Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7a72ef8-14e5-3fec-a48f-e7aba579741f.roa
File:                     e7a72ef8-14e5-3fec-a48f-e7aba579741f.roa (raw, json)
Hash identifier:          wuDbKWfweOm6CRNzBGXLcRTJ9pa8/rGmD055/g5rlQU=
Subject key identifier:   69:72:5C:E2:F9:E3:36:5A:5A:A2:DA:37:40:19:76:D5:5B:D6:0C:0C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842EA1E7928E05D9F3359AE6609
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7a72ef8-14e5-3fec-a48f-e7aba579741f.roa
Signing time:             Thu 17 Aug 2023 12:05:49 +0000
ROA not before:           Thu 17 Aug 2023 12:05:49 +0000
ROA not after:            Wed 15 Nov 2023 13:05:49 +0000
asID:                     45671
IP address blocks:        172.94.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ea:1e:79:28:e0:5d:9f:33:59:ae:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 17 12:05:49 2023 GMT
            Not After : Nov 15 13:05:49 2023 GMT
        Subject: CN=4e98eff1-6088-4026-8428-d2f4b1486643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:85:2a:dc:c6:df:4f:0c:d1:c8:d0:a7:58:
                    a0:b7:d6:24:fc:cb:1e:69:3a:73:f1:13:57:33:fd:
                    a0:a5:51:db:c0:21:73:d3:d4:59:3d:f1:94:72:c6:
                    9f:78:e7:83:df:0f:89:5c:e4:e6:66:3e:58:90:a6:
                    5f:5b:6e:1b:98:8d:31:26:8e:5e:2f:3f:9f:2d:5f:
                    a6:16:4c:65:c0:18:05:1c:7c:ec:16:21:28:fa:c0:
                    34:cf:19:74:b0:6d:13:41:62:6b:90:be:ed:3d:79:
                    71:7e:90:6d:f7:3d:7d:bd:bf:63:51:3f:40:55:64:
                    61:30:3e:5e:90:5a:0f:03:18:5d:18:37:bf:82:c1:
                    c6:49:07:ec:6d:35:13:eb:3c:2a:df:82:24:f8:9c:
                    a4:79:e4:64:bb:3c:24:e1:aa:0c:b1:b3:16:97:6e:
                    d8:39:59:b2:e5:bd:a6:f6:89:eb:83:45:8d:56:bd:
                    73:06:2e:9c:b7:94:79:41:73:23:75:6c:6d:6a:47:
                    54:39:f9:21:46:24:74:68:cf:03:4b:d2:c1:79:13:
                    2c:7e:90:ba:9f:1c:19:7a:b1:8a:28:1d:cb:cf:71:
                    4f:9e:b9:8e:e0:90:7f:77:cc:02:96:cf:91:22:03:
                    eb:10:7d:52:bc:3d:5d:81:85:c7:40:6a:07:a3:02:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:72:5C:E2:F9:E3:36:5A:5A:A2:DA:37:40:19:76:D5:5B:D6:0C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7a72ef8-14e5-3fec-a48f-e7aba579741f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:6d:d8:39:32:b5:bd:b0:6c:29:83:ba:8e:bb:bb:a0:64:
         3a:a7:50:e9:6a:1b:98:46:ce:1f:b3:c4:fb:e7:3b:22:82:8d:
         b8:77:94:c1:bf:09:9d:73:4a:07:bc:36:47:a6:61:20:32:3b:
         a2:26:2a:fd:d8:a8:72:d7:3f:35:72:f8:ff:5f:cb:b0:bd:90:
         09:b9:2e:7c:b5:80:10:38:99:04:2e:1f:a7:2f:2f:a6:55:c5:
         d2:31:17:fc:93:37:84:88:11:ee:32:65:66:90:a3:e3:80:81:
         a9:4d:47:72:8b:0f:7f:a8:71:45:0d:02:33:86:85:b3:aa:49:
         b0:15:6d:4c:1e:08:3c:31:22:7c:e1:85:d6:bb:15:60:4c:9c:
         ab:ee:b3:e9:e0:c8:ef:9c:fe:ec:ec:e8:86:21:eb:44:ef:e6:
         c4:1b:a2:5d:f6:c2:3a:f7:09:48:3c:e9:03:37:b4:64:5d:6a:
         ec:23:82:86:1d:9c:2b:73:a4:f1:e9:e6:fb:c0:d4:ea:f5:a3:
         21:be:4f:b0:48:0b:5f:df:6e:b3:c8:a5:3d:a8:fa:ac:ed:e4:
         71:4f:3b:7e:c1:25:7e:64:60:2a:bb:bf:bf:c0:c9:db:64:f7:
         16:84:a0:ab:ae:00:0d:aa:a1:a3:96:36:25:d8:62:15:85:1c:
         71:9d:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----