Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b253bfd-6961-3ea0-ac78-eadaeb11c808.roa
File:                     3b253bfd-6961-3ea0-ac78-eadaeb11c808.roa (raw, json)
Hash identifier:          7oyj4wKqbCQzrq/bmu6SXKg4fCRa6VboBV63VAdOdXs=
Subject key identifier:   A9:E5:A4:0E:50:16:21:4C:D9:7D:7D:1B:E7:88:0D:27:1B:85:2A:7F
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858432EAFE084CAAD2B0035789F80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b253bfd-6961-3ea0-ac78-eadaeb11c808.roa
Signing time:             Mon 11 Sep 2023 01:33:45 +0000
ROA not before:           Mon 11 Sep 2023 01:33:45 +0000
ROA not after:            Sun 10 Dec 2023 02:33:45 +0000
asID:                     197890
IP address blocks:        149.19.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2e:af:e0:84:ca:ad:2b:00:35:78:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 11 01:33:45 2023 GMT
            Not After : Dec 10 02:33:45 2023 GMT
        Subject: CN=e78e0d74-c5e4-4842-b755-6df7cef351fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:58:a1:09:3c:ea:2f:eb:1f:10:6e:b6:18:
                    ba:fb:3d:28:ca:ca:2a:f8:93:82:9e:df:ce:f3:21:
                    16:78:d2:a8:36:8a:1b:18:b9:c8:d6:b9:18:21:86:
                    2e:a4:6a:c9:14:3f:3a:2e:5c:66:db:7f:91:82:e8:
                    3f:89:a2:80:4d:5c:e3:11:11:9f:32:ec:ad:9a:7b:
                    78:55:8a:49:6f:5a:98:26:38:10:ff:f0:e6:4a:31:
                    3c:ee:c8:fa:08:f6:0c:c6:f4:57:3b:b6:74:47:74:
                    98:33:7f:93:87:2f:73:9a:4d:4e:c8:e7:28:57:e4:
                    43:e8:af:2c:23:b1:cb:e6:df:7b:14:70:92:10:6c:
                    da:2e:05:32:99:b3:7c:db:1e:5a:e0:64:2c:69:61:
                    0d:76:b5:a1:56:57:79:80:fc:7e:2e:aa:2c:46:81:
                    6f:6d:a7:60:ab:9c:01:55:2e:93:ba:43:a3:50:13:
                    be:06:e5:a6:ac:31:a7:fb:51:99:da:c7:d3:b1:50:
                    b5:bb:ab:27:7f:44:e1:a4:c2:54:fe:36:9f:40:7e:
                    cb:34:b7:78:33:50:03:3a:52:65:4c:c1:57:96:f0:
                    ff:ff:dc:e6:2b:82:40:a0:a7:5d:fc:a0:a0:74:fa:
                    8c:3d:ff:57:63:b8:75:0a:09:3b:16:7c:26:7c:ce:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:A4:0E:50:16:21:4C:D9:7D:7D:1B:E7:88:0D:27:1B:85:2A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b253bfd-6961-3ea0-ac78-eadaeb11c808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:b6:86:be:21:5e:af:b3:35:a4:cc:77:11:80:81:d5:a0:
         09:0e:b6:3e:f6:08:c1:82:58:e7:34:12:1f:29:4a:59:96:4f:
         6e:36:99:36:94:dd:9c:fc:04:45:94:cb:a2:41:70:f0:9e:c5:
         b6:11:30:58:6a:57:47:df:1d:3a:9f:f0:13:89:2b:e4:bf:0d:
         f4:7a:54:1d:8d:63:05:47:3b:b4:6a:c1:b4:fd:05:07:92:b6:
         af:0d:50:84:d2:7d:32:33:70:c3:37:e4:73:9b:82:66:ea:ca:
         d1:4d:67:cb:74:e1:51:62:1b:3a:11:03:34:57:43:cc:41:b4:
         c2:e2:5f:a3:1f:8c:9c:69:a8:3c:25:0a:30:16:1f:af:ca:2a:
         22:61:6f:79:01:01:bf:16:87:e7:bf:e4:59:97:c1:f4:7a:73:
         11:03:4f:43:76:76:73:a7:8f:8b:12:75:61:04:b8:5a:8c:65:
         16:84:d5:70:68:de:62:94:46:6d:18:3d:39:dc:1b:c5:ef:b3:
         5a:56:27:17:de:dd:c0:dd:51:41:2e:ad:df:06:7c:1f:e5:a5:
         db:24:1e:7f:e2:d8:6b:ee:a9:06:ff:d0:c7:44:0b:a1:78:79:
         31:d7:7d:57:29:75:33:fc:83:b5:4b:75:43:9c:39:eb:32:cb:
         ec:b7:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----