Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c448d0b7-7d11-3bf4-bc22-d28bf5f22690.roa
File:                     c448d0b7-7d11-3bf4-bc22-d28bf5f22690.roa (raw, json)
Hash identifier:          r5cDoYWq13nSYZyeGADxq7n7vEu3EgQ+gC2q/j4ws3M=
Subject key identifier:   9E:B0:5B:A8:56:B2:74:86:19:69:FA:CF:0D:AD:9C:B6:B9:B8:B7:DE
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584250D00B608D5F55D945598C10
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c448d0b7-7d11-3bf4-bc22-d28bf5f22690.roa
Signing time:             Fri 23 Jun 2023 14:09:07 +0000
ROA not before:           Fri 23 Jun 2023 14:09:07 +0000
ROA not after:            Thu 21 Sep 2023 14:09:07 +0000
asID:                     147291
IP address blocks:        45.62.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:d0:0b:60:8d:5f:55:d9:45:59:8c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jun 23 14:09:07 2023 GMT
            Not After : Sep 21 14:09:07 2023 GMT
        Subject: CN=8921201f-d247-4473-9329-dd0ec4e89765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:af:f0:b8:ff:21:ef:f8:0e:13:09:0b:4f:
                    e1:ec:f1:e9:dd:b5:2e:34:7b:50:71:96:d2:e0:56:
                    3a:d8:c6:41:23:35:28:89:3d:7b:da:34:72:46:6c:
                    d0:7e:23:b6:2c:9c:7b:13:14:71:88:d1:56:f0:3a:
                    ee:11:b1:ac:7d:be:30:06:4c:4e:ee:e1:87:a1:4a:
                    6a:3c:25:82:17:37:2f:74:5e:13:83:29:7e:78:36:
                    5b:ff:cd:9f:df:93:e4:06:fb:3a:ab:56:d5:bb:08:
                    76:3f:15:55:7c:48:5f:aa:ff:8e:e1:78:ca:49:1c:
                    fa:b1:53:42:3e:d9:55:f4:93:5e:ea:1b:05:27:46:
                    85:8f:0d:61:6f:05:4e:60:85:d6:02:05:f8:45:95:
                    48:6e:bb:17:eb:5b:73:81:97:f0:97:31:92:62:b5:
                    ae:be:59:af:e0:0a:c6:94:50:6e:61:f6:b7:ae:8c:
                    69:1e:3c:be:6d:cb:ed:39:c6:ef:5e:74:8b:15:8c:
                    62:3a:ef:22:ff:cd:ba:a1:33:68:33:fb:2c:c0:f2:
                    14:da:ee:80:4e:00:3b:8c:25:c7:8f:15:20:55:ac:
                    ed:cb:d3:53:0c:c7:ab:15:36:ba:10:89:c5:1a:d6:
                    4c:e2:ec:35:15:63:93:16:74:7b:4f:4d:7d:d2:fa:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B0:5B:A8:56:B2:74:86:19:69:FA:CF:0D:AD:9C:B6:B9:B8:B7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c448d0b7-7d11-3bf4-bc22-d28bf5f22690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:07:e7:e6:b5:89:da:b8:6d:8b:e4:46:20:54:8f:c2:72:d0:
         68:46:2b:2b:49:21:58:40:a0:65:77:79:31:09:c9:3d:5d:ba:
         6a:1f:84:7f:63:7e:7e:11:50:5e:2f:d9:47:90:26:d4:4e:fa:
         40:ff:34:4e:97:ef:ee:ac:b2:03:dd:bc:93:c3:7f:56:5b:d9:
         6a:84:43:50:97:dc:c6:47:e4:c5:a9:50:50:84:29:f8:f1:4b:
         3a:02:f4:88:d3:f3:2d:21:ef:ee:5d:82:bd:12:7c:04:df:6d:
         39:f0:16:66:29:23:f3:05:dc:76:93:99:0d:da:90:ae:1c:f3:
         2f:3a:a0:30:2c:2d:82:a7:12:fd:7e:df:36:88:84:54:dd:81:
         5c:1c:50:46:5d:4c:01:fd:70:e0:1f:33:73:0a:d2:ba:5f:09:
         87:c5:c0:6d:5c:37:cf:f9:bc:d9:e3:8a:a0:ab:68:34:c5:d4:
         a7:a3:8f:8e:cc:75:7d:d2:1a:2e:54:27:7e:0a:88:a7:0b:e0:
         c7:33:6c:98:7a:b6:0d:9c:07:b0:aa:e7:86:3e:ee:38:ea:04:
         d9:3e:c9:ce:d0:76:09:63:c7:a5:1a:c6:df:2b:da:a5:c6:e8:
         e2:07:55:59:ac:bd:ba:3e:72:2e:e6:33:e7:39:fd:62:cf:65:
         09:05:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----