Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b983a75c-1697-3742-b40a-41fb3f361526.roa
File:                     b983a75c-1697-3742-b40a-41fb3f361526.roa (raw, json)
Hash identifier:          FLy4XgiOlDdlKyiUjcnbdWhwz8FruWeps5WvWZT/qzA=
Subject key identifier:   C6:D5:A2:72:33:5A:08:13:C4:B1:0C:26:B8:C5:C0:34:CF:98:C7:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E58A553CC8B6AA51CDF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b983a75c-1697-3742-b40a-41fb3f361526.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     394996
IP address blocks:        184.105.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:58:a5:53:cc:8b:6a:a5:1c:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=94a174fa-3a28-4530-a4e1-28898787a68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:48:30:e6:07:d1:ba:87:88:32:aa:22:af:
                    1c:7c:6f:5a:d1:3f:3c:52:ca:4e:39:ae:28:60:25:
                    d5:74:f8:dd:d1:d7:2a:a3:83:d3:8a:ed:07:40:35:
                    fe:07:4d:1f:cc:58:63:e3:7f:8e:67:0d:0c:d8:66:
                    b9:32:ab:3c:e5:3c:c9:02:72:11:50:55:cf:ec:32:
                    87:c8:14:c1:2b:14:ba:fc:c4:1a:32:19:3d:87:a9:
                    3b:44:bf:b0:81:c6:4b:e8:b5:45:fe:ed:eb:7d:33:
                    14:c3:fe:46:c7:4b:33:33:0c:d6:2f:63:6d:c9:45:
                    33:ba:46:55:dc:55:d6:82:93:c4:f6:43:14:0f:57:
                    47:28:37:1a:fa:ed:90:9e:0c:22:35:87:50:ce:18:
                    93:33:31:97:e9:a6:b2:06:94:a8:5a:7b:7c:42:0c:
                    29:b9:e8:50:2f:40:0d:65:3e:f7:1f:d3:69:4b:20:
                    23:22:4d:31:32:1d:5a:33:14:07:bc:9d:fd:0e:24:
                    93:15:0c:f3:93:e1:4f:27:12:95:2e:7a:fa:7d:4d:
                    b9:50:7d:f2:a6:66:54:87:da:64:fe:89:a4:cc:81:
                    9a:bb:84:49:61:cc:05:8d:46:b0:08:c9:89:da:ce:
                    a0:94:6b:f8:62:b0:f6:5e:34:73:14:e7:26:42:b0:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D5:A2:72:33:5A:08:13:C4:B1:0C:26:B8:C5:C0:34:CF:98:C7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b983a75c-1697-3742-b40a-41fb3f361526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:82:76:f8:ae:f0:49:de:f3:30:e0:ff:e9:03:e8:ed:76:1e:
         36:0e:43:66:be:e1:2c:ac:58:0e:54:2e:b9:74:57:f2:45:2f:
         03:a2:aa:f1:0d:41:11:af:a8:0a:55:59:70:97:92:4f:de:0d:
         c0:5d:cc:b4:be:6d:34:35:43:ba:5d:52:78:78:32:17:00:73:
         d7:6c:fe:48:cd:1f:49:11:8b:a8:18:ae:ed:16:18:e4:ca:4f:
         b2:98:51:35:d4:d1:06:94:94:74:b6:97:5d:65:31:f9:9b:3a:
         5e:52:42:f4:b6:55:e3:b6:3b:b3:b9:d5:91:47:f3:e2:79:9d:
         f0:08:2f:c3:cc:ea:af:45:f9:67:d4:f2:2a:8d:e7:fd:43:53:
         49:ed:69:59:11:35:52:0a:fe:da:08:42:8e:b7:fe:9c:5c:92:
         ab:89:d7:f5:25:bc:72:1e:36:f3:4c:20:be:b4:2a:99:d9:91:
         d8:ae:a2:77:01:2b:e3:36:6a:37:2f:d3:23:a0:c1:19:b4:65:
         e7:cf:b2:ce:f9:d9:6c:fb:8d:a2:b8:43:e9:b3:8c:bc:09:a3:
         d5:26:17:9b:63:3d:57:cc:2d:89:a6:c7:6c:5d:c8:35:50:ed:
         58:cd:c8:7e:95:a7:e5:2a:a9:3b:19:a8:2e:9d:73:50:3e:f2:
         57:83:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----