Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/202c0c1f-1c86-3075-9b61-d20c9a989312.roa
File:                     202c0c1f-1c86-3075-9b61-d20c9a989312.roa (raw, json)
Hash identifier:          8uoZLmBPD/X9mGeOnD/ZMtHlqWaYP+ppJIBqkbFar38=
Subject key identifier:   FB:BE:0F:54:8C:2C:47:3A:BE:62:16:95:BB:7D:6A:A9:F7:08:84:AD
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F432858434946AF45F7D634B7105D3C80
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/202c0c1f-1c86-3075-9b61-d20c9a989312.roa
Signing time:             Wed 20 Sep 2023 14:08:38 +0000
ROA not before:           Wed 20 Sep 2023 14:08:38 +0000
ROA not after:            Tue 19 Dec 2023 15:08:38 +0000
asID:                     834
IP address blocks:        64.113.4.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:49:46:af:45:f7:d6:34:b7:10:5d:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Sep 20 14:08:38 2023 GMT
            Not After : Dec 19 15:08:38 2023 GMT
        Subject: CN=14125de7-bf90-40f3-908c-09351ceb6544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:30:22:79:f2:33:23:51:67:d9:cc:7a:71:
                    00:fe:cf:a5:0e:d1:3d:3f:e5:90:6b:a1:18:eb:7b:
                    37:18:00:2a:55:20:fe:93:46:a0:b3:5b:f5:1c:80:
                    6d:30:9c:36:5d:07:a4:3b:57:a3:37:cc:84:c8:6e:
                    c3:d6:d9:d4:a0:d2:9a:14:07:76:ee:8f:04:86:a1:
                    2b:dd:74:8b:a2:3a:87:cd:a2:da:81:cd:9e:9e:58:
                    05:af:25:b2:e7:c0:cf:d2:4c:a1:51:a2:43:4f:13:
                    34:9c:c2:d1:93:0c:95:0b:34:48:d9:42:cc:74:da:
                    b7:c0:93:d5:ab:9c:08:0a:9e:80:f7:27:1e:51:82:
                    1e:3b:37:40:5d:dc:42:75:11:02:52:f0:c9:cc:b9:
                    cf:0c:ac:34:2f:d2:81:e4:82:49:b0:48:d8:de:d8:
                    b9:63:f1:61:1d:ad:13:ed:9c:98:45:89:79:cb:af:
                    f0:6b:bf:d0:3c:fd:19:03:25:4e:95:26:32:9a:f8:
                    d6:c9:7a:4f:14:19:6e:21:58:b1:1f:06:65:00:50:
                    e8:30:a1:23:64:47:f3:04:36:5e:43:fb:b8:d0:14:
                    ad:71:43:a3:bb:7d:45:3f:fb:f1:c2:fb:13:6b:dd:
                    f4:66:7b:99:0c:86:bc:8c:a0:62:48:e5:ac:4f:08:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:0F:54:8C:2C:47:3A:BE:62:16:95:BB:7D:6A:A9:F7:08:84:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/202c0c1f-1c86-3075-9b61-d20c9a989312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:35:c4:78:8f:24:f3:01:7e:9d:1e:54:fa:30:4b:8e:f5:cb:
         d7:eb:26:79:97:37:ef:14:6c:42:2f:bb:3d:b6:12:38:80:05:
         2e:b8:ce:12:85:16:66:ca:5b:71:93:2b:83:b6:8b:d7:8b:7c:
         5c:9d:fa:ba:61:75:f8:9d:87:54:0b:2d:a6:69:d0:04:e7:6f:
         e0:52:9a:fa:0c:8b:49:a8:ed:47:7c:a7:7b:f6:ec:37:a0:92:
         b3:94:81:e9:0c:b7:1c:37:67:5c:53:2e:a4:4f:e5:52:d1:46:
         6c:53:0c:ad:97:9b:83:78:ac:97:33:51:26:c3:86:3f:25:fb:
         01:eb:1f:63:40:2e:54:16:51:7f:2e:e5:c1:35:a2:4c:ad:82:
         50:20:14:67:78:e7:12:0d:25:99:e4:08:68:6e:95:5d:de:5e:
         5d:aa:5f:ce:53:53:55:f8:2e:c7:de:a2:50:90:7b:52:5c:22:
         8e:e1:b7:a4:f4:5c:78:b8:9d:c7:80:ce:43:cd:d7:4c:91:d0:
         35:5c:01:2b:83:0e:c9:0b:e0:b4:99:c5:b1:3d:da:ee:7a:bc:
         81:cc:f3:11:20:c6:a8:a3:06:6f:e2:ae:27:96:fb:dc:e5:e4:
         d0:44:45:95:90:59:36:dd:2d:53:78:14:73:cf:f8:0f:24:49:
         a6:14:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----