Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/973c3175-503e-3105-8b1d-a7c9c5c39aac.roa
File:                     973c3175-503e-3105-8b1d-a7c9c5c39aac.roa (raw, json)
Hash identifier:          hbciiLJ7AsSG7i5e21USLV2hy2x+uRiVeQ5xsMobTnw=
Subject key identifier:   82:B8:F8:4D:CC:1F:5C:FA:26:7D:CF:E1:44:76:80:7C:A1:38:79:D3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848388546102C0A7A405712E380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/973c3175-503e-3105-8b1d-a7c9c5c39aac.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     40676
IP address blocks:        23.27.138.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:46:10:2c:0a:7a:40:57:12:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=24cfc4ed-e3cd-44c4-b40e-8d5207f36cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:4b:db:86:e9:5b:81:de:2b:2a:f7:c4:fc:
                    39:b6:b6:44:a7:3b:d8:e4:38:bb:68:53:b3:7b:52:
                    95:a4:f2:41:a5:ca:e9:98:9e:6e:1d:26:bf:0b:88:
                    ba:4f:7f:a3:d4:a0:d5:85:de:c4:8f:09:52:cd:07:
                    c6:5c:b9:4e:54:0c:25:29:0b:57:3c:54:f6:4d:46:
                    30:02:56:2d:14:7d:d9:3d:45:13:f6:a3:82:a8:43:
                    c4:88:19:88:f6:2f:d9:09:50:19:a5:26:39:07:7f:
                    eb:c9:ca:a9:bb:fc:60:8b:1f:49:27:5f:a3:fe:ce:
                    2c:81:28:c7:5e:cb:14:d3:d6:8e:cd:3b:79:27:df:
                    6a:13:c1:4b:b3:4c:53:18:4a:cf:fd:e1:45:f5:82:
                    d3:8d:82:d5:6c:b1:8b:58:4c:4f:ac:f1:6b:31:b8:
                    e3:9f:59:6d:7e:98:53:d3:65:65:0d:ca:96:28:8d:
                    ff:87:b7:3e:d8:dc:61:3d:d0:ec:ae:c5:56:1e:7a:
                    f1:16:6a:73:32:4b:fd:89:a1:f4:20:51:04:2c:18:
                    e0:99:e9:9d:a7:41:f6:bc:1a:f0:f2:80:da:e2:dd:
                    9b:75:88:91:9d:fc:31:8e:4c:fc:df:6a:78:75:ce:
                    f0:66:4d:d6:79:96:1e:17:ae:16:f9:db:ef:01:ca:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:F8:4D:CC:1F:5C:FA:26:7D:CF:E1:44:76:80:7C:A1:38:79:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/973c3175-503e-3105-8b1d-a7c9c5c39aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:5f:68:90:77:1c:1a:4d:af:07:2d:78:3c:1f:e3:78:e0:
         f5:5d:b9:ad:b8:56:ad:88:22:73:35:e2:a1:c4:18:2e:c9:25:
         29:d4:e2:ae:7e:88:77:42:ae:8d:49:a3:a3:cf:28:e3:08:90:
         66:3e:2d:a8:c7:80:67:bd:d1:c8:17:f8:58:d3:61:f0:dd:39:
         f2:39:fa:f2:c7:70:56:92:fc:ef:93:bf:d6:e0:b7:be:8b:07:
         5a:df:5b:d7:d7:24:ff:fb:c2:56:65:69:d7:3b:ae:ef:23:32:
         c0:cd:ce:ee:f5:d5:06:f0:27:bf:5a:b3:ad:5c:f1:21:fe:6c:
         ab:a8:a7:07:f5:28:78:e1:9d:56:77:81:e9:ec:82:80:ad:d6:
         4e:01:69:ec:b9:c8:14:3b:05:7d:87:54:64:c9:1c:bd:b9:60:
         77:95:3e:d0:fc:dd:4a:55:75:32:80:ba:c1:78:8d:db:fb:99:
         9a:9c:5c:ab:80:a5:c8:98:36:42:42:38:b5:a1:5b:1a:c1:44:
         bb:5a:0e:bd:f1:fa:89:3b:86:75:39:a2:3d:dc:79:79:e9:39:
         f5:a5:76:da:db:46:a5:c1:cb:e0:28:3b:96:00:64:9d:d8:5d:
         dc:ce:63:59:96:07:26:54:36:c0:e2:ac:39:65:f2:ee:34:50:
         7f:f6:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----