Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/87b78881-c9e8-383f-95ac-562920107176.roa
File:                     87b78881-c9e8-383f-95ac-562920107176.roa (raw, json)
Hash identifier:          f2ce1inpCQxI0LgOyRTKQGt16y4zzLlepXkwk6K4HNY=
Subject key identifier:   70:13:6A:9B:2D:E4:5C:2B:04:91:24:0F:93:39:FF:F6:CD:DF:84:6F
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584332CF615781B21DEA75806B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/87b78881-c9e8-383f-95ac-562920107176.roa
Signing time:             Tue 12 Sep 2023 13:00:24 +0000
ROA not before:           Tue 12 Sep 2023 13:00:24 +0000
ROA not after:            Mon 11 Dec 2023 14:00:24 +0000
asID:                     327813
IP address blocks:        172.111.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:32:cf:61:57:81:b2:1d:ea:75:80:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 12 13:00:24 2023 GMT
            Not After : Dec 11 14:00:24 2023 GMT
        Subject: CN=ccdd8543-1529-41da-bc51-0ee6f51898f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:c1:a4:89:f6:1e:2e:6f:3b:1d:bc:97:85:
                    5e:62:df:42:d4:a8:52:19:7d:59:94:86:e7:a8:18:
                    6b:74:d5:c8:65:e1:2b:d3:7f:53:26:87:0b:b7:c5:
                    50:05:63:1d:75:39:02:68:73:dc:d9:8b:98:30:29:
                    13:21:c4:5f:8a:ab:80:b2:f3:23:4d:ad:cc:b0:80:
                    f2:4e:b0:cb:8c:b8:17:87:02:7d:32:96:b6:96:24:
                    35:d4:6b:b4:b4:6b:70:fa:4c:61:20:18:db:5c:9c:
                    0e:42:ff:11:a2:bb:67:8c:22:6b:58:f4:54:ae:16:
                    f6:e1:ba:28:d4:02:2d:6e:e2:2c:42:c4:7e:d1:66:
                    2f:e2:75:08:94:84:61:21:2a:49:e3:3c:f2:46:cb:
                    36:40:7b:de:64:f8:69:d3:cd:7e:a0:3f:c1:b7:51:
                    f8:30:19:07:57:10:5a:6a:0e:dd:f8:de:5b:5b:6e:
                    05:b7:a4:82:0d:02:2c:87:72:4c:4b:f8:e6:25:f9:
                    c0:8e:03:61:c5:56:64:04:03:ae:e4:bf:69:bf:14:
                    ee:7e:2b:c8:a9:58:3b:bb:25:bc:97:a9:8d:f3:35:
                    8b:77:c4:65:d1:97:44:4b:89:e3:b1:95:0b:e8:a1:
                    0a:08:dc:6b:01:47:f9:02:15:b8:a3:d5:ad:dc:83:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:6A:9B:2D:E4:5C:2B:04:91:24:0F:93:39:FF:F6:CD:DF:84:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/87b78881-c9e8-383f-95ac-562920107176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:9e:83:df:23:8b:64:0a:e1:cb:16:6f:81:01:60:e3:fe:
         d2:8d:96:8d:71:79:a1:1f:5e:61:c4:91:87:63:83:bd:f1:33:
         e1:73:07:bf:8d:d1:13:64:32:e7:a6:f1:61:27:6e:7d:74:35:
         3d:dc:60:32:bf:19:04:8e:57:86:e2:0c:c3:7d:f8:a0:53:b2:
         e7:ed:d2:00:f4:0e:e6:3c:a1:49:d2:49:40:fb:0b:3b:a8:75:
         ab:95:8b:f1:3c:2a:ff:de:27:d0:6e:a6:57:07:9c:73:ee:6f:
         6e:94:a1:ca:fb:6f:54:b3:07:13:85:4b:8d:9e:c7:0e:5a:da:
         2a:9f:3b:4f:27:8e:3b:60:54:86:00:83:3f:fc:a2:44:e3:51:
         64:54:66:42:cd:76:58:71:7f:0d:80:02:e7:b5:e1:b5:ab:5b:
         2b:3c:50:fa:bd:44:6f:e2:0d:66:ef:bf:a6:86:af:6f:0e:e9:
         97:71:c8:c3:12:1a:30:cc:b2:a6:90:66:1a:b0:0e:c9:5d:de:
         85:7e:24:44:42:54:a1:bb:1f:1e:9e:b6:9b:e3:a9:d8:94:01:
         1c:37:fa:08:ab:56:38:5f:ae:a3:dc:19:72:f2:b3:d6:ba:b3:
         39:d0:5d:26:5f:1a:8d:0b:3f:06:6a:7b:90:29:15:c3:24:aa:
         0b:9f:d4:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMyz2FXgbId6nWAa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDkxMjEzMDAyNFoXDTIzMTIxMTE0MDAyNFowLzEtMCsGA1UEAxMk
Y2NkZDg1NDMtMTUyOS00MWRhLWJjNTEtMGVlNmY1MTg5OGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxDBpIn2Hi5vOx28l4VeYt9C1KhSGX1ZlIbn
qBhrdNXIZeEr039TJocLt8VQBWMddTkCaHPc2YuYMCkTIcRfiquAsvMjTa3MsIDy
TrDLjLgXhwJ9Mpa2liQ11Gu0tGtw+kxhIBjbXJwOQv8RortnjCJrWPRUrhb24boo
1AItbuIsQsR+0WYv4nUIlIRhISpJ4zzyRss2QHveZPhp081+oD/Bt1H4MBkHVxBa
ag7d+N5bW24Ft6SCDQIsh3JMS/jmJfnAjgNhxVZkBAOu5L9pvxTufivIqVg7uyW8
l6mN8zWLd8Rl0ZdES4njsZUL6KEKCNxrAUf5AhW4o9Wt3IPU4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHATapst5FwrBJEkD5M5//bN34RvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODdiNzg4ODEtYzllOC0z
ODNmLTk1YWMtNTYyOTIwMTA3MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOwnoPfI4tkCuHLFm+BAWDj/tKNlo1xeaEfXmHEkYdjg73xM+FzB7+N
0RNkMuem8WEnbn10NT3cYDK/GQSOV4biDMN9+KBTsuft0gD0DuY8oUnSSUD7Czuo
dauVi/E8Kv/eJ9BuplcHnHPub26Uocr7b1SzBxOFS42exw5a2iqfO08njjtgVIYA
gz/8okTjUWRUZkLNdlhxfw2AAue14bWrWys8UPq9RG/iDWbvv6aGr28O6ZdxyMMS
GjDMsqaQZhqwDsld3oV+JERCVKG7Hx6etpvjqdiUARw3+girVjhfrqPcGXLys9a6
sznQXSZfGo0LPwZqe5ApFcMkqguf1OU=
-----END CERTIFICATE-----