Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3a7bf6b5-6966-3ebc-8c30-b94c48f3096e.roa
File:                     3a7bf6b5-6966-3ebc-8c30-b94c48f3096e.roa (raw, json)
Hash identifier:          VlJRBdxHzu8FtcfRfeptt032AHwSpmJ7vrWXCwqSAJA=
Subject key identifier:   3D:EB:7F:F8:2C:20:14:59:97:88:7D:84:64:11:0F:08:D9:5E:E5:BF
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285843F543850BD2ED9C628A708040
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3a7bf6b5-6966-3ebc-8c30-b94c48f3096e.roa
Signing time:             Tue 21 Nov 2023 04:41:17 +0000
ROA not before:           Tue 21 Nov 2023 04:41:17 +0000
ROA not after:            Mon 19 Feb 2024 04:41:17 +0000
asID:                     40676
IP address blocks:        209.182.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f5:43:85:0b:d2:ed:9c:62:8a:70:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Nov 21 04:41:17 2023 GMT
            Not After : Feb 19 04:41:17 2024 GMT
        Subject: CN=69df3450-4f39-4137-9c07-730f094c7791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:2a:6c:01:00:ea:11:e7:d7:ee:32:8e:52:
                    4c:49:15:db:43:16:df:40:4e:94:49:5e:f6:55:0b:
                    96:0d:69:7e:48:14:05:1a:6c:ba:4a:01:92:58:43:
                    ff:77:3d:71:0f:f4:07:d9:fd:83:5c:c5:15:08:b3:
                    5c:84:59:96:17:89:67:69:c5:57:5d:9a:15:41:70:
                    b7:37:92:64:e4:46:4d:af:c7:7c:e2:f7:28:8b:ee:
                    1a:76:32:6f:d2:88:2d:ad:cf:23:9c:99:02:c8:78:
                    20:ee:92:41:c2:29:e7:39:b8:3b:c9:1b:a7:b0:11:
                    4c:f5:b3:59:ef:97:9d:ef:83:28:b0:09:09:f4:d1:
                    27:2c:21:0f:cc:c9:f8:d3:cb:cd:8c:1a:40:08:0d:
                    fe:1f:40:43:7e:e9:f6:97:24:13:e8:00:71:dc:0a:
                    9c:79:22:be:82:d8:b2:ee:1c:6e:6f:0d:d7:d4:d6:
                    71:86:61:9d:92:8c:b6:5b:b5:56:1d:7e:54:7b:e5:
                    c7:93:7b:22:ea:a5:80:c5:12:81:ea:2a:64:ec:df:
                    27:76:77:c5:a7:5d:91:50:f9:70:93:c0:83:b8:64:
                    19:d7:37:1a:ce:d0:38:17:a5:0d:34:45:c9:b6:dc:
                    d8:27:61:22:e7:d9:88:23:d3:50:db:75:ea:4f:54:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EB:7F:F8:2C:20:14:59:97:88:7D:84:64:11:0F:08:D9:5E:E5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3a7bf6b5-6966-3ebc-8c30-b94c48f3096e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:76:f3:81:2e:cd:48:9f:7c:9d:e8:34:29:0b:ba:6c:ac:
         f6:97:df:ce:50:9d:2a:68:8c:70:5e:dc:33:ed:2b:63:c7:99:
         92:7c:b4:c1:60:b5:bb:40:97:5b:72:08:12:01:33:6d:d0:fc:
         f9:d6:db:e9:ea:8b:2e:dd:7a:2b:fd:41:ca:fa:9d:6e:8c:23:
         f1:b4:ce:82:89:44:eb:7e:6e:f5:6d:30:da:4f:55:c8:3d:eb:
         de:31:c1:d6:ce:89:3c:83:d0:d4:98:93:5c:ec:01:ed:2e:3d:
         9b:c0:52:10:08:0d:51:f6:ea:9d:c6:65:69:e9:a2:bb:69:8f:
         98:b9:b4:e4:ae:00:49:23:e1:89:8c:cd:a2:30:7e:e2:70:27:
         88:f2:32:2f:1a:a3:bf:15:95:56:2a:2b:c3:12:6a:ed:82:00:
         c1:a4:3e:d5:c7:3e:16:da:9a:ce:e2:d3:cd:2d:63:be:3b:33:
         87:1a:e5:a0:8d:f4:ff:e4:52:1b:8f:6c:59:c9:88:69:d7:22:
         62:17:00:ac:14:c7:b0:8e:fb:c5:e1:09:cc:e1:bf:b7:06:f3:
         12:55:15:af:15:75:30:b2:9a:0e:19:1a:82:9b:df:42:54:45:
         73:cc:56:3c:fc:e1:80:56:1e:1b:25:e0:0d:b9:a7:c7:48:41:
         34:90:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----