Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3af58a4-fa02-3799-9947-d30f87d32b8c.roa
File:                     f3af58a4-fa02-3799-9947-d30f87d32b8c.roa (raw, json)
Hash identifier:          XyYDi8NUW3BIGlCH0L5fUTmeV1HpfSmt8ZcYAvw1gXc=
Subject key identifier:   40:97:47:DD:9A:7B:BF:92:0D:65:58:7E:0F:71:1B:B5:E0:3D:2D:2A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858420AF1C51F4783DC8EEF1FD980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3af58a4-fa02-3799-9947-d30f87d32b8c.roa
Signing time:             Sun 28 May 2023 12:00:00 +0000
ROA not before:           Sun 28 May 2023 12:00:00 +0000
ROA not after:            Wed 29 Nov 2023 05:00:00 +0000
asID:                     40050
IP address blocks:        64.71.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0a:f1:c5:1f:47:83:dc:8e:ef:1f:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 28 12:00:00 2023 GMT
            Not After : Nov 29 05:00:00 2023 GMT
        Subject: CN=a212d33b-2259-4395-a5b5-3c278215b0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:c4:96:e2:ab:5e:3c:a4:2d:72:82:0f:c0:
                    8f:26:2b:86:7f:e9:8b:96:14:83:1a:6f:14:db:da:
                    9b:1f:b3:5c:1f:a5:64:d7:f2:e7:ff:94:be:eb:a2:
                    2f:0f:a0:29:d4:45:04:03:ac:27:64:1b:d1:41:6b:
                    a1:0f:94:73:ed:ef:32:2d:5d:2f:66:f6:25:84:ae:
                    2b:b7:cb:e5:25:56:61:84:31:00:e0:39:9a:11:ec:
                    41:42:e5:de:51:cb:df:8f:c3:de:c7:5e:73:2e:b5:
                    91:0d:3f:cb:b0:e5:7d:69:aa:3c:04:a0:09:53:d8:
                    11:81:7f:b9:87:0f:a3:ff:d6:8f:e5:bb:98:41:b5:
                    11:b4:fa:9d:3c:e3:b5:a4:1d:8c:0b:96:5a:25:76:
                    cb:c9:22:71:4c:33:0c:f9:1e:bc:8b:cf:f3:91:14:
                    5a:e0:a0:84:18:c8:96:98:32:01:de:41:23:44:45:
                    92:cf:a2:27:96:11:ff:72:dc:21:f8:da:64:90:64:
                    84:32:17:61:fc:f1:34:fc:44:64:a4:89:c4:16:5c:
                    47:ba:2a:97:ed:6e:d4:33:63:6e:35:81:91:d0:5e:
                    74:d5:ce:10:d3:f8:1c:30:c2:59:54:77:ad:2e:63:
                    58:f1:1a:12:e8:a9:d3:be:c9:bd:07:fa:35:27:5a:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:97:47:DD:9A:7B:BF:92:0D:65:58:7E:0F:71:1B:B5:E0:3D:2D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3af58a4-fa02-3799-9947-d30f87d32b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:27:c3:2e:38:6c:6b:4f:4b:6d:8b:e5:44:1b:6a:c7:14:10:
         11:c1:fb:5b:98:41:b6:ba:1a:45:42:b5:ab:68:13:cc:60:b4:
         f0:37:4c:a3:cc:58:fd:a6:d1:c0:fd:ed:a4:9b:e6:74:05:c1:
         75:93:8a:48:c9:55:ba:fb:f7:c2:15:fa:ef:7c:e6:da:c3:08:
         94:4b:f2:38:50:0f:18:52:46:51:c5:78:07:7b:51:be:4e:5f:
         14:3a:4e:6d:07:6c:d6:3b:17:7b:fb:fb:48:44:46:8d:75:1a:
         ae:df:57:c9:00:c9:c4:4b:77:96:31:16:8c:91:bd:92:a7:43:
         b9:68:95:90:cc:1d:4a:e2:40:d3:44:8b:ed:76:c7:5a:e6:c5:
         74:59:5e:20:96:05:4d:63:11:14:c0:f9:b8:bb:1f:9f:28:9c:
         58:37:e1:48:a0:99:1a:7c:dc:56:c2:db:41:b9:ed:95:17:6b:
         52:32:3c:82:82:48:88:b5:f3:dd:a9:12:8c:c1:f8:f4:76:4c:
         25:62:1f:a5:4d:31:31:f1:dd:83:56:68:95:fa:17:03:67:0b:
         ed:d9:36:ef:cf:f5:12:3a:d0:d0:b9:62:7b:f5:e6:cc:6d:3a:
         f4:7e:d2:6f:41:86:36:aa:11:fd:4d:62:ce:30:ef:3a:53:bc:
         3b:83:9f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----