Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/396b4bea-d99d-3702-b498-e617511984d6.roa
File:                     396b4bea-d99d-3702-b498-e617511984d6.roa (raw, json)
Hash identifier:          /XDFBoLrrjDCQWJhBV/89ArTHkPRg/GF/7o/S886fic=
Subject key identifier:   8F:4C:A0:2F:49:2E:73:EA:3F:7B:D5:09:2A:10:EF:D3:AC:F3:7E:A2
Certificate issuer:       /CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Certificate serial:       010D0C9F4328584310A994ABBF755CB936CB27E0
Authority key identifier: FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/396b4bea-d99d-3702-b498-e617511984d6.roa
Signing time:             Thu 31 Aug 2023 07:26:49 +0000
ROA not before:           Thu 31 Aug 2023 07:26:49 +0000
ROA not after:            Wed 29 Nov 2023 08:26:49 +0000
asID:                     36113
IP address blocks:        23.247.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:10:a9:94:ab:bf:75:5c:b9:36:cb:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
        Validity
            Not Before: Aug 31 07:26:49 2023 GMT
            Not After : Nov 29 08:26:49 2023 GMT
        Subject: CN=bf854f4e-e0e5-4e7c-935d-05894df7621a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:0c:79:9d:3b:e0:f9:a8:df:13:3d:77:31:
                    59:b0:12:1d:01:97:94:84:0d:26:25:97:1e:b7:0e:
                    7c:46:ed:c9:0e:6a:37:30:ec:ac:2d:fc:5a:e9:be:
                    1b:d4:18:12:12:9f:35:c1:d0:1e:3a:1b:14:45:fb:
                    b3:89:1b:97:ee:a5:f4:dc:1c:7a:94:48:dd:3d:eb:
                    7a:57:ef:67:0f:ed:3a:d9:7d:77:0f:4a:4a:b2:d7:
                    89:17:b6:4c:47:dc:03:3a:f2:15:3f:2d:76:de:6f:
                    b8:d9:6e:00:0a:72:12:61:c1:4f:40:5b:e6:f5:1d:
                    6e:68:68:89:71:8d:6e:10:7b:9a:a2:78:88:25:73:
                    83:04:5a:77:ee:b7:0e:01:53:61:89:3f:3b:e5:c3:
                    92:57:79:25:af:5a:6f:e7:4e:d4:5a:a7:43:5a:3f:
                    dc:76:4e:e8:8d:c9:2e:62:25:9a:e9:84:4d:7f:57:
                    8d:aa:10:eb:e5:32:2f:dc:87:01:c6:69:17:fe:08:
                    8a:48:f5:15:63:9d:4a:c7:7c:79:dc:80:49:0d:18:
                    a7:14:e2:a2:ad:1a:fa:97:97:3e:2b:14:15:12:19:
                    0c:f5:83:4c:d5:4c:2e:12:97:8c:b8:f1:ef:ae:ca:
                    af:b3:36:9c:e6:a7:26:44:d8:c3:cc:be:97:09:72:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:A0:2F:49:2E:73:EA:3F:7B:D5:09:2A:10:EF:D3:AC:F3:7E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/396b4bea-d99d-3702-b498-e617511984d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl

            X509v3 Authority Key Identifier:
                keyid:FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:d5:f4:d0:2c:cc:76:39:34:3f:38:9f:dc:67:23:2c:60:
         0c:54:1e:85:b0:eb:95:f8:88:34:05:38:7e:8d:52:69:d4:67:
         a1:79:9b:ad:68:10:5c:89:53:17:1e:01:c2:5c:7d:65:08:e3:
         4a:db:70:52:78:2e:b1:09:d3:66:b8:16:64:32:60:ea:5a:5e:
         f5:5c:44:da:14:87:20:17:2c:45:eb:b0:4b:d7:c9:6a:17:cb:
         9d:52:ab:98:a8:96:a6:3f:11:c6:fd:73:e9:49:d2:26:98:1d:
         ef:cd:48:bf:6e:3c:a9:2a:32:36:c0:cd:76:25:91:b0:30:84:
         2e:f2:3e:6b:54:c2:34:74:91:9f:c4:5e:d0:06:2b:de:3d:70:
         d0:3c:ab:51:76:6c:fd:f2:3d:ae:3e:3f:5f:ca:9f:ee:71:02:
         4a:bf:85:e3:b2:84:a5:7a:0e:73:c5:1f:2b:4e:49:74:d9:4c:
         1b:c2:d6:07:6d:73:6c:2e:28:c0:33:30:d5:44:3c:eb:cc:f4:
         30:c1:b4:2d:1f:79:c2:cc:3a:7d:fd:69:71:05:fb:3d:dd:98:
         17:09:73:8b:b3:9a:17:19:c5:6d:05:e0:8d:80:27:9a:b2:50:
         8a:be:56:25:cb:61:b1:6b:69:c7:53:5e:07:49:43:d0:70:78:
         94:bf:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----