Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ce3bd6ab-b97b-3867-8999-1311b57120ae.roa
File:                     ce3bd6ab-b97b-3867-8999-1311b57120ae.roa (raw, json)
Hash identifier:          hRlKBwmeJR3grDRf7zO9qagb0WNllZhHcbRtLgW/H0g=
Subject key identifier:   B2:C7:0A:93:AE:98:9F:E3:97:2E:A5:4D:8C:72:54:F8:26:E2:E6:19
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584079D92AF6C40CF62487D95080
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ce3bd6ab-b97b-3867-8999-1311b57120ae.roa
Signing time:             Fri 30 Dec 2022 19:32:05 +0000
ROA not before:           Fri 30 Dec 2022 19:32:05 +0000
ROA not after:            Sat 30 Dec 2023 05:00:00 +0000
asID:                     13536
IP address blocks:        72.15.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:79:d9:2a:f6:c4:0c:f6:24:87:d9:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Dec 30 19:32:05 2022 GMT
            Not After : Dec 30 05:00:00 2023 GMT
        Subject: CN=fde6426c-588b-42c8-a626-77fd265cdd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:5d:4e:1b:96:0e:ae:1e:7d:18:4f:f4:49:
                    87:97:58:df:fd:c3:d6:9c:00:0d:72:88:5b:55:06:
                    94:34:bb:8d:f4:43:eb:3f:9b:0b:d7:26:18:02:7f:
                    08:8e:4d:40:24:44:9b:79:ab:5e:2a:c6:d7:b7:f7:
                    ab:d3:c4:eb:0c:ea:5e:7e:56:b8:14:8f:3e:a9:08:
                    19:bc:8b:d9:e0:1d:10:0c:a6:ee:9a:2b:3c:10:c9:
                    b8:b0:bd:0d:f0:f6:6e:47:42:fb:e3:d8:0e:89:68:
                    89:da:97:f3:5b:27:79:43:81:91:05:ad:ff:5d:e3:
                    97:35:de:d3:2f:84:39:4b:c2:b8:97:39:ee:c3:62:
                    52:cc:ef:12:91:84:3b:97:30:f1:fb:5b:98:20:55:
                    86:65:2f:e7:2e:ec:da:3e:6a:44:de:29:d7:80:62:
                    3a:ad:7d:5f:71:ed:f5:ca:55:e9:25:11:87:71:6a:
                    a9:01:a0:1e:8a:2e:92:22:d8:ce:89:da:f9:b6:3c:
                    f8:4e:15:19:67:f4:f7:c4:af:b8:64:72:63:9e:c3:
                    1b:bd:d8:0e:02:77:8f:c5:fd:8d:03:1b:ae:00:04:
                    4b:8e:47:f8:c2:81:3f:78:3c:b4:04:06:df:3d:75:
                    68:d0:15:68:8c:38:48:02:00:b8:60:2a:50:6c:eb:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C7:0A:93:AE:98:9F:E3:97:2E:A5:4D:8C:72:54:F8:26:E2:E6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ce3bd6ab-b97b-3867-8999-1311b57120ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:c4:9d:d3:e6:4a:58:33:f6:a4:cc:a5:5c:52:6a:ab:53:
         5d:1f:ac:9f:dc:d2:c8:b7:7d:fd:c9:e5:6c:b2:83:fe:c2:b3:
         53:ab:b9:c8:d9:78:aa:c6:4a:b0:c6:f6:a7:19:1b:8d:f0:a7:
         c7:1e:8c:fc:6f:9e:11:ba:ec:9e:22:cb:f6:97:a8:90:53:ca:
         30:12:8d:dd:37:f0:80:95:7e:1c:02:f2:62:34:e7:b0:40:fe:
         9a:d2:3c:92:72:c0:1c:05:99:3f:82:c5:f1:f4:81:e5:17:53:
         7c:7e:80:6d:de:75:81:0d:77:1d:05:7d:18:02:5a:0e:b1:69:
         04:c4:71:42:86:57:da:b2:e2:15:ef:df:db:3a:1c:d2:04:a3:
         7d:72:ea:ad:8a:b1:f3:17:4f:10:b2:de:9a:26:85:d7:34:7a:
         a5:22:c9:be:cd:5d:c7:dc:fb:f9:1b:28:e1:91:e1:cb:8f:15:
         b4:81:3c:54:7c:24:10:63:09:21:c1:a9:f4:c5:a1:89:36:93:
         59:42:37:a7:b5:fc:07:bf:0d:08:40:ae:d4:ac:86:01:c1:14:
         b5:30:6f:1d:ab:26:86:29:ac:73:8f:ea:e3:5c:c9:fc:63:63:
         82:6f:f2:2b:65:8e:59:98:15:93:ee:d6:c6:58:90:c4:65:ca:
         3f:21:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----