Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c76a2c1e-8f02-3fa0-8f77-58318a24631f.roa
File:                     c76a2c1e-8f02-3fa0-8f77-58318a24631f.roa (raw, json)
Hash identifier:          E6fKGCHygz87HA3vEitoUUZeZjocLTwEEJMw+WnXEHU=
Subject key identifier:   7B:BD:69:8F:10:C6:B0:A2:3A:48:04:40:48:69:0A:A8:B1:93:DF:F4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285844A675630E9DE22574420AEF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c76a2c1e-8f02-3fa0-8f77-58318a24631f.roa
Signing time:             Tue 23 Jan 2024 15:59:51 +0000
ROA not before:           Tue 23 Jan 2024 15:59:51 +0000
ROA not after:            Mon 22 Apr 2024 14:59:51 +0000
asID:                     397423
IP address blocks:        50.117.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a6:75:63:0e:9d:e2:25:74:42:0a:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 23 15:59:51 2024 GMT
            Not After : Apr 22 14:59:51 2024 GMT
        Subject: CN=1cad0d73-9a57-4b4d-b9c4-34ed9ae85c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:41:da:eb:5a:c8:0b:56:f6:fa:c8:08:dc:
                    8d:24:60:e7:a1:e1:94:fd:10:3a:75:5d:e5:8c:5b:
                    4c:d7:cc:84:b6:38:00:3b:ca:a8:e7:a5:a0:dc:16:
                    e2:0d:85:ff:9c:d8:f2:f0:10:67:d3:f5:f0:ca:5f:
                    74:b9:f3:18:02:f3:a7:02:89:c3:fb:46:2a:47:59:
                    e7:14:88:0d:24:60:c4:fb:7d:06:29:2a:69:38:33:
                    fc:5a:72:66:c6:fc:88:ab:a2:b6:78:51:de:69:96:
                    43:b3:dd:05:89:ea:cb:ca:1c:b9:70:05:0c:a1:b3:
                    5a:d2:48:fe:6d:16:5c:57:06:fc:5c:b6:39:77:32:
                    1d:e7:e1:ce:bf:5e:9e:de:9f:59:97:35:bf:ea:f5:
                    14:36:e9:71:23:cd:bd:f9:d3:76:8b:d5:be:45:f1:
                    8d:a6:0b:82:5d:eb:1a:3a:04:f0:0f:55:83:f5:59:
                    51:c3:7b:5f:0c:24:4c:a4:c3:08:a5:27:60:92:db:
                    78:59:e7:9b:db:19:cc:88:cf:b6:ad:f0:98:a3:63:
                    f3:db:c3:17:12:4f:43:fc:e6:38:56:f7:39:91:71:
                    ae:22:7d:4e:fd:0b:59:fb:5a:68:b1:01:2a:95:ab:
                    14:f4:7a:0f:2b:45:01:8a:ba:d7:01:f1:ab:cd:a3:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:69:8F:10:C6:B0:A2:3A:48:04:40:48:69:0A:A8:B1:93:DF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c76a2c1e-8f02-3fa0-8f77-58318a24631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:1b:41:4b:0d:ba:b3:07:12:b5:f4:1f:6a:69:bf:35:33:
         3c:a1:92:1f:e7:db:da:a0:3c:fe:7e:95:b7:71:fe:ee:68:2b:
         e0:27:4e:99:8e:15:84:f6:1f:74:e5:96:b3:90:81:d7:bc:d9:
         5b:e2:63:d7:ca:86:f7:55:15:19:56:96:60:1b:3b:2e:51:be:
         0e:a5:10:6d:92:db:ca:a1:31:6c:64:da:06:9f:e2:e0:e1:9c:
         04:f9:44:d8:86:ee:e1:09:53:0a:f7:d9:a8:45:bd:c3:57:41:
         5f:2c:c6:c0:c1:ab:c2:3b:2d:24:75:98:74:70:65:f5:44:70:
         99:85:1b:b8:25:14:07:4b:ec:f0:99:a5:e2:cc:d0:f4:9c:8c:
         96:58:30:0b:a1:7a:d6:c1:e5:1d:7b:81:ad:f6:d5:98:9b:97:
         51:24:bb:fc:44:c4:8d:be:0e:68:b4:a1:ed:6d:2a:21:d6:59:
         c6:6b:96:b7:5c:72:8e:58:b7:78:a7:13:de:08:49:15:82:cf:
         76:9c:54:8c:fe:4c:c8:65:dc:65:ba:a4:3e:ef:18:e5:55:a3:
         ab:62:a9:57:25:2f:2b:e2:33:bc:ad:36:f8:d2:5f:dd:6f:37:
         6d:04:f4:32:91:d9:94:a2:f6:87:a7:8b:58:91:44:21:01:71:
         1a:90:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----