Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/66d5315d-e07f-304d-a2c6-bea9a589c897.roa
File:                     66d5315d-e07f-304d-a2c6-bea9a589c897.roa (raw, json)
Hash identifier:          iqnuxMZFRSbkw0ZoEjl+Cgk3Wnxa3K9ChQQZmctCro8=
Subject key identifier:   53:C4:3C:F0:1C:84:E5:BC:9B:2E:0B:FB:87:DB:8F:37:AE:7B:55:19
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285844606F032F1CC7029971201700
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/66d5315d-e07f-304d-a2c6-bea9a589c897.roa
Signing time:             Fri 29 Dec 2023 14:00:21 +0000
ROA not before:           Fri 29 Dec 2023 14:00:21 +0000
ROA not after:            Thu 28 Mar 2024 13:00:21 +0000
asID:                     1239
IP address blocks:        103.28.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:60:6f:03:2f:1c:c7:02:99:71:20:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Dec 29 14:00:21 2023 GMT
            Not After : Mar 28 13:00:21 2024 GMT
        Subject: CN=1ffa7d42-0848-43e1-a317-c354f445b0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:3b:51:2d:00:3b:eb:55:8a:a8:2e:2a:32:
                    63:81:1e:b4:63:c7:d0:da:81:a1:a9:75:c5:14:72:
                    75:6a:ea:f3:e0:e2:14:19:9f:2e:5a:d4:02:b0:98:
                    96:ed:97:09:b8:fd:39:d4:1b:f0:a6:0b:41:4a:6b:
                    16:4f:6a:cf:80:eb:8e:3a:5c:69:42:c7:4c:71:3a:
                    db:13:d2:6a:2f:c7:60:ff:46:3b:21:8c:fa:4d:29:
                    cc:aa:79:e7:36:7f:dc:c1:65:c2:2b:be:f3:7c:68:
                    48:78:46:37:52:29:31:cc:f5:0f:0b:4e:2a:0a:5c:
                    f4:16:f0:c8:66:30:36:c3:a7:22:5c:68:b7:16:ef:
                    b1:20:29:d0:ac:09:c1:c4:d4:2b:d8:9e:d1:74:82:
                    ca:4c:02:d2:be:8f:c4:cd:4b:9e:58:5c:c2:69:48:
                    51:ab:09:92:4d:76:5d:48:31:d6:1e:f4:78:35:19:
                    03:94:58:9f:8b:3e:9a:e7:e2:3c:cb:fb:60:77:a3:
                    67:74:0e:ed:87:ae:30:71:06:54:73:b8:5e:ac:76:
                    20:61:2a:f0:a0:dd:57:94:d3:76:d9:d3:0d:08:66:
                    ac:70:f7:f5:dd:7f:cc:b8:2d:8d:00:ba:0a:ab:ea:
                    8b:44:83:e4:b4:93:d0:43:7d:d6:da:9b:5d:97:a0:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:3C:F0:1C:84:E5:BC:9B:2E:0B:FB:87:DB:8F:37:AE:7B:55:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/66d5315d-e07f-304d-a2c6-bea9a589c897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:c8:08:51:51:98:ea:81:43:de:3c:6b:e3:9e:a4:6b:9c:
         64:31:f1:db:d5:03:4c:26:60:84:77:1d:e0:80:c9:06:40:a7:
         ae:86:bf:1f:f3:30:70:3c:bd:c4:38:a6:a4:8a:57:43:f8:54:
         ec:52:23:3e:fd:fc:2a:73:8b:12:72:62:6c:c9:5b:e2:49:f3:
         6e:8e:30:50:b0:fc:f3:b8:db:24:84:17:ca:5f:04:a4:20:d4:
         e0:cc:1f:dc:2b:d8:91:af:2f:24:50:ae:d0:7b:19:4c:8b:f9:
         41:c7:ec:6c:ce:c2:af:27:22:1f:f8:3f:a0:68:a9:b3:2d:32:
         40:a9:12:74:b6:b7:25:82:cf:48:91:2f:3f:1f:6b:fb:e1:9b:
         87:f5:88:f1:f0:c4:f7:6b:80:23:81:d2:66:85:3a:69:b5:26:
         8a:01:64:56:0a:6a:75:50:a9:90:e2:71:f0:7e:f1:21:a9:e0:
         6e:2f:c6:78:59:cd:4a:5b:18:9c:6b:84:12:7d:1d:cb:db:7a:
         6d:07:52:08:c1:14:7c:68:c8:50:5b:2b:e4:7e:7b:f5:f7:64:
         ea:5a:5b:c2:0a:d4:73:29:71:e8:9c:b4:d9:87:0d:3f:05:84:
         94:8c:72:9a:04:d2:b1:a3:e5:18:b9:98:5c:3a:16:de:d3:76:
         43:a1:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----