Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/215d562c-c5a8-3beb-9ee3-e28a7e5b45ff.roa
File:                     215d562c-c5a8-3beb-9ee3-e28a7e5b45ff.roa (raw, json)
Hash identifier:          rB9vkC9covTxL7A8U4qu9b+qnY2XCyH9UkGvjj0Betg=
Subject key identifier:   07:B1:47:00:0B:AB:48:8B:17:FE:17:64:28:B3:53:7D:0A:3A:2D:47
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A11623CB7C4EA76A8AB03A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/215d562c-c5a8-3beb-9ee3-e28a7e5b45ff.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.238.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:11:62:3c:b7:c4:ea:76:a8:ab:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=df9bf831-29ae-4f29-95a9-b66bbda82459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:e2:5c:72:9b:4c:7d:dd:cc:93:53:8f:5d:
                    a1:ba:49:db:d0:fe:21:65:a3:05:a4:fe:c9:97:9d:
                    f7:07:a8:c1:34:7c:ef:89:3e:b7:6f:9c:1d:3a:3f:
                    0e:a4:cc:81:67:d1:3b:48:e3:62:96:a5:53:c0:b9:
                    af:b6:2f:62:ef:cb:56:75:b4:38:86:10:cd:f5:f2:
                    03:ff:b3:d7:cb:4e:1d:8d:69:89:ef:53:b1:cb:aa:
                    86:ce:e9:7e:13:64:26:85:c1:4a:e3:07:47:a9:21:
                    7f:5b:9f:60:d8:b9:70:e3:de:72:af:7d:a5:5f:82:
                    5c:68:fc:4b:04:92:94:f3:a6:c1:62:a5:c3:d6:63:
                    2e:46:2b:a4:a7:13:7b:5e:b1:d9:c8:6a:32:ef:eb:
                    27:e6:fd:0b:0f:6d:28:2d:64:9a:11:17:b2:c1:e7:
                    ae:98:2b:17:b5:eb:95:b5:48:f3:29:16:a0:fb:c9:
                    0b:ac:71:65:fa:0e:be:0c:5c:ca:57:39:ee:2b:25:
                    83:89:fa:ac:d0:fc:52:40:4e:78:3f:e2:de:b7:82:
                    54:fd:5d:3c:94:74:d5:fb:1d:cf:b8:f0:1f:d7:4e:
                    a8:24:a9:72:2f:9c:c2:3b:2e:46:b9:1f:f5:39:2b:
                    23:62:43:b9:c3:c5:f3:33:00:9d:81:7e:82:22:88:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:47:00:0B:AB:48:8B:17:FE:17:64:28:B3:53:7D:0A:3A:2D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/215d562c-c5a8-3beb-9ee3-e28a7e5b45ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:89:4d:a0:b9:32:e7:70:c2:c3:fc:a1:e1:9a:ef:ae:56:84:
         d1:73:f1:ac:38:ae:32:9a:9e:d0:35:75:7a:ad:07:d5:0f:3e:
         71:c9:3d:11:32:1b:00:7d:fb:01:c4:76:73:32:53:dc:0c:ab:
         fa:ac:de:e7:75:72:ef:6c:36:19:89:6d:df:41:c5:64:b8:9e:
         46:f9:d9:39:04:b2:d0:65:af:99:92:43:85:4f:c2:25:ae:b9:
         06:ea:ae:4a:d4:24:ea:d6:e0:d1:8a:a7:90:46:a9:fe:57:f1:
         36:68:45:d3:46:c4:8f:f9:68:ae:6c:e4:88:db:5a:da:6d:8b:
         eb:48:2b:c0:54:2c:02:cb:f9:a5:2a:84:da:e8:6b:4e:52:71:
         f2:2b:95:92:8c:54:05:02:f7:71:5a:7d:f5:21:3a:1c:64:a1:
         d5:b4:e0:83:10:f6:b9:eb:98:5e:30:d5:86:e9:96:6d:ed:c6:
         e1:42:0a:74:74:68:2e:e0:10:50:43:6e:39:d7:17:1c:40:c2:
         a0:a9:d9:9f:e5:93:1a:e5:a5:e8:aa:28:60:9c:d9:01:16:42:
         13:62:c4:73:ba:f8:a6:37:0a:b0:a3:8f:9a:73:b4:10:0f:81:
         71:74:aa:ec:8e:2f:31:fd:86:ea:39:1c:43:61:3f:f9:e1:b5:
         9c:b6:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----