Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/e3281ace-1e85-349b-bcb9-b64d7f365e17.roa
File:                     e3281ace-1e85-349b-bcb9-b64d7f365e17.roa (raw, json)
Hash identifier:          VL0EsuZkdFRYnD3Sgw05OkI5U3BI7HIpmWeRxrh6qrQ=
Subject key identifier:   97:07:E3:D0:6E:00:42:52:FF:E9:21:7C:79:76:18:79:86:63:4E:31
Certificate issuer:       /CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
Certificate serial:       010D0C9F43285842F6F6ECB45DED8B6267E17640
Authority key identifier: EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/e3281ace-1e85-349b-bcb9-b64d7f365e17.roa
Signing time:             Tue 22 Aug 2023 02:31:38 +0000
ROA not before:           Tue 22 Aug 2023 02:31:38 +0000
ROA not after:            Mon 20 Nov 2023 03:31:38 +0000
asID:                     14618
IP address blocks:        162.246.176.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f6:f6:ec:b4:5d:ed:8b:62:67:e1:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
        Validity
            Not Before: Aug 22 02:31:38 2023 GMT
            Not After : Nov 20 03:31:38 2023 GMT
        Subject: CN=aa2b4a2a-3ac3-4207-9feb-0a85028494ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:c2:14:22:6f:bb:b4:4d:0c:d3:bd:cb:a5:
                    bc:29:6b:41:3b:c2:ce:d7:ca:65:34:71:6d:cf:a7:
                    cc:bf:d0:79:e5:8e:a8:c6:3f:ec:3f:ec:0f:e0:ab:
                    ec:96:e7:9b:9d:fe:62:8b:47:fb:38:fe:b4:49:37:
                    87:cd:ef:ff:e3:3f:3e:80:af:ef:32:79:24:1d:ed:
                    7c:be:33:86:59:39:67:5e:7f:db:72:2b:ca:02:d7:
                    e1:2e:09:e9:db:24:86:6c:92:46:26:35:78:ae:42:
                    03:70:7b:8b:93:6c:2a:62:c9:29:97:c7:cb:48:fe:
                    a4:d2:3e:c7:58:bc:3c:04:fb:0e:c5:8e:52:60:47:
                    88:64:f2:cb:34:45:19:91:b1:58:ac:46:5f:12:2f:
                    2a:90:aa:6f:0b:a7:52:16:1e:a9:24:9b:67:9a:28:
                    43:84:b5:90:c8:0e:da:a0:05:6f:ac:d7:c5:8f:eb:
                    b3:08:00:27:ba:17:cc:24:37:3d:d8:1a:f6:90:e4:
                    1f:e0:e8:a9:a0:59:3d:b5:21:04:18:9b:36:9f:a6:
                    27:08:c9:30:f0:46:23:fc:c1:41:3b:b5:09:1e:e6:
                    31:e4:48:85:2a:a4:59:98:b9:45:78:36:eb:b5:e5:
                    43:a8:a4:9b:7f:7e:c0:3e:f5:24:c4:8a:2d:0a:bc:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:07:E3:D0:6E:00:42:52:FF:E9:21:7C:79:76:18:79:86:63:4E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/e3281ace-1e85-349b-bcb9-b64d7f365e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:63:0f:5d:8b:10:05:76:65:fe:3c:eb:06:e3:75:6d:0a:a9:
         0d:d0:de:33:5a:84:cd:53:e6:5a:b1:4a:f5:32:fc:2e:eb:99:
         dc:70:6e:90:35:11:6c:52:1f:3e:b6:ea:82:22:8f:0a:62:3e:
         41:83:38:24:6d:95:f3:0b:ac:7c:2e:2f:b2:8f:16:95:5a:76:
         a2:d5:2a:57:85:e0:55:e7:97:95:06:70:35:a7:dd:24:09:4b:
         e0:cb:2b:20:ca:25:6d:5f:2d:e1:8e:ad:b3:87:ec:eb:98:72:
         49:6d:30:83:8a:8d:55:42:38:d2:2f:c0:64:c3:26:46:e3:b0:
         64:6c:12:45:ca:b7:4d:e5:a1:07:1e:d6:cd:74:2c:0e:25:fd:
         a2:f7:00:b7:04:07:92:1d:11:fc:a9:d0:90:ef:ac:ed:d7:24:
         c7:30:cf:b5:6a:0d:29:16:b1:e1:57:71:b9:7d:ec:96:b3:64:
         03:7c:79:6f:56:2a:59:fc:19:da:15:35:3c:4b:67:c3:e3:5f:
         85:67:1a:7f:79:8d:73:df:1d:9e:21:c4:d7:15:71:33:d2:bd:
         77:37:80:1b:a6:7a:ec:0f:1e:af:e8:a8:15:d5:c8:fa:dc:26:
         be:91:1b:6b:7f:27:ac:52:94:4a:35:11:7b:c3:b4:2e:4f:30:
         75:e8:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----