Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d5be6ef1-9b11-3cdd-8f91-152632a44370.roa
File:                     d5be6ef1-9b11-3cdd-8f91-152632a44370.roa (raw, json)
Hash identifier:          bvbzE+VOcfgMEZLnSinC9UXNkLqjrPgnD5EObgaICEQ=
Subject key identifier:   19:2A:56:FB:F6:DB:34:DB:DD:A4:28:F0:3D:C5:5D:02:BB:6F:AB:36
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858449382E5ED078B31F6009223CE
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d5be6ef1-9b11-3cdd-8f91-152632a44370.roa
Signing time:             Tue 16 Jan 2024 21:06:42 +0000
ROA not before:           Tue 16 Jan 2024 21:06:42 +0000
ROA not after:            Mon 15 Apr 2024 20:06:42 +0000
asID:                     31845
IP address blocks:        64.125.160.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:82:e5:ed:07:8b:31:f6:00:92:23:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 16 21:06:42 2024 GMT
            Not After : Apr 15 20:06:42 2024 GMT
        Subject: CN=86fe1d18-eab2-4f0e-b76d-eeb1acce3cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:f0:43:3a:d9:7c:d4:18:e0:f4:63:fc:5d:
                    31:86:0a:d0:85:12:a2:5c:99:9f:cb:70:5b:99:c8:
                    bd:83:61:e8:bd:aa:67:0a:16:b2:95:47:6a:ed:6f:
                    2d:e5:27:89:8c:b6:e7:e0:0b:9e:4a:3c:2c:38:22:
                    88:85:25:67:92:82:a9:c3:88:a5:e1:cc:cf:1f:8e:
                    5e:ba:86:e1:fa:80:68:3c:4e:c1:6c:e4:c5:55:2c:
                    92:33:50:c8:bd:70:ce:65:77:be:e2:c6:80:6a:f3:
                    9e:50:30:db:77:d8:3d:ef:bb:5b:3a:da:d5:c3:96:
                    0c:32:1a:f0:29:de:0f:0d:ed:f1:f2:db:8c:14:ae:
                    05:56:ee:66:78:73:6f:9e:a6:20:f9:ef:eb:7a:8a:
                    0f:cb:1d:3d:c2:26:b7:59:a4:32:84:00:c8:df:8b:
                    06:83:fb:66:a1:eb:da:46:ee:01:ce:b6:13:6d:bf:
                    55:fc:21:8f:4a:a3:4b:76:c4:07:ff:42:d2:30:45:
                    b1:86:76:1f:c4:21:92:2f:8f:16:0b:e2:b4:a4:54:
                    7d:04:17:02:36:79:08:ba:03:eb:b8:d9:4a:41:67:
                    8d:d8:e8:27:38:eb:1a:5b:e2:b3:f8:a9:d1:2e:25:
                    bb:8a:42:6b:8b:c0:03:8a:44:59:bd:c5:da:bc:95:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2A:56:FB:F6:DB:34:DB:DD:A4:28:F0:3D:C5:5D:02:BB:6F:AB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d5be6ef1-9b11-3cdd-8f91-152632a44370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:7e:66:b9:ec:c8:59:0b:ab:90:81:f1:88:6a:8b:b0:37:
         b2:b0:17:7c:f9:df:1d:0e:68:35:eb:64:0c:c3:cb:3c:4a:8c:
         74:1f:e7:23:ee:d1:03:cd:e2:ba:0c:f2:72:98:fa:7d:eb:cb:
         12:99:bd:26:76:04:a5:af:e0:d0:e2:a6:da:76:14:c2:b1:41:
         27:a4:6f:1f:c6:67:90:f5:07:cd:6a:7c:19:ad:45:1e:41:8e:
         d5:be:8d:fa:2f:57:4b:e1:d6:fc:1b:bf:57:8e:06:02:36:b2:
         e8:56:2c:20:2f:85:f7:22:1f:83:11:f4:17:8b:d7:83:61:c9:
         24:1d:2f:34:a4:0f:eb:ff:4c:54:df:ca:f1:ce:ba:30:01:56:
         a7:00:23:e2:58:f4:f2:3b:5b:a7:7a:24:88:70:68:46:7b:68:
         8f:35:60:a7:d0:bd:1e:2b:e5:b8:14:75:19:62:5a:84:c2:55:
         ae:dd:07:b6:f4:14:c5:b0:e4:c6:8c:e7:40:0c:6c:f3:17:3e:
         6b:09:2f:fe:7b:87:81:a0:9c:5c:49:b1:1a:2f:5b:93:66:3b:
         fc:17:90:43:f3:d2:e5:33:f8:9a:a6:1c:05:84:81:aa:b1:95:
         e3:47:fe:5a:f3:c0:68:6a:ea:03:e4:87:15:7c:19:da:b6:85:
         ab:26:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----