Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d2d4af1-ddb5-3adb-88cb-369be3243f97.roa
File:                     9d2d4af1-ddb5-3adb-88cb-369be3243f97.roa (raw, json)
Hash identifier:          fNvVtNePKtM4qP2nyP57e2uwojb6iQBICQLzk/XcU7I=
Subject key identifier:   32:99:6E:46:31:04:87:BD:A9:28:AE:E0:95:67:14:52:70:5E:BC:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584101D85A9FD4ADC8757189DB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d2d4af1-ddb5-3adb-88cb-369be3243f97.roa
Signing time:             Wed 22 Feb 2023 12:00:00 +0000
ROA not before:           Wed 22 Feb 2023 12:00:00 +0000
ROA not after:            Wed 23 Aug 2023 04:00:00 +0000
asID:                     14277
IP address blocks:        184.104.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:01:d8:5a:9f:d4:ad:c8:75:71:89:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 12:00:00 2023 GMT
            Not After : Aug 23 04:00:00 2023 GMT
        Subject: CN=26d6d952-fd51-4d28-9dc9-61757855998d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:c1:c8:77:99:5f:db:1b:08:23:ac:7b:c9:
                    69:8f:2c:41:8f:26:5e:d4:36:84:f6:f8:f0:23:2e:
                    1c:24:51:90:75:b8:1e:8a:4c:d5:34:2d:b2:fc:95:
                    2d:11:5b:90:17:c6:69:59:2f:98:f9:f2:5d:1a:c7:
                    64:cb:33:7e:7d:e9:3a:84:7a:6f:9e:3b:77:61:fa:
                    32:30:3a:f7:7d:9f:48:11:a1:51:34:31:37:b9:3a:
                    47:54:37:ca:91:73:ae:ae:15:56:73:44:d3:77:91:
                    ca:82:21:a8:98:a1:75:2b:a1:6e:f2:13:ad:bb:7a:
                    fd:85:33:f7:c2:a4:b2:53:ef:67:7f:4d:d3:0d:af:
                    ae:b0:ef:c6:9e:aa:27:3d:15:fd:74:45:af:86:90:
                    e8:56:1f:b4:dc:f1:5a:87:06:a0:ab:13:6c:a4:ca:
                    98:74:2f:6a:06:9e:7d:c3:10:28:48:d1:5a:56:fb:
                    61:cc:f2:b8:90:81:d3:f2:38:63:98:74:06:cd:5e:
                    3a:eb:af:cb:74:6a:bc:15:11:52:6f:88:e1:1b:76:
                    6c:ea:fe:d6:60:22:3d:c9:06:58:f1:bb:34:8e:31:
                    4e:fd:42:e8:28:4e:87:32:31:b1:11:19:75:8c:2d:
                    76:7f:52:4d:0d:c4:36:46:8c:c1:36:0f:16:0a:0f:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:99:6E:46:31:04:87:BD:A9:28:AE:E0:95:67:14:52:70:5E:BC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d2d4af1-ddb5-3adb-88cb-369be3243f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:37:35:2f:b6:2d:de:4a:4e:0e:13:5e:49:e3:13:f1:6b:02:
         9d:dc:4a:85:ea:2e:14:0d:b4:c0:1d:1f:84:73:6f:c7:a5:20:
         fd:0c:9c:5f:b5:5e:93:ff:7e:c8:04:b6:fc:93:ff:af:28:e7:
         79:90:02:0c:83:02:56:48:53:d3:92:5f:d0:f5:d2:e1:c9:32:
         55:28:6f:74:17:2a:7a:a5:7a:c3:d1:50:27:0a:4e:04:8a:99:
         16:83:94:2a:b8:a6:1f:1c:58:4b:e5:5e:ed:21:23:3c:43:d0:
         22:b8:89:38:fd:a1:4e:ff:09:43:17:7a:c4:05:10:28:93:86:
         3d:f5:9c:c2:21:6a:53:67:e5:6e:63:54:d9:b1:e3:04:6e:ff:
         87:f4:f0:f2:5e:65:a1:3f:43:3c:61:0b:e5:29:8f:5b:fe:91:
         01:cb:1e:e6:4f:bf:df:4c:d8:0f:ad:38:0f:96:83:21:46:ec:
         b5:8f:3d:b0:69:55:a8:6b:fc:26:9a:99:5f:74:56:5e:d2:0f:
         20:31:9d:64:dc:80:48:5f:d8:22:94:b2:a1:47:47:32:11:1d:
         14:a7:9d:e0:59:84:6a:ce:df:65:db:00:d1:fc:86:c7:78:9f:
         44:d9:97:36:b8:53:f0:c7:d0:31:64:9e:dc:b2:ba:aa:51:00:
         79:ae:a4:25
-----BEGIN CERTIFICATE-----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