Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75cbbb1e-4c1d-360f-827b-1081ff19b857.roa
File:                     75cbbb1e-4c1d-360f-827b-1081ff19b857.roa (raw, json)
Hash identifier:          S3ZqUWp9uGZM2BJVqP0TQk9zrr646kiNkU5IVCqcBuo=
Subject key identifier:   05:B6:71:C9:DE:23:84:90:23:9C:A0:F2:41:E3:C1:2E:91:96:A5:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79359BFFF897C3A86BDE2400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75cbbb1e-4c1d-360f-827b-1081ff19b857.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     19330
IP address blocks:        65.49.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:9b:ff:f8:97:c3:a8:6b:de:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=2de963a3-c400-473e-ad9f-083103f0f535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:87:3b:c4:ba:c2:99:e7:5b:39:8e:88:10:
                    8b:0f:a8:cf:d9:37:cc:99:b3:a0:a6:04:e5:29:2e:
                    a9:2d:e3:f0:f3:cf:a5:3b:04:58:e9:6f:63:fe:29:
                    ed:a6:84:ce:39:c9:62:84:12:e0:72:1c:29:3c:0a:
                    b1:e2:49:82:db:86:10:30:9c:42:c6:1f:a1:a4:81:
                    ec:fe:99:1f:5f:39:b3:b9:35:7e:f2:87:ba:9e:e9:
                    82:26:80:d1:63:5a:32:4d:73:1a:d7:2e:4a:a9:df:
                    fd:3a:64:a3:64:de:7c:0f:5a:63:2e:f6:6a:4f:73:
                    fe:2b:3e:3f:bd:73:b7:68:40:8b:07:e4:67:0f:26:
                    55:97:41:b4:1e:76:d1:11:9b:88:a7:46:f0:c0:2b:
                    99:ea:f9:4d:d4:5f:76:a1:0c:5d:c1:58:95:5e:f1:
                    d6:f6:b9:94:a6:21:81:8a:d6:f3:61:79:d9:b2:af:
                    5b:7b:40:4e:5a:15:97:8e:d6:6b:96:f2:65:89:98:
                    94:1c:5e:de:cf:2c:62:e6:ee:53:11:bc:d3:68:6b:
                    1d:44:80:99:77:f2:11:05:86:15:ac:af:ef:c1:92:
                    db:df:f4:82:5d:30:37:d4:4e:5b:b5:ab:fd:2f:20:
                    0f:a2:ce:23:b5:89:4e:44:04:32:01:65:ff:06:d9:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:71:C9:DE:23:84:90:23:9C:A0:F2:41:E3:C1:2E:91:96:A5:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75cbbb1e-4c1d-360f-827b-1081ff19b857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:80:37:50:75:ac:28:fa:92:f0:f0:62:df:08:0a:fb:55:5c:
         89:58:04:e0:21:f2:5a:ca:0c:f3:09:d2:f3:8b:3e:7f:ef:9b:
         0a:a6:62:1c:5c:b6:2b:2e:28:73:a1:6f:82:e7:a8:bf:3c:1a:
         05:4d:db:07:fb:36:50:40:e5:1c:35:5f:b6:6a:0f:44:33:e7:
         c4:f7:b0:c1:49:16:7a:35:5e:a9:b5:a7:a5:36:5e:e5:b0:cc:
         7f:92:87:2b:cc:c7:5c:96:cd:75:d2:e3:8f:19:da:ca:86:19:
         4a:b4:84:64:d3:2e:46:e6:26:4c:b2:15:e5:8c:fe:96:76:60:
         c2:cc:4c:3b:cc:c3:fb:2b:7c:af:1c:bd:ff:ab:93:31:3f:3c:
         85:79:9d:c3:6a:9e:a7:05:ad:d7:c3:62:4c:b5:fd:c3:d6:0e:
         c8:42:aa:9a:4a:37:83:a8:01:3c:02:e7:d8:03:68:32:67:04:
         8e:e7:09:c9:aa:74:37:0d:2c:27:c8:44:5d:9c:de:cb:1d:1e:
         fd:9f:8b:be:14:83:12:73:f3:e3:bd:9c:fa:99:ae:92:8d:ae:
         bf:13:33:a6:a1:37:f7:85:41:7a:d0:2f:fd:1c:13:60:33:23:
         f0:86:18:56:f8:cf:2e:e6:b5:17:b1:3d:ef:f7:73:86:85:33:
         1e:2e:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----