Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/202ac9f4-b5ee-3053-9394-ad4236d7746b.roa
File:                     202ac9f4-b5ee-3053-9394-ad4236d7746b.roa (raw, json)
Hash identifier:          i7GC1hneeAgfhO40HBp97NQnwKh4Aq2YST3UHoS3xjE=
Subject key identifier:   BC:DB:E1:DE:FE:73:A7:7A:84:36:86:CB:BB:08:13:B9:46:CB:51:25
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328583EA9FEF844A4CE8FFD5F016C80
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/202ac9f4-b5ee-3053-9394-ad4236d7746b.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Sun 23 Jul 2023 04:00:00 +0000
asID:                     398395
IP address blocks:        192.67.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a9:fe:f8:44:a4:ce:8f:fd:5f:01:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2023 GMT
        Subject: CN=fe183fa9-ce40-4781-b6dd-633ff16c37ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:08:5b:b6:48:03:f7:a1:0b:db:63:24:a2:
                    25:2a:09:c3:14:75:ff:1d:bd:2d:21:2e:36:15:7b:
                    f0:cd:47:4a:47:3b:47:0f:fe:9c:ce:c4:6f:d2:7e:
                    04:1c:b6:3f:2f:79:ad:85:a9:a6:56:b1:fa:42:9a:
                    17:3e:c2:dd:12:9e:c6:07:5b:ca:26:19:ee:84:c4:
                    bb:d0:94:a6:d4:65:d0:1d:1e:02:81:0d:89:4a:7f:
                    62:56:ab:ab:11:dc:eb:94:89:23:5f:39:4a:55:ff:
                    f7:97:9e:82:b2:f9:8a:f6:65:b5:75:f7:32:85:78:
                    4f:23:1e:84:8c:a2:b0:12:86:78:ea:26:57:a9:24:
                    c8:52:7e:76:ca:de:fe:00:cb:4e:41:3a:78:0c:e2:
                    9e:d3:4c:bf:43:16:9c:14:bb:fd:78:a9:65:28:32:
                    b3:8c:e6:58:61:9c:ba:9e:7f:c5:10:15:2a:b5:00:
                    5a:5c:bd:55:2c:2b:73:b4:39:41:17:0d:58:9a:fa:
                    e2:6f:bc:cb:56:53:40:4e:01:a6:33:fc:da:48:58:
                    94:69:d5:47:46:98:c0:f1:3b:5f:a2:9a:a3:10:a3:
                    d6:76:64:44:4c:96:74:ec:3b:d9:8c:81:bd:82:22:
                    0a:68:2f:c8:81:cf:96:cd:e9:b5:48:65:31:2c:e0:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DB:E1:DE:FE:73:A7:7A:84:36:86:CB:BB:08:13:B9:46:CB:51:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/202ac9f4-b5ee-3053-9394-ad4236d7746b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a5:67:41:8c:5c:a5:e8:b3:84:f0:d0:86:8d:b6:b2:f9:ee:
         07:aa:a1:b9:b1:de:31:45:05:e0:26:75:a3:d0:eb:81:c1:e3:
         47:d2:d1:0a:03:a0:8e:7c:ed:02:c7:29:3c:39:87:0e:a8:aa:
         b7:db:54:28:5e:2d:a8:27:78:98:a4:70:5f:c8:01:ac:07:f0:
         21:81:29:87:53:9b:60:f8:6c:c4:0f:1e:26:1f:f4:4e:5b:06:
         b0:30:0d:90:8d:70:fb:ef:aa:6c:0e:a5:79:88:ba:b9:75:a0:
         89:3f:fa:f3:70:ad:9f:55:d1:74:2f:13:c9:06:b7:5c:a2:14:
         5a:05:dd:6f:dd:46:9f:ee:3a:f7:64:e1:13:61:a5:c4:dd:72:
         12:61:25:0d:b5:1b:08:5c:40:0e:4b:b8:00:92:ae:df:f1:43:
         a9:80:a5:5b:5a:ef:4c:2a:2c:2d:86:f1:fd:c9:46:57:1c:6f:
         c0:c2:db:00:9e:c6:c7:49:f2:53:fa:f9:f5:cc:ac:9c:8b:7c:
         32:56:03:68:fe:ac:b5:2f:15:02:ac:b8:39:05:73:d6:a3:cf:
         1e:25:3f:43:b7:b0:94:2d:2a:f2:48:44:52:df:d2:55:64:64:
         70:12:05:5f:96:ae:0f:48:4b:e5:fd:48:79:94:67:00:92:32:
         a1:37:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----