Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/c473ddfd-fc43-3b4d-bca2-f54759835d7e.roa
File:                     c473ddfd-fc43-3b4d-bca2-f54759835d7e.roa (raw, json)
Hash identifier:          cWs/qQyaaMhzJ8oekr4Xq/HhlSlhzTMMEwqeqPmLPsc=
Subject key identifier:   22:8C:E7:F1:FB:8F:AC:D0:50:19:00:3B:A9:9C:23:10:55:18:71:F9
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F43285841E46D20E2863D607C0A69A100
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/c473ddfd-fc43-3b4d-bca2-f54759835d7e.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 17 Jun 2023 17:25:03 +0000
asID:                     2914
IP address blocks:        104.224.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:20:e2:86:3d:60:7c:0a:69:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 17 17:25:03 2023 GMT
        Subject: CN=d5365cf9-72f3-4d58-bb02-7d8aec5caad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:a9:75:71:7c:f6:43:66:a6:f2:ee:9f:47:
                    53:90:54:8d:35:5e:7b:1b:a7:52:dc:51:a2:26:02:
                    0b:2b:c0:bb:33:18:ef:38:0f:6a:41:53:2e:29:cd:
                    36:36:ce:b1:d6:25:cf:6f:9c:f5:3f:cf:7f:fc:88:
                    5f:03:33:65:4b:7d:94:6b:3d:99:33:d8:fc:11:6d:
                    67:19:a1:52:b4:a9:d1:6e:54:7a:47:db:b3:10:99:
                    88:80:7a:45:a2:29:f5:af:93:37:86:0d:9a:e0:c5:
                    17:49:58:82:d6:28:31:12:52:bc:c4:4d:e9:55:f5:
                    24:6f:c5:6d:de:d8:ea:a8:5c:42:aa:a6:42:37:2c:
                    1c:7b:72:64:f8:0e:04:ab:14:20:1d:8c:d6:5c:ad:
                    7c:1e:38:49:31:67:e6:f5:ac:15:dd:18:ce:37:ef:
                    d0:9b:58:dc:a4:18:47:7c:2a:b3:5e:37:32:40:48:
                    bf:31:ff:c0:b9:71:c3:6f:a5:b3:16:95:d5:46:2b:
                    91:79:7b:8f:ce:d4:84:cc:9e:f6:3d:c1:5a:5e:a2:
                    63:ed:f1:3a:cb:b8:0a:a5:8f:45:7b:80:a6:f4:3b:
                    78:49:f2:d4:9f:e3:a9:25:e9:e2:e5:b1:2f:0d:f1:
                    0b:5c:ad:a5:01:cf:fe:da:67:55:be:98:e1:9e:c6:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8C:E7:F1:FB:8F:AC:D0:50:19:00:3B:A9:9C:23:10:55:18:71:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/c473ddfd-fc43-3b4d-bca2-f54759835d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:47:b8:7f:14:d7:43:ec:d5:a9:da:f1:17:e2:d5:45:19:e7:
         de:42:67:0c:01:84:ee:08:31:c1:1a:1c:81:c4:95:1f:c6:6d:
         01:ff:97:02:f1:95:38:57:0b:1c:f5:e4:79:13:cd:a9:74:e8:
         93:95:78:10:53:f8:00:cc:e6:fa:91:09:e0:0f:73:e2:1c:c5:
         c4:55:bf:06:9d:79:99:27:ca:8f:5b:6d:63:a1:f9:74:95:de:
         31:37:77:bf:36:8b:4c:a5:09:61:5c:11:fd:a1:d8:36:18:e6:
         00:7e:53:2f:8a:19:10:1c:88:c8:7a:f5:cd:e5:c9:cd:29:4b:
         c4:4b:60:79:6a:64:6e:9e:5f:d8:60:db:c1:e9:d2:01:7f:aa:
         7a:1f:19:2d:69:11:d2:2f:2e:42:40:91:ae:e1:82:0e:30:f2:
         38:45:e5:5d:a8:f8:ca:c1:43:23:94:cb:be:90:04:86:4c:f1:
         72:90:07:e3:bd:f6:e6:f9:ac:88:28:73:31:0a:46:d7:16:1d:
         7c:78:d9:a0:2e:ef:74:5a:7f:5c:83:43:e3:95:c4:99:92:14:
         83:fd:09:09:5c:0d:18:7d:6d:cc:6d:d1:bb:ed:d4:6e:47:ee:
         a5:9e:b9:ff:f8:7e:a2:7e:e4:9a:bb:82:f1:68:cb:df:d9:bc:
         f8:d0:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----