Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea18ed1a-b5b9-3d15-bd85-6d445f4eee53.roa
File:                     ea18ed1a-b5b9-3d15-bd85-6d445f4eee53.roa (raw, json)
Hash identifier:          RWD34ky3oUDzeBaBrSgO9lofmYfVvB71IUIJ94qP6Bw=
Subject key identifier:   7C:64:0D:5A:A6:C1:62:30:48:4C:D2:13:F2:76:F2:C4:44:E3:8E:95
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289DD12305B94633C50DF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea18ed1a-b5b9-3d15-bd85-6d445f4eee53.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        98.21.32.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:dd:12:30:5b:94:63:3c:50:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=825975fa-7fbd-4ab2-b43c-1ed9494416aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:2d:f9:d7:22:98:72:99:65:85:e6:47:ed:
                    29:fb:d6:33:14:86:62:71:05:09:90:22:2e:38:e6:
                    b8:bc:6e:0a:2a:9b:55:55:28:6c:24:00:d6:ab:61:
                    d5:38:84:7c:d7:77:58:79:51:3b:2d:97:75:28:c5:
                    18:08:5a:b8:9c:4b:d6:15:92:17:6b:98:75:33:91:
                    d7:f8:08:d5:82:b8:57:a6:bf:92:57:c5:de:7b:ef:
                    6c:2d:25:e2:bc:f0:98:4f:d1:47:45:08:36:78:57:
                    e0:6c:b8:68:1c:30:c3:a9:a0:85:09:a6:e3:47:6a:
                    df:69:ad:c4:1e:55:2c:43:50:28:7b:bc:a3:46:85:
                    eb:0b:0e:7d:9c:da:c7:83:00:3d:49:82:30:40:db:
                    84:31:81:af:78:63:71:e8:8b:66:da:7c:4e:75:88:
                    cb:5a:37:32:14:e0:ed:db:2c:26:57:6b:4d:dd:5a:
                    8b:dc:fc:5c:fb:8f:24:19:5c:a2:26:c0:4c:ff:91:
                    35:aa:f7:74:68:0b:09:3f:44:fd:ef:98:df:e5:ba:
                    51:9f:82:07:e1:84:83:d4:c9:56:dd:e6:67:0b:76:
                    25:f9:e1:27:d6:bd:6c:a9:40:e4:98:c3:35:74:6f:
                    33:fe:69:90:38:1e:e3:b4:72:1c:ef:c7:6b:99:ab:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:64:0D:5A:A6:C1:62:30:48:4C:D2:13:F2:76:F2:C4:44:E3:8E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea18ed1a-b5b9-3d15-bd85-6d445f4eee53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.21.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5d:9e:9e:61:6f:b3:58:d3:e1:84:54:9d:d8:07:d3:6d:28:
         7c:cf:db:c4:be:47:18:2b:75:0d:7e:19:ec:8c:f5:74:fe:0e:
         b3:25:7e:ae:67:e6:ba:18:ed:f5:b8:f0:b8:55:d2:22:eb:88:
         48:44:b4:88:1b:54:b1:dc:46:29:3f:3c:55:be:6c:14:97:d6:
         dc:4b:4f:67:d2:c3:bc:78:1b:a9:da:f0:e7:52:bf:9a:ec:df:
         65:5d:a6:07:3f:4a:90:3c:cb:0a:e5:32:13:50:cc:8a:ab:6b:
         fc:f9:32:85:95:3d:4a:b2:28:26:d6:9d:62:43:dd:4d:7b:ba:
         c9:cd:8c:50:d1:df:24:6b:a5:ca:30:be:a3:31:65:ad:33:f1:
         ce:e4:ae:ba:79:8c:db:27:91:07:2a:a9:d7:b6:f3:a1:c4:ae:
         96:84:68:25:07:1a:4f:d5:fb:05:27:51:9b:51:06:83:77:52:
         6d:b2:11:03:99:4d:af:25:55:94:73:03:5a:d8:4e:bb:da:5f:
         e4:fc:67:fe:71:4b:4d:74:e5:53:34:8a:72:ba:ad:19:3e:92:
         b8:2f:cd:4d:39:6b:09:98:30:c4:c2:e6:a8:2b:c9:50:17:7f:
         11:eb:8b:79:b5:98:11:f8:24:99:c6:26:1b:b1:aa:18:df:bf:
         70:0b:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----