Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dc822905-2513-3342-a5c0-6c384ffbbfb7.roa
File:                     dc822905-2513-3342-a5c0-6c384ffbbfb7.roa (raw, json)
Hash identifier:          2rNX4gjRMcpoo7y2wzI0uLKPwTtzAf52XOw8I5jc9+4=
Subject key identifier:   EA:54:33:E8:EB:8E:FA:EE:9B:57:CD:ED:6E:1B:A1:7D:71:E7:CB:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583E826BFFFB6EFA41923801E480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dc822905-2513-3342-a5c0-6c384ffbbfb7.roa
Signing time:             Fri 08 Jul 2022 12:00:00 +0000
ROA not before:           Fri 08 Jul 2022 12:00:00 +0000
ROA not after:            Mon 09 Jan 2023 05:00:00 +0000
asID:                     394996
IP address blocks:        184.105.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:82:6b:ff:fb:6e:fa:41:92:38:01:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  8 12:00:00 2022 GMT
            Not After : Jan  9 05:00:00 2023 GMT
        Subject: CN=5c7b86d7-38ed-42ed-b834-9ff8ab7b2165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:13:26:54:ce:72:4b:1d:76:39:44:10:54:
                    f5:84:7a:3e:a6:02:0b:e7:83:91:97:59:a7:56:28:
                    c2:81:90:e2:15:95:6e:80:df:d6:10:ab:70:3a:33:
                    43:a5:f8:f3:21:d2:c6:52:a3:a3:19:c0:34:12:62:
                    f4:42:1a:b1:62:ca:90:7b:07:e1:c9:75:5a:74:a8:
                    95:21:4a:82:27:40:7c:c0:00:3b:e4:5a:c2:ea:e5:
                    d4:58:c8:15:a2:9f:4f:72:cc:47:2a:e6:98:3c:c2:
                    24:28:4c:ad:03:62:25:74:85:bf:33:d5:92:2f:2b:
                    d5:d6:7e:11:00:82:d1:7f:e8:00:b3:9c:0d:81:c4:
                    6d:24:9c:55:8a:50:ba:37:64:58:a8:72:97:33:12:
                    fd:a6:51:4a:7c:4b:49:cb:cc:82:ec:18:25:97:2a:
                    75:4f:ee:f2:2b:f6:22:b7:48:01:7d:04:b6:bd:5b:
                    99:e6:e0:a6:f9:94:10:9a:b2:0c:ab:4b:73:36:2f:
                    70:19:e0:81:ef:c7:52:18:5b:c5:75:30:c2:cb:ff:
                    ae:84:f1:86:62:08:7d:4e:a1:87:a7:d7:63:1f:c6:
                    74:02:13:32:fb:1e:95:b6:76:2b:24:ac:a8:18:da:
                    f1:2e:ca:42:ec:5f:4d:46:3c:53:87:ef:c1:bc:6e:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:54:33:E8:EB:8E:FA:EE:9B:57:CD:ED:6E:1B:A1:7D:71:E7:CB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dc822905-2513-3342-a5c0-6c384ffbbfb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:da:05:79:86:7a:77:b6:7b:c7:a5:6a:f1:d2:b9:d8:df:
         93:85:5b:01:bc:f6:99:cd:0f:96:09:eb:5a:03:8c:2e:2a:a5:
         61:b6:38:43:e7:88:38:7e:7e:b5:e2:a9:3c:3d:33:f4:70:32:
         59:87:a5:6c:d1:42:bb:f8:70:63:03:ef:d4:16:88:91:fb:51:
         37:db:a7:2f:f3:82:96:a5:e2:21:01:b0:4c:e2:58:a8:56:50:
         e8:d0:12:a6:35:0c:47:f8:b8:30:31:28:b2:db:19:75:d2:96:
         90:d4:c5:5f:2f:35:de:7b:45:98:df:9a:9a:7f:0e:f0:d8:17:
         5d:10:4d:3d:99:6d:a6:0b:3f:fb:0b:be:97:cf:35:61:f1:3c:
         28:13:18:2a:6f:56:ba:2c:53:dd:a1:90:0b:c0:92:47:62:29:
         bd:91:fc:d4:1a:6c:bb:9d:be:f0:0a:1d:4d:c2:6a:ce:1c:3d:
         63:a4:15:20:34:16:fd:3d:9a:0f:2f:7c:fa:cd:19:f2:69:e5:
         60:a5:c8:c3:71:0d:dd:da:92:1d:eb:a4:05:33:75:fe:6c:f9:
         37:31:04:f7:02:57:67:a3:07:21:cc:bc:94:85:33:2c:3c:c7:
         db:27:5d:fc:67:26:28:fa:fa:15:10:ea:b7:a9:7a:79:16:b4:
         59:4c:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----