Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/064e0f0c-4b35-343a-82af-5af54efd6c7c.roa
File:                     064e0f0c-4b35-343a-82af-5af54efd6c7c.roa (raw, json)
Hash identifier:          CyQDmJMKOqbv52IwwIiWOlpFz9rTbNoXXQ2ZJl0tEdE=
Subject key identifier:   EC:BD:10:51:E3:58:DC:BF:CE:B8:C6:72:49:38:FB:5F:DF:ED:72:ED
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285841E44733EE402CC575269F2B00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/064e0f0c-4b35-343a-82af-5af54efd6c7c.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Wed 14 Jun 2023 00:01:04 +0000
asID:                     19437
IP address blocks:        74.115.6.0/24 maxlen: 24
                          74.115.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:33:ee:40:2c:c5:75:26:9f:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun 14 00:01:04 2023 GMT
        Subject: CN=1d25b166-2723-46a7-bd77-7d9007e2b6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dd:9b:5e:a2:22:5c:f9:79:54:f1:0b:2f:f0:
                    d5:dc:b3:ce:1f:12:60:0f:12:19:4d:e2:2b:d1:71:
                    53:17:6d:85:ed:5c:ac:92:e8:ec:f0:97:d4:ad:63:
                    8f:9a:a5:ab:2d:9d:6a:23:2b:7e:2c:dd:6f:19:63:
                    b5:06:d8:f8:ef:10:fb:ce:24:0b:24:f5:99:45:55:
                    0e:34:d5:d9:4d:25:07:94:86:3f:a9:3d:82:f6:75:
                    08:3b:3c:60:22:c1:59:df:5b:93:22:5e:79:06:15:
                    55:68:d0:36:66:7e:9f:ed:4b:ab:9b:db:38:a7:d1:
                    c9:3e:6e:bf:53:54:81:29:71:f6:1e:06:93:87:d1:
                    08:50:fc:e2:ba:ce:57:7b:cc:58:02:9f:96:50:a3:
                    c1:56:ec:10:81:58:30:02:c8:4d:63:35:f6:21:e1:
                    90:63:f9:3d:2b:60:65:c1:8f:e2:ce:7f:fb:bc:c4:
                    27:e8:36:18:3d:a9:8c:4c:ec:67:f1:e5:ef:04:43:
                    33:b6:4c:34:51:f9:36:dd:31:5d:c0:a7:55:11:f2:
                    12:e0:8b:20:56:ac:ac:ff:39:ef:f1:91:cd:9c:61:
                    54:03:0a:c6:7c:01:7d:e8:fb:74:73:8a:18:d8:19:
                    dc:7f:f1:9c:10:c7:fb:a0:91:05:3d:da:1a:7e:9d:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BD:10:51:E3:58:DC:BF:CE:B8:C6:72:49:38:FB:5F:DF:ED:72:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/064e0f0c-4b35-343a-82af-5af54efd6c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:84:89:fd:74:f2:03:db:71:05:9b:e7:8f:84:35:68:47:
         2c:98:2e:ba:9b:2f:ea:97:83:c8:11:59:f6:29:f0:c9:63:cd:
         a7:59:66:d8:b4:fe:bf:c2:d5:3d:ee:5a:9d:60:96:95:8d:f5:
         38:66:5d:b3:7c:eb:38:da:4e:99:fd:a0:dd:55:e5:46:41:69:
         64:7b:ec:65:8e:2f:ed:20:5c:78:2e:ba:81:fe:4f:50:47:1d:
         72:33:db:65:e0:12:dd:f2:ea:6d:37:aa:9d:62:a8:22:d6:64:
         cf:f3:d8:e3:c9:44:91:0d:89:52:99:99:69:b6:8a:65:b1:04:
         85:d4:5d:d2:60:0b:59:91:41:2f:db:7d:a1:f4:80:17:f2:61:
         f9:42:18:40:fe:34:41:48:2d:71:e2:1a:c8:12:cb:42:27:f7:
         55:fa:01:f3:31:ff:79:b8:12:db:15:ff:7a:3d:25:cc:97:e4:
         d1:cc:50:04:8e:56:2b:15:9b:5c:44:d2:37:a0:8a:c8:94:78:
         cd:15:96:2b:d0:82:f7:33:62:09:6f:99:d9:0b:83:8c:34:f5:
         3b:4e:34:8d:ad:f7:27:06:22:01:2c:a5:cd:e3:fb:65:f8:d6:
         2f:79:5c:11:70:8b:69:c7:56:12:1a:b0:49:7e:d7:74:79:47:
         93:dc:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----