6B:9D:47:3F:1A:C7:7C:05:3B:C5:01:B2:CA:B4:BC:92
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F324D15A64CC280005C1EF780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23e88bef-4283-304f-8d2d-d72b48d2986a.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Fri 10 Mar 2023 05:00:00 +0000
asID:                     4455
IP address blocks:        65.49.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:4d:15:a6:4c:c2:80:00:5c:1e:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Mar 10 05:00:00 2023 GMT
        Subject: CN=97f6efa4-c8ca-485d-b3d9-feec4b5525d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:6e:1d:e3:f2:80:11:4b:17:ab:db:5d:a2:
                    04:b1:62:28:24:3a:25:88:f3:53:38:8d:d8:9e:f9:
                    05:a2:6c:30:a8:09:80:30:19:ac:4d:96:a5:50:dd:
                    99:0f:09:cc:1a:9c:9a:5d:e0:36:b8:f0:6b:6f:b5:
                    f7:a3:c4:2c:18:53:f9:d7:6d:e1:fd:d4:43:4c:90:
                    36:ff:e8:2f:a8:48:c9:d8:3b:c7:d0:83:27:2c:04:
                    96:a0:ca:e8:69:96:e9:42:df:cb:8e:f1:0c:72:43:
                    c4:f0:fc:32:45:7c:fe:4f:1d:32:a0:10:96:52:78:
                    e5:b5:c2:4e:c7:a2:ca:77:af:6d:45:b4:33:af:b6:
                    2f:32:ef:0d:f4:e1:58:b7:53:65:39:86:63:43:08:
                    7b:31:65:1b:fa:90:74:2b:94:e0:f6:18:c0:81:05:
                    aa:0f:b8:1f:c4:fe:d7:44:66:f2:28:32:9b:8f:f5:
                    18:54:46:aa:77:70:36:4b:23:54:15:25:49:ed:d1:
                    70:2e:9b:0d:99:0d:70:2a:4e:1f:22:4a:e7:01:f0:
                    73:d2:7d:2c:17:e3:39:de:d6:56:6c:d0:8f:5e:fc:
                    f1:93:67:bd:f5:95:dd:c2:7c:06:59:be:92:58:88:
                    08:d7:1e:e0:aa:25:9c:5c:be:01:93:a4:ed:6c:60:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:23:B0:DC:6B:9D:47:3F:1A:C7:7C:05:3B:C5:01:B2:CA:B4:BC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23e88bef-4283-304f-8d2d-d72b48d2986a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:f1:67:12:11:66:70:a7:17:73:c3:94:a0:e0:e0:40:4a:
         a1:5c:82:3b:d4:04:cc:67:46:3b:0c:06:81:6b:16:37:b8:ca:
         3b:93:c3:4e:10:73:dd:84:76:a4:71:d5:65:e0:af:90:60:fb:
         b5:fa:c8:32:eb:49:73:a5:8f:45:cf:1e:0d:2b:c6:a8:b9:bf:
         52:e8:ea:32:51:b2:d8:71:8a:f0:6e:dd:d0:ec:61:1a:88:d3:
         8a:ac:e7:ed:3d:d4:17:9e:e6:3a:06:07:29:4c:a5:46:35:82:
         63:5d:7a:ff:66:d3:57:7e:b7:27:ce:14:2e:87:b3:13:11:e0:
         7b:24:5a:22:cf:11:a6:7b:19:aa:03:b1:e0:8b:5a:dc:18:83:
         96:e3:9f:07:a0:98:fd:a7:d4:3d:58:76:eb:11:39:d1:97:d1:
         21:e2:81:28:19:12:26:23:28:9e:84:8b:20:c7:8a:e6:5f:b7:
         2b:a9:51:62:64:04:9f:aa:e9:04:fd:4e:06:01:85:27:5e:37:
         b2:ee:f6:62:aa:66:39:08:2b:9a:39:8f:c6:f7:c3:c0:49:c4:
         ed:5a:f5:f1:56:17:63:1a:64:b2:e9:7c:3b:c7:4f:84:50:95:
         d8:27:52:38:82:7f:d3:a9:eb:69:90:b7:e5:36:50:57:81:96:
         4b:29:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----