Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdf941b1-388c-3170-a936-fd06a2db09c1.roa
File:                     fdf941b1-388c-3170-a936-fd06a2db09c1.roa (raw, json)
Hash identifier:          ETesAlX/+6sLpFSXTfIdmFdaoTM5GXYPFVAr/pcPajg=
Subject key identifier:   D8:42:04:12:F6:57:32:00:8D:79:57:2F:F3:67:CA:ED:71:95:C1:A9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D6CCCCDC00AA1636BA6A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdf941b1-388c-3170-a936-fd06a2db09c1.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     63949
IP address blocks:        64.62.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:6c:cc:cd:c0:0a:a1:63:6b:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=78d06306-8210-4f68-8217-4596d7c99df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:15:3b:e0:a5:e1:55:21:20:2e:dd:6d:5f:
                    27:64:a6:37:5a:94:77:bc:28:c1:16:3f:c8:01:31:
                    2b:1e:34:d7:0d:36:b0:7c:39:fe:4f:55:e8:eb:c3:
                    40:89:6e:62:4e:5e:99:f6:24:00:c8:cd:59:30:b8:
                    c5:03:c3:b2:d7:58:ab:bc:08:e2:53:3c:7d:7b:59:
                    13:2c:a0:ed:2f:6c:41:49:fc:cc:68:bf:86:43:a5:
                    23:32:43:f7:21:ba:91:a0:ac:a9:aa:5a:5a:2d:e6:
                    6b:6c:19:11:0f:e5:66:6d:64:54:50:7a:fe:87:8a:
                    11:8e:0a:c5:60:3d:f6:0d:d2:59:c6:a1:e0:68:ac:
                    d1:b3:4f:71:df:43:b2:c4:04:b4:2c:9a:0e:7c:62:
                    50:c2:9c:e5:53:de:d4:7e:0f:63:06:5c:9a:41:5b:
                    e9:79:99:9f:46:56:9b:2c:bd:8e:a6:76:d0:29:66:
                    d2:5b:67:65:26:c3:36:88:2c:3c:e3:51:10:23:67:
                    c1:d9:97:b2:ef:45:fd:e9:ec:5b:69:57:f3:e4:4d:
                    c9:23:72:58:21:34:ef:a5:ea:a3:4d:4b:f6:68:e9:
                    b5:13:31:a2:23:27:49:86:7e:1e:90:30:f0:85:93:
                    23:0b:56:84:9c:1b:6a:3e:58:e4:a2:3c:28:4d:7c:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:42:04:12:F6:57:32:00:8D:79:57:2F:F3:67:CA:ED:71:95:C1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdf941b1-388c-3170-a936-fd06a2db09c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:10:d3:a6:5f:9e:47:17:7c:f2:56:81:e3:a1:2f:cf:79:da:
         99:fc:2a:3c:87:e5:af:5f:8f:40:6e:8e:a8:d4:eb:be:98:2a:
         07:f8:2a:ba:d0:14:97:7b:86:98:88:6f:58:9e:7d:cb:8d:ae:
         5f:5c:7b:d7:20:a0:f5:01:00:92:11:1a:1f:6a:96:9e:62:8f:
         45:5b:2f:bb:f9:9c:ec:c3:2c:ab:7d:09:13:30:a3:a1:28:31:
         7e:ff:f6:ea:d2:60:3c:17:3a:10:a4:6f:56:87:55:d6:28:88:
         61:9c:7c:e2:e0:ee:9a:5a:be:34:a5:c2:4a:39:8b:03:af:a6:
         ba:ab:92:d3:74:2c:3b:e3:33:b1:ce:86:86:6d:70:5e:8b:c6:
         32:33:c4:14:4e:eb:c8:5b:79:79:19:91:5d:02:39:a8:24:07:
         9e:e8:ff:d2:2c:6c:39:47:3a:b8:84:29:d7:0f:24:bb:e7:46:
         8d:81:40:85:10:a4:cf:46:0a:9f:b9:31:a2:b3:4a:13:c1:70:
         39:3f:cd:56:5f:59:07:db:99:21:f7:19:34:67:2e:54:4d:22:
         e1:40:30:f2:9b:54:e1:ea:f9:e1:c3:f0:db:36:96:72:28:92:
         97:dd:24:23:dd:66:67:61:b5:c9:6a:e9:a8:f5:e1:f3:a1:d8:
         3c:7f:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----