Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272210.roa
File:                     AS272210.roa (raw, json)
Hash identifier:          aNCaeJreUlgu1WP2vUr19zyUzOMAnZhMa3sjrwfu9V0=
Subject key identifier:   FE:98:BA:1D:1B:95:A6:D3:F6:1A:86:65:07:4C:0D:5A:EE:96:D4:2D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       04ACA07DEDB8CE67982B05DF560D0F0167B18E82
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272210.roa
Signing time:             Thu 26 Jan 2023 15:09:23 +0000
ROA not before:           Thu 26 Jan 2023 15:04:23 +0000
ROA not after:            Thu 25 Jan 2024 15:09:23 +0000
asID:                     272210
IP address blocks:        104.234.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ac:a0:7d:ed:b8:ce:67:98:2b:05:df:56:0d:0f:01:67:b1:8e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 26 15:04:23 2023 GMT
            Not After : Jan 25 15:09:23 2024 GMT
        Subject: CN=FE98BA1D1B95A6D3F61A8665074C0D5AEE96D42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:76:af:9e:49:f6:74:ec:c7:b0:60:8d:df:
                    b2:9e:2c:75:25:59:13:41:29:29:28:9d:e9:1c:3e:
                    01:12:4b:9d:5d:1b:94:a4:94:34:83:fe:af:59:9d:
                    6b:33:85:5f:8c:07:88:2f:33:b6:97:7b:4c:a9:42:
                    c1:55:bd:19:d3:26:8b:27:4b:82:9c:1d:f5:f6:04:
                    8e:7e:01:5d:87:39:ac:fb:fb:8a:ef:39:71:17:89:
                    4c:46:a2:2c:25:6e:94:fe:f9:9f:ae:84:c4:e0:6d:
                    2d:be:68:6a:65:40:19:64:8b:b9:de:84:bf:01:93:
                    8c:46:7a:5e:0b:7d:e3:e2:e3:e6:b5:63:80:18:9d:
                    95:06:c8:c4:f2:9b:b2:0f:80:0e:f6:ae:80:67:87:
                    a1:56:c7:a7:1e:2c:ef:5f:f0:ef:58:3b:c6:c4:b7:
                    ef:d4:89:93:bc:f7:fb:69:7c:f3:20:93:b3:fb:8e:
                    a9:1b:f4:7c:97:47:34:53:e2:17:d6:b2:0b:41:18:
                    51:5c:4a:9e:2a:7f:b4:f6:27:0a:85:23:14:53:ac:
                    8d:b7:15:8b:21:83:fc:67:27:9a:e5:3e:55:fe:09:
                    7e:ee:24:2c:68:d1:c1:38:bb:7b:d2:0e:90:42:1d:
                    d3:36:47:ad:52:ab:fa:30:f6:e0:cc:39:43:e6:43:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:98:BA:1D:1B:95:A6:D3:F6:1A:86:65:07:4C:0D:5A:EE:96:D4:2D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:d2:44:99:f3:80:70:d7:69:86:83:63:4b:1e:e1:c9:65:ba:
         6b:de:fe:9c:24:01:e2:5a:17:25:4f:3f:aa:72:dd:d5:cb:0b:
         98:07:c7:da:a2:d2:a0:f7:c6:fe:61:a0:35:d0:25:02:e8:7e:
         3d:c4:7e:91:f5:eb:b9:93:02:9c:9b:b2:2c:f9:87:22:64:23:
         11:2c:6b:aa:68:08:8d:d8:9f:83:e3:67:c8:06:42:17:3e:5b:
         63:80:eb:06:ab:89:f3:08:7e:f3:8f:db:3b:05:67:91:57:14:
         61:f1:39:28:6a:20:b6:a7:e1:40:04:08:f0:d3:35:79:ed:52:
         ed:45:ce:e2:cc:b4:ab:0d:f6:fa:05:e1:1d:97:7e:d6:1f:08:
         05:58:ed:99:3c:dc:54:64:6e:90:54:25:11:08:df:ba:93:a0:
         7b:45:ac:05:d4:3a:21:d3:13:bb:e2:c1:f9:72:dd:1d:21:89:
         4d:b3:74:0c:0c:85:72:f9:09:4c:1a:ae:a0:12:a0:ad:f3:1c:
         9c:40:44:a8:20:c9:22:8f:54:30:c7:09:83:f7:58:fc:7b:fa:
         90:42:40:81:3b:43:84:e9:67:81:8c:b5:a1:60:7e:47:16:b6:
         60:5b:6a:39:f4:96:be:81:bc:5c:87:37:e4:6e:bd:ee:6c:97:
         9b:f1:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----