Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/0659c72f-ba28-3ecc-ad24-a573af4ba8c8.roa
File:                     0659c72f-ba28-3ecc-ad24-a573af4ba8c8.roa (raw, json)
Hash identifier:          Lt+cUxmQe5vwejc/s+u+V4qJse36ajgnnmvyOHxFOiw=
Subject key identifier:   0C:ED:F4:5C:95:CC:BF:60:B5:5A:3E:7F:8E:D5:47:1E:A9:DA:7D:15
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285843F4E86312E25642075BE47440
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/0659c72f-ba28-3ecc-ad24-a573af4ba8c8.roa
Signing time:             Tue 21 Nov 2023 01:37:40 +0000
ROA not before:           Tue 21 Nov 2023 01:37:40 +0000
ROA not after:            Mon 19 Feb 2024 01:37:40 +0000
asID:                     215971
IP address blocks:        104.167.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:e8:63:12:e2:56:42:07:5b:e4:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Nov 21 01:37:40 2023 GMT
            Not After : Feb 19 01:37:40 2024 GMT
        Subject: CN=5904ce06-4529-43ee-bd0b-d3cab7a60045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:a3:84:e1:f7:e9:05:5b:5e:2e:33:fc:b6:
                    0c:3f:6c:bb:76:5e:e0:d9:60:22:15:3b:66:a2:86:
                    36:4f:ea:96:9f:e9:32:b2:0e:1c:e6:d7:aa:1b:1d:
                    35:cc:6c:ee:7a:cd:3f:f4:c2:bd:41:23:69:d4:d5:
                    04:8f:53:c3:72:a1:28:8c:83:ad:c5:a7:a0:2a:12:
                    c1:a7:81:ef:27:0b:5e:ca:57:82:80:6c:23:ea:6d:
                    2c:cd:c1:cc:4b:6f:4f:fb:f8:f8:bd:71:0e:9a:2d:
                    2e:e9:40:c6:8a:8c:79:f5:cb:01:9e:ce:0f:b1:e8:
                    7d:6a:c5:7f:b7:f8:11:7b:33:fa:be:e4:ab:ec:db:
                    37:d7:5d:85:90:96:f3:9c:f0:7a:8a:92:2a:84:7f:
                    1c:c0:2d:41:00:a9:38:99:87:d2:24:08:24:c2:2d:
                    6d:16:49:9c:ed:b1:97:ef:81:8f:97:95:21:57:8a:
                    d5:17:be:23:e9:c4:06:1a:50:7d:f8:df:52:92:0d:
                    04:e4:ad:78:76:28:41:64:ee:dc:80:d8:75:44:42:
                    62:7e:9f:45:43:c2:3c:97:a2:3a:dd:de:7d:67:8b:
                    4b:30:ff:ee:bf:d9:94:e9:af:7c:d4:a0:33:93:62:
                    4c:0c:2b:f7:8b:4a:1a:98:db:8d:0b:c7:3e:e1:27:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:ED:F4:5C:95:CC:BF:60:B5:5A:3E:7F:8E:D5:47:1E:A9:DA:7D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/0659c72f-ba28-3ecc-ad24-a573af4ba8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:6f:7b:47:53:b4:30:41:7c:9c:46:44:2f:fb:e5:4a:a2:
         ec:c9:2e:17:15:66:66:2e:3f:2e:81:ae:74:ea:88:e3:27:8e:
         37:02:0b:76:38:f3:b9:3c:43:97:8f:96:22:2d:d8:c5:90:8c:
         6a:df:7d:32:ab:cd:16:c0:79:ba:57:0a:88:99:89:34:6e:df:
         35:aa:85:bc:23:41:cb:3e:05:e2:5b:52:b2:dd:ab:63:97:d2:
         a3:b7:cc:b3:93:5e:7a:13:b5:50:96:be:d3:71:9b:97:fe:38:
         98:52:b6:20:da:ad:41:90:be:d0:fa:79:4f:6b:5a:26:85:f3:
         99:8e:85:13:45:3c:7a:49:16:3d:ea:49:3d:b6:ef:3d:a7:c7:
         f7:47:bc:a6:35:e8:18:50:f5:2d:59:9c:8f:d1:71:2d:f5:b7:
         0f:00:e7:39:ac:1a:5d:55:ed:e4:a0:64:de:8f:6c:2e:da:e1:
         1b:ce:40:71:b9:1d:f0:2a:a8:fa:35:12:a7:b5:83:6f:57:69:
         6f:e8:26:1b:a8:54:70:cb:c1:93:93:f4:39:82:97:e2:c5:37:
         ec:d8:df:06:62:c7:b6:cb:cd:ae:37:e9:e2:6e:23:ea:d2:9d:
         99:b5:1c:c1:34:1f:6b:7f:c2:2a:74:e7:97:b1:c8:7d:f4:5e:
         97:2c:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----