Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0cce2c05-dcfe-3d3a-bbd7-aafffe7f9541.roa
File:                     0cce2c05-dcfe-3d3a-bbd7-aafffe7f9541.roa (raw, json)
Hash identifier:          bCjO15ESII6uc1dJELJZkv6tkmuEK98ALVIm7cPRLZk=
Subject key identifier:   0A:25:98:1F:A8:98:35:41:0F:05:4F:7B:21:16:01:05:5C:5F:F4:0A
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285841E46D03AD506FA83FE4022B40
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0cce2c05-dcfe-3d3a-bbd7-aafffe7f9541.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 29 Jun 2023 22:09:19 +0000
asID:                     9009
IP address blocks:        216.158.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:03:ad:50:6f:a8:3f:e4:02:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 29 22:09:19 2023 GMT
        Subject: CN=0d4686b5-c5a3-4711-8eee-33a3b598d206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:59:45:02:c6:8e:75:d9:05:8b:ab:55:a9:
                    e9:5d:df:d5:09:ff:f7:8b:e7:c7:fa:7d:a4:c3:d7:
                    a7:d7:f2:f4:d5:dc:ba:86:fb:62:ec:8b:53:c2:25:
                    f8:b9:1c:a5:c6:46:a0:e1:83:fb:a9:6e:b9:76:24:
                    19:43:f2:01:ec:9d:53:c7:ee:26:22:57:6d:74:b6:
                    b2:54:ec:02:71:ff:82:1f:d1:f9:12:ed:a6:21:aa:
                    f1:d6:cd:20:64:cb:32:58:aa:e3:10:a2:d1:5f:46:
                    fa:1e:96:e7:1f:46:36:25:14:ff:14:45:2c:26:91:
                    58:51:32:9b:52:d6:41:0d:b2:94:d3:bb:05:63:05:
                    50:5b:c9:b3:1c:1b:bd:6d:d4:98:dc:66:d2:8c:8e:
                    ae:17:99:8a:dd:6f:e1:03:57:41:79:31:bf:f2:21:
                    3a:52:a5:8e:eb:4f:69:1a:d8:f5:cc:71:63:0c:21:
                    46:7a:a6:cf:a2:db:83:d8:21:f4:74:4c:51:b8:1d:
                    26:2f:8e:d5:d0:86:cb:96:37:b2:d5:3b:3f:f8:b6:
                    31:d5:a0:52:db:e6:74:26:25:dd:c5:91:e0:7f:36:
                    ad:3c:75:62:7e:d1:84:67:36:43:ed:5d:20:ac:b3:
                    ed:4a:49:b5:2f:82:a3:ed:03:5d:b5:93:a8:8b:7f:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:98:1F:A8:98:35:41:0F:05:4F:7B:21:16:01:05:5C:5F:F4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0cce2c05-dcfe-3d3a-bbd7-aafffe7f9541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:99:d2:49:50:13:e6:f0:13:db:f3:db:4e:3b:f5:3d:1b:49:
         16:f4:e2:b7:a5:7d:e3:ec:28:84:ef:28:23:76:b8:f6:6b:04:
         a9:65:26:6d:76:51:dd:3b:eb:a4:2c:71:14:de:33:5d:10:44:
         aa:b6:07:55:c4:44:d3:07:74:4c:21:2a:d0:a2:2b:9b:0b:8a:
         fb:70:8c:f0:d7:a2:bf:8e:c4:fd:7b:3a:de:88:01:f3:d3:b6:
         65:71:18:30:94:92:89:e4:11:46:db:cd:dd:c4:b8:d5:d4:32:
         e7:47:1b:da:58:f3:e8:0b:b3:97:7c:5d:b5:20:d4:96:3a:0c:
         c4:96:ac:69:0b:d0:0c:65:ea:14:3b:b6:8d:a2:ae:99:0a:f6:
         f2:f4:b9:99:11:8e:37:32:85:5c:2c:d0:50:94:dc:47:ee:22:
         86:8a:dc:49:78:ac:46:36:90:c0:72:18:37:8c:23:c1:bf:b3:
         67:fe:d3:a5:d3:cd:3b:59:69:b6:08:94:5f:cb:f3:fa:04:ae:
         79:7a:03:89:79:b0:4e:65:f8:d6:ea:cf:af:0e:2a:7c:b0:af:
         ed:60:28:c8:fd:95:90:bc:67:db:f7:2a:76:f1:7e:c0:75:6f:
         df:f3:72:70:84:f3:03:ca:41:af:fd:3a:ac:b3:02:5c:b7:4a:
         21:ae:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----