Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d38acd86-0542-39e9-badb-6578ec60b313.roa
File:                     d38acd86-0542-39e9-badb-6578ec60b313.roa (raw, json)
Hash identifier:          ITeUFC6p/n26o26tBOFwTWjgk12TzKMkn9ltIwoOypg=
Subject key identifier:   A0:C2:C5:76:01:84:0C:FB:0C:A8:97:28:5C:63:62:00:F0:11:09:D8
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584206B298F8C2DB2B8319680B80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d38acd86-0542-39e9-badb-6578ec60b313.roa
Signing time:             Sun 28 May 2023 00:59:58 +0000
ROA not before:           Sun 28 May 2023 00:59:58 +0000
ROA not after:            Sat 26 Aug 2023 00:59:58 +0000
asID:                     834
IP address blocks:        216.185.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:06:b2:98:f8:c2:db:2b:83:19:68:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May 28 00:59:58 2023 GMT
            Not After : Aug 26 00:59:58 2023 GMT
        Subject: CN=8b8a478c-a818-429f-b45d-8f7f14a12981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:c3:5a:f2:d8:90:32:b2:74:a2:53:de:50:
                    91:c8:a5:9a:0f:bd:33:b8:95:4b:d1:82:97:9b:c9:
                    44:69:2b:b4:c5:18:7d:93:0c:36:7e:54:6e:b3:3b:
                    cc:97:2b:24:1d:c6:94:67:06:04:d8:5f:ff:f7:3d:
                    e9:09:d9:b1:8b:b7:fa:f2:ad:e1:b6:e8:b9:b9:e8:
                    77:d3:16:fe:eb:fe:f6:73:e2:3a:6a:a3:69:3a:89:
                    27:a0:d6:2b:a6:bc:31:7d:2a:ba:fd:7c:1a:d2:cc:
                    58:7d:4a:5a:09:58:47:c5:7d:fb:f4:89:f0:c9:07:
                    bd:0e:2f:77:ff:bb:07:c7:d8:7f:ea:43:02:89:af:
                    d0:ac:59:d6:13:51:02:ad:51:69:ab:e7:1d:50:92:
                    2f:cc:2f:f7:1d:5f:45:bb:b5:3c:5c:ca:52:bb:b5:
                    82:16:30:6c:d4:cf:c5:95:6c:fc:a2:5f:3a:8b:4f:
                    a3:0e:99:2a:0c:ed:a1:6e:0c:ae:4f:06:ff:bb:bd:
                    6a:e1:f9:dd:e2:f0:49:f0:96:65:44:01:0a:29:14:
                    19:68:04:d7:62:8f:35:27:2f:5a:e4:20:ef:a2:07:
                    7d:76:38:c5:1f:0a:ed:66:c3:7b:9c:eb:d9:ac:15:
                    fc:71:5f:59:ba:a4:19:e9:b4:36:d0:9b:65:64:1d:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C2:C5:76:01:84:0C:FB:0C:A8:97:28:5C:63:62:00:F0:11:09:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d38acd86-0542-39e9-badb-6578ec60b313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:30:e3:1f:bd:9a:df:f4:f0:77:57:e3:ac:ab:c3:db:2e:
         89:e1:ee:9e:bc:18:f2:f1:87:f2:cf:dd:3b:ff:85:25:af:6d:
         f8:e2:fa:97:92:26:81:b6:0c:42:f9:cb:f3:88:a3:7e:b6:59:
         c3:5e:67:5b:1f:66:67:2d:ac:77:31:18:9f:d4:d8:87:f7:88:
         1e:de:1d:1c:41:00:04:5e:12:64:01:49:82:a2:57:4b:d9:d6:
         05:ea:fd:67:53:04:d6:5b:56:9f:97:b9:7f:3f:be:2f:83:6d:
         08:93:d6:88:13:c0:92:dd:34:65:50:c2:10:86:c5:8f:9e:47:
         b6:c7:47:ed:3b:9f:2d:68:bc:a6:87:f6:8b:37:fc:6f:89:98:
         5e:3d:69:79:10:4f:f5:1f:cc:aa:3d:3c:52:00:30:f6:21:5f:
         0a:78:99:c3:a3:0c:73:56:3d:a5:f6:36:b6:a0:21:3f:e3:c7:
         02:d8:c7:ed:0b:fa:f1:b0:7a:3e:4a:cf:ba:ca:7c:3b:21:7a:
         ba:47:7b:11:b2:0d:32:62:fb:96:56:b6:86:8c:a3:e0:be:e5:
         20:b4:9c:de:a3:66:a3:8c:5a:f3:08:7f:9b:76:50:e1:fa:83:
         85:7a:4a:3b:e2:7c:ef:a9:e1:10:21:2a:86:fc:9e:6d:e6:59:
         33:c9:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----