Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38361825-7778-3884-8234-b3e0e03e03fe.roa
File:                     38361825-7778-3884-8234-b3e0e03e03fe.roa (raw, json)
Hash identifier:          krtmjTHFCf/88++U4Kpq3SuONn6c9Mo6Bo61ramhfeo=
Subject key identifier:   71:2A:36:1A:9E:4C:CF:3F:76:0A:B1:6F:38:A7:F8:B7:B0:BD:C4:14
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C75B1393C6F143B9A07DA25D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38361825-7778-3884-8234-b3e0e03e03fe.roa
Signing time:             Sun 02 Jan 2022 05:00:00 +0000
ROA not before:           Sun 02 Jan 2022 05:00:00 +0000
ROA not after:            Sat 02 Jul 2022 04:00:00 +0000
asID:                     394996
IP address blocks:        184.105.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:75:b1:39:3c:6f:14:3b:9a:07:da:25:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  2 05:00:00 2022 GMT
            Not After : Jul  2 04:00:00 2022 GMT
        Subject: CN=43548412-bdf6-4edd-84de-3b508939774b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:9e:e6:b3:72:ba:86:84:89:cf:7a:06:7e:
                    32:27:9f:5a:0c:9c:21:53:ba:0d:ec:b9:c8:e1:0e:
                    60:4a:cc:f0:35:f4:3d:b8:44:36:95:bd:8f:51:b6:
                    ed:b4:d2:19:a8:c2:01:f3:49:50:f9:00:69:df:98:
                    86:e5:88:13:cd:02:ee:f7:cc:89:16:4e:23:9a:5b:
                    92:1b:65:88:54:50:30:6b:aa:9a:5a:46:f0:31:a8:
                    d0:f4:67:b5:6e:a6:81:69:cd:3b:ba:28:b6:0c:04:
                    bd:16:8e:98:f6:c6:27:cd:7c:e2:c9:1a:50:34:1f:
                    f9:9a:f1:d3:12:9b:1f:57:43:fe:05:3a:dd:d4:3e:
                    67:97:e8:63:a8:9b:3e:1a:ac:07:10:9a:ed:42:9a:
                    59:e3:b5:40:7c:a8:9d:76:01:42:b3:2f:59:fb:62:
                    bc:96:18:22:2e:ce:d9:b0:74:f7:a6:aa:09:2e:fa:
                    f8:e5:b4:fe:bb:54:98:58:56:50:a5:25:19:bf:04:
                    61:7f:65:0b:21:80:e8:52:c5:61:f4:57:57:2d:2d:
                    84:ef:1a:58:78:23:12:39:b5:44:0c:9b:bb:06:35:
                    ec:6f:e3:f4:ab:91:3e:89:1b:23:e0:74:31:37:61:
                    ef:e6:f8:68:71:fa:c8:80:62:68:53:b3:2d:24:68:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2A:36:1A:9E:4C:CF:3F:76:0A:B1:6F:38:A7:F8:B7:B0:BD:C4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38361825-7778-3884-8234-b3e0e03e03fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:87:95:29:94:54:0d:53:1e:93:3f:98:80:d7:d6:1f:68:85:
         ad:fa:04:96:98:fb:d9:2a:ee:27:2a:57:a1:a6:3e:c4:5c:50:
         98:9b:c2:89:1c:f3:11:ca:77:42:dc:f1:b2:b4:a3:5b:58:ad:
         ba:42:df:74:6d:5e:c4:a7:37:46:01:57:eb:ac:99:49:09:e5:
         31:0b:f1:f7:1c:10:f9:11:1f:2b:8b:2d:83:f9:0d:1f:1c:b5:
         04:7d:75:84:d9:ea:27:a7:45:53:77:4f:fa:67:33:4c:6a:5a:
         c1:f3:e0:f1:39:0a:84:2f:a5:7e:53:be:6c:d6:cd:6b:6d:d7:
         29:db:c4:0f:15:49:e0:cb:8e:60:64:68:8e:54:81:de:84:bc:
         c0:80:fd:7e:2f:7a:ed:66:70:c1:e1:ce:95:04:c8:62:db:bc:
         3d:8b:f1:c1:35:70:f9:85:32:66:44:e6:11:b1:4f:5a:c1:b8:
         77:5a:0f:9a:76:8a:f8:e3:d2:98:76:d0:68:7c:98:0b:8e:19:
         4d:e6:a4:cd:0f:48:5e:de:c8:0d:30:80:44:89:a2:08:1c:dc:
         f2:81:78:b3:94:58:f7:af:04:b2:72:82:db:5a:7f:89:a0:3f:
         1a:84:7b:40:64:dd:e7:a2:a3:01:eb:cf:42:64:91:af:74:bf:
         08:65:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----