Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/702bbe13-9475-3678-8f65-994aa6ad8ba3.roa
File:                     702bbe13-9475-3678-8f65-994aa6ad8ba3.roa (raw, json)
Hash identifier:          p7KwBRO4tkcYvceW4fK+ZdX37u0bQunD/8OJskntTdA=
Subject key identifier:   BE:1E:27:A3:1D:2B:BE:A1:2E:2A:D3:77:A9:1C:83:6E:B6:D2:3B:62
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D869A558045890B43F980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/702bbe13-9475-3678-8f65-994aa6ad8ba3.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     11734
IP address blocks:        184.105.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:86:9a:55:80:45:89:0b:43:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=82afdb06-a30a-489c-b921-41d2b74b941b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:bc:a4:b6:66:3d:b1:97:bd:d3:ee:cf:37:
                    ee:31:ba:eb:67:65:1e:de:0c:1a:f2:78:72:4f:1d:
                    0b:4a:aa:8c:8d:a4:d9:2e:e6:59:e1:4f:72:78:5f:
                    aa:00:2f:bc:e8:78:02:24:19:59:dd:67:f8:6f:9a:
                    87:85:43:51:17:8f:14:80:54:58:fd:5a:9e:d6:ff:
                    1c:48:95:ef:c8:3e:4f:7e:5b:f0:55:57:e4:d4:53:
                    e6:43:3d:11:f5:be:67:a9:90:2f:b2:fc:43:67:a8:
                    3a:02:8f:dc:09:0d:63:cb:a7:40:77:70:bb:38:29:
                    05:b4:12:0c:b3:1b:ee:17:38:f9:d2:51:c2:f7:70:
                    53:76:57:1c:43:0b:41:3a:af:47:8c:86:24:a9:31:
                    85:d4:f8:ba:10:9f:3a:18:c3:74:d3:7a:95:17:b7:
                    1c:3a:af:38:08:8a:f0:03:8f:a1:ad:25:0d:c5:da:
                    0c:da:ef:86:b9:fa:2f:82:db:b9:c3:3e:77:44:af:
                    91:8a:8c:3f:3a:84:82:75:04:03:ec:18:c1:77:8f:
                    8c:64:64:66:06:01:b6:6d:6a:12:f2:88:05:a1:d1:
                    9c:79:21:93:5d:2c:ea:d2:8c:68:49:4c:1c:cc:78:
                    ad:d4:5b:8e:df:bf:d5:6e:15:47:69:65:4f:7f:9e:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:27:A3:1D:2B:BE:A1:2E:2A:D3:77:A9:1C:83:6E:B6:D2:3B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/702bbe13-9475-3678-8f65-994aa6ad8ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:56:82:aa:b0:82:12:58:43:42:5c:db:19:be:76:96:83:06:
         27:42:8d:a1:6d:e6:a4:a4:f5:05:f1:16:98:a6:27:00:2c:aa:
         99:cc:74:0d:d6:fa:13:5a:f5:5f:ff:ed:65:16:c2:98:d0:2d:
         33:dd:ce:a9:77:bc:50:bb:1f:ff:dc:23:a6:4c:08:78:37:68:
         a3:e8:79:59:dd:de:51:3e:e9:4c:6e:3a:16:6a:4b:85:d9:f5:
         18:66:84:3a:94:eb:ad:0d:dc:66:63:de:af:a2:1e:cf:91:30:
         7d:76:d1:f9:f5:bf:d2:c7:05:f8:c4:01:8d:b5:bf:64:c1:12:
         7f:b3:90:b2:5d:44:ce:9a:27:b6:55:75:09:76:9d:7a:9b:e7:
         9b:22:8f:38:ff:16:4b:73:fa:ef:79:61:05:b4:3a:7f:4c:9c:
         7d:eb:65:47:75:5b:a1:94:a8:99:82:39:16:7c:26:b8:2a:ff:
         d1:b0:dd:fd:d9:d0:ae:46:d8:ab:1c:93:54:cf:4a:11:7e:83:
         85:13:7c:32:c1:bc:7b:55:e8:8f:51:c9:36:29:76:a6:78:6c:
         6f:a0:01:26:8d:66:97:c2:7b:a8:b4:4a:03:d2:0b:c2:04:14:
         b2:1f:7e:4a:32:2f:aa:ac:95:10:f2:e0:bb:02:36:d8:59:77:
         3e:e5:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:43 2023 by rpki-client on console-fra.rpki-client.org