Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e6458c82-4465-3a39-8b18-4ee2b2fc8633.roa
File:                     e6458c82-4465-3a39-8b18-4ee2b2fc8633.roa (raw, json)
Hash identifier:          8Tk/dPNicm3GU8TdxqUDtZIEtoTAoIBn+TW5W9B2jCU=
Subject key identifier:   5E:6E:D6:FA:77:9B:13:7A:31:C3:B7:F4:65:54:BA:78:62:7D:63:E8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285844DAB9FCCFA97431F9D2192CC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e6458c82-4465-3a39-8b18-4ee2b2fc8633.roa
Signing time:             Sun 11 Feb 2024 09:20:06 +0000
ROA not before:           Sun 11 Feb 2024 09:20:06 +0000
ROA not after:            Sat 11 May 2024 08:20:06 +0000
asID:                     397630
IP address blocks:        158.62.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:da:b9:fc:cf:a9:74:31:f9:d2:19:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 11 09:20:06 2024 GMT
            Not After : May 11 08:20:06 2024 GMT
        Subject: CN=5be4372a-621b-4ad2-891e-6d2e11accac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:37:d0:b5:20:60:07:1c:39:4e:d3:63:ea:
                    94:e7:16:30:05:f0:25:60:df:d3:44:63:e3:6e:bb:
                    a1:a0:3c:dc:2c:46:78:61:42:d4:bb:48:a7:44:5b:
                    81:2e:e9:ed:8c:66:9c:83:8d:b6:6c:14:0d:0c:a2:
                    27:c1:67:1a:8a:aa:77:c1:ef:77:2f:ab:fc:30:b8:
                    f7:86:60:28:ff:d3:2e:1e:83:4a:66:0a:1e:1c:b0:
                    33:7c:cd:de:76:9f:28:01:f1:b6:17:82:98:c5:34:
                    d2:04:86:05:c1:f8:b3:0a:78:05:e3:b7:cf:07:95:
                    a2:9a:d6:2d:a5:a7:4e:17:94:22:f5:73:8e:2e:d6:
                    a1:7e:81:87:12:82:73:dd:f0:e7:d6:0e:f4:f3:a5:
                    0f:1e:a5:26:9d:36:23:d0:d0:28:0b:54:c1:85:2f:
                    64:47:99:55:c3:dd:00:87:3b:73:3d:5c:19:87:e8:
                    00:a9:5a:8c:0c:71:b7:58:a1:b7:e1:d2:71:7a:e2:
                    91:76:cf:95:dc:2d:8d:09:69:7c:bc:ee:1d:54:11:
                    1c:91:b5:af:2d:c5:f2:95:3b:f0:0b:66:47:ab:8b:
                    e7:38:79:64:33:25:21:f8:f5:90:5d:0a:0b:19:48:
                    11:e3:0a:b7:3e:b0:49:06:b8:12:98:b4:f3:b2:51:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6E:D6:FA:77:9B:13:7A:31:C3:B7:F4:65:54:BA:78:62:7D:63:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e6458c82-4465-3a39-8b18-4ee2b2fc8633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:fc:ba:e5:fe:7f:1c:c3:6d:80:bc:89:d0:f2:52:8b:62:
         cb:34:29:d1:4e:d8:df:03:a5:01:c3:34:91:c7:8f:7a:e6:46:
         16:d0:ab:1f:0a:94:b0:07:ac:5f:ff:3d:96:5d:54:b5:4e:de:
         b5:2a:ac:e7:6f:78:28:8c:03:ca:5e:20:0d:c8:47:ec:2e:a1:
         ec:06:6e:28:2e:cc:19:23:7e:3a:71:35:db:6e:6e:86:1d:c0:
         8c:5c:96:68:f5:a6:94:77:e7:3f:42:b2:f2:8f:7e:8d:e5:64:
         07:35:a2:3e:d4:70:3f:14:29:ff:61:a8:59:90:0a:03:5f:29:
         04:d3:e1:c4:86:d3:eb:90:f3:05:63:f8:5f:ed:26:b4:ec:74:
         ad:90:17:bc:d1:12:4b:05:c3:7c:11:f9:89:82:3e:47:35:df:
         c7:53:7e:94:2c:40:93:fd:a0:1b:f1:7f:8b:e2:90:2f:a8:7b:
         81:23:9a:d2:8e:d0:dd:7e:60:c6:92:ab:1f:b9:df:29:b9:1e:
         fd:66:a1:c8:ea:14:dc:2d:52:3a:05:b6:f3:ca:32:a1:b1:99:
         f5:d5:66:c0:59:6e:b4:38:fa:45:d6:ba:8b:fa:80:99:87:c3:
         2a:bd:0a:f3:80:5d:2f:03:cd:82:6a:f5:c8:a2:27:63:7f:f0:
         6c:b6:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----