Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f10c58f9-f9ca-3e53-ac18-e8db9333c75f.roa
File:                     f10c58f9-f9ca-3e53-ac18-e8db9333c75f.roa (raw, json)
Hash identifier:          dzGkYMZpF1DhjCDomisyfIGJNNFQqcfD566s489gm7Y=
Subject key identifier:   BD:28:10:7D:7C:1E:08:F3:A0:E2:99:AA:54:B7:60:A3:0C:F4:62:1B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858420B70B10A0AD265C4BA952E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f10c58f9-f9ca-3e53-ac18-e8db9333c75f.roa
Signing time:             Mon 29 May 2023 17:46:13 +0000
ROA not before:           Mon 29 May 2023 17:46:13 +0000
ROA not after:            Sun 27 Aug 2023 17:46:13 +0000
asID:                     398465
IP address blocks:        45.39.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0b:70:b1:0a:0a:d2:65:c4:ba:95:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 17:46:13 2023 GMT
            Not After : Aug 27 17:46:13 2023 GMT
        Subject: CN=68a95151-451b-46f0-96b7-b12f7adae7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:d2:3f:dc:1f:e9:a5:c7:82:11:52:07:fb:
                    d3:88:1e:d2:25:d9:2c:e6:fc:88:d3:d7:a6:ce:70:
                    c1:bf:9a:90:19:e8:16:3a:17:22:de:a4:1d:ab:c5:
                    52:eb:9c:06:5d:54:40:0e:3c:2c:7e:46:ae:c2:4f:
                    5f:dd:b7:22:3c:9c:bf:2f:7d:cc:34:af:54:53:0f:
                    72:6b:12:df:38:4a:bd:3a:4c:34:b9:26:7d:ac:a4:
                    29:00:92:6a:6f:c9:27:7e:bc:44:3f:52:9b:58:a4:
                    ec:7b:3b:21:71:5e:0c:28:72:23:4c:b6:d8:51:db:
                    a8:bf:25:f7:1d:b8:1b:33:77:63:e0:35:db:4a:dd:
                    51:d4:89:dc:d9:b9:42:27:46:5c:d6:36:ce:68:9b:
                    ce:e4:00:5f:59:1e:6e:30:ae:7b:de:bc:86:a6:13:
                    c8:28:f5:fa:4b:1a:06:d4:8a:c0:36:c0:c2:40:63:
                    88:a3:7f:99:36:e4:e1:3f:b3:e4:b2:c7:3c:74:03:
                    c8:0e:af:69:9f:f8:b8:13:66:ec:65:0f:c4:5f:e8:
                    bb:eb:82:c5:ac:2a:d3:5c:e3:e2:52:b8:2d:eb:54:
                    44:22:ee:ce:69:4a:52:33:0d:97:b9:55:72:6d:56:
                    ed:89:17:89:ba:22:53:ac:5c:62:42:5b:cd:2e:81:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:28:10:7D:7C:1E:08:F3:A0:E2:99:AA:54:B7:60:A3:0C:F4:62:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f10c58f9-f9ca-3e53-ac18-e8db9333c75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:16:04:4b:1e:0f:79:03:1f:0b:e1:eb:8e:bb:55:44:d0:58:
         e2:a6:da:f1:5d:a8:1f:43:29:99:6a:c9:18:18:98:d0:0b:0c:
         08:dc:33:af:e9:97:13:dd:05:fa:46:da:fb:fc:96:89:84:48:
         c5:0a:fd:88:6c:65:8a:9f:c5:fa:2e:61:dd:b4:37:46:26:bd:
         37:66:fb:78:d6:7a:bf:03:98:ce:ba:f6:75:99:b3:f9:5f:15:
         d3:19:83:83:fe:25:a6:60:5d:f0:16:b1:78:81:43:1a:9b:d9:
         7e:9d:57:62:d8:7f:9a:8e:58:40:a0:93:bd:1a:ce:2e:af:20:
         94:2a:5e:e1:be:a5:a9:b4:28:ac:7a:a1:6b:a6:de:f3:e0:bb:
         1e:7b:78:1e:47:84:81:bb:a6:a9:41:00:98:d7:35:90:db:19:
         0a:6a:61:ba:cf:e1:36:45:66:36:b0:b6:c5:fa:ce:04:c2:a3:
         d0:e2:90:13:5d:b8:5f:c1:a6:61:3b:b5:ac:1a:fb:54:61:ea:
         05:99:0c:fb:d4:2b:8f:88:78:82:23:7a:9e:e8:3c:1a:03:4e:
         c4:e8:c5:99:ac:a2:31:32:38:fe:87:92:bf:61:fe:79:3f:eb:
         f2:8f:15:55:56:28:ac:ab:78:c2:52:27:ac:ed:9e:df:58:d0:
         f2:e0:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----