Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e3ccabe5-cd28-34f0-aa50-90652cca9207.roa
File:                     e3ccabe5-cd28-34f0-aa50-90652cca9207.roa (raw, json)
Hash identifier:          9pk2KRaS1lXarvSJucxstpnWR+9MRgnWwozLliHgX8Q=
Subject key identifier:   77:14:69:EC:11:81:1E:C3:59:6B:89:F4:08:5E:40:72:AF:A2:FE:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858436018D2962C22527B81E83D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e3ccabe5-cd28-34f0-aa50-90652cca9207.roa
Signing time:             Thu 28 Sep 2023 18:19:49 +0000
ROA not before:           Thu 28 Sep 2023 18:19:49 +0000
ROA not after:            Wed 27 Dec 2023 19:19:49 +0000
asID:                     60539
IP address blocks:        107.164.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:18:d2:96:2c:22:52:7b:81:e8:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 18:19:49 2023 GMT
            Not After : Dec 27 19:19:49 2023 GMT
        Subject: CN=3e71d903-6ecb-4770-9cb6-00ffb3612d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:5e:98:31:8b:72:51:66:7a:0d:52:a0:10:
                    83:72:59:92:e0:5f:ee:8e:c8:69:dc:7c:cd:4b:e8:
                    0b:90:df:ec:70:83:4a:20:eb:14:5a:ba:e6:1c:b3:
                    7d:3a:ff:00:ee:cd:f6:1a:1a:05:3d:5b:fb:12:f5:
                    ce:15:68:d2:58:df:2e:c4:03:95:b9:59:fd:44:f2:
                    ac:77:0a:87:41:d3:c1:80:a7:55:66:3a:10:e9:b1:
                    2a:07:fe:dc:f6:71:12:38:af:2d:36:ad:eb:e7:a6:
                    b7:fd:56:d3:66:db:98:b3:3e:ae:18:97:29:ff:de:
                    99:74:d0:3e:a6:d1:1b:f1:fd:77:b9:96:3c:d9:11:
                    08:0e:ec:c5:d8:6d:86:15:e8:34:e6:a0:c3:63:1a:
                    10:e0:cb:d6:bf:ac:0a:a8:79:8a:2d:bf:39:a5:60:
                    5f:07:af:02:8d:17:86:10:16:0a:54:5a:85:eb:20:
                    39:f9:9d:4f:88:31:97:27:8d:14:ea:75:da:8f:c0:
                    b9:ae:4c:c6:d1:8d:c6:e4:dc:0e:0b:90:a9:66:22:
                    6a:a2:90:51:80:d8:6e:f8:15:19:0c:6a:44:c5:89:
                    8b:e9:31:9d:5d:23:04:1d:eb:19:b1:98:c1:a9:2f:
                    84:51:ac:38:96:ce:c5:8f:12:51:44:ae:45:1f:dc:
                    eb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:14:69:EC:11:81:1E:C3:59:6B:89:F4:08:5E:40:72:AF:A2:FE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e3ccabe5-cd28-34f0-aa50-90652cca9207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:bd:30:94:34:3c:03:a8:e3:fc:4a:34:d2:eb:d1:3d:0b:
         91:9d:d1:a3:ae:41:62:2c:f9:d2:4f:c2:f6:96:72:0c:e0:27:
         e5:39:07:9d:c0:15:da:49:81:6c:44:2a:6a:14:73:f8:d9:fd:
         a8:75:b8:10:17:f3:50:ed:d4:5e:4e:34:75:f5:83:bb:7a:06:
         5a:39:0d:92:43:e7:71:40:48:2c:24:76:26:f6:8d:d4:5d:b3:
         a5:24:11:ae:be:4d:14:c8:e8:ee:80:66:e6:57:74:95:9f:86:
         06:b4:bf:90:b5:c9:1c:a0:11:64:a0:81:a0:cf:29:64:91:04:
         6b:ee:f6:d7:d2:27:3d:d2:e5:13:00:af:a4:3c:4e:40:d2:28:
         14:74:a5:ea:86:a7:73:c7:09:1a:ab:d3:52:23:c6:80:d5:39:
         5c:77:1a:fa:d2:06:51:46:d9:ac:e6:19:27:84:2b:3e:fd:43:
         cf:a5:22:99:e7:64:dc:26:38:1f:63:30:7f:15:b8:c1:b0:e3:
         88:b7:cb:89:1e:09:f9:28:7d:d0:64:9e:ec:f0:d4:3e:f5:43:
         a9:1c:30:21:7f:c2:28:ba:ff:ac:4a:4d:06:06:37:54:de:2f:
         5b:c8:5d:7d:6e:52:b3:76:1d:3d:e6:0f:35:df:73:71:e6:e0:
         6f:59:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----