Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0934d78f-8fe2-3788-bc96-06a72b71afa3.roa
File:                     0934d78f-8fe2-3788-bc96-06a72b71afa3.roa (raw, json)
Hash identifier:          74uElvny/YBvaaXbBzXyNODC0PssyXpJt/l/fTp0Y/U=
Subject key identifier:   29:1D:2F:03:91:34:E6:85:75:5C:22:2A:9A:E6:2B:1D:02:8F:44:DA
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F43285841E46DE63CB65F567044914B00
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0934d78f-8fe2-3788-bc96-06a72b71afa3.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 10 Jul 2023 08:53:49 +0000
asID:                     393962
IP address blocks:        75.127.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:e6:3c:b6:5f:56:70:44:91:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 10 08:53:49 2023 GMT
        Subject: CN=b7b60abf-9b42-4413-9fb5-f86a5300fe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:02:f9:f8:18:9c:2c:47:ed:1e:be:fb:5f:bb:
                    46:54:81:9e:a0:fa:e9:a9:98:c1:e7:6b:49:de:08:
                    94:ee:8b:e1:0b:d9:cf:ae:d0:ff:d5:6a:4a:99:68:
                    b1:0b:94:b2:74:a8:89:2d:6c:4b:ef:c0:ac:8a:ba:
                    ab:d0:f0:2b:62:8d:b5:73:65:5a:0e:13:fe:42:75:
                    7f:cf:3b:c0:6b:c1:e5:18:53:bd:3f:79:26:98:d4:
                    78:0b:6e:06:72:53:a2:d8:53:4c:fa:e8:1a:77:53:
                    f6:ad:f6:f9:1c:88:4c:78:a3:37:e1:9b:d0:88:31:
                    49:48:4e:ed:eb:60:f1:5f:23:b7:02:72:dc:94:cc:
                    a5:51:70:d4:97:15:0b:65:5d:8f:e3:be:63:5f:97:
                    b3:f2:ed:a2:e9:99:60:4d:63:c6:dd:6a:be:d7:3f:
                    e4:07:a2:01:07:3e:88:7b:55:5f:6b:21:14:87:91:
                    ca:94:6c:fa:f3:c4:cf:76:73:34:27:36:ef:a6:dc:
                    ca:9c:f8:e6:1a:47:25:62:8d:91:26:17:3d:bb:c2:
                    a3:16:74:a7:5d:cb:9c:ca:16:e8:86:76:af:ea:fa:
                    20:98:15:bd:48:54:97:5f:4a:30:5c:a7:7c:b8:00:
                    44:eb:5d:dd:ae:ad:d2:4e:56:9b:7a:78:5e:15:89:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:2F:03:91:34:E6:85:75:5C:22:2A:9A:E6:2B:1D:02:8F:44:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0934d78f-8fe2-3788-bc96-06a72b71afa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:f9:06:ba:8c:ae:f3:bd:24:99:11:1e:19:60:72:f4:26:
         1b:f4:9e:79:1d:9f:67:2d:34:d0:b7:73:c6:b4:14:73:95:c7:
         23:31:0b:6c:1b:6a:3a:80:06:fc:bb:38:59:ed:9d:09:04:93:
         cf:a1:31:fd:39:20:82:75:1e:2c:4a:3a:29:1a:e4:97:e6:96:
         b3:02:d0:f2:ca:9d:e1:be:fb:6a:31:2e:29:cb:d7:9a:54:b7:
         fb:08:13:d2:26:79:ce:57:b8:ae:c7:4e:83:b2:02:e3:05:da:
         c8:3d:86:3c:33:5f:fc:f6:86:eb:1c:fe:f3:6f:b2:3d:10:96:
         95:32:b2:bc:89:94:6e:89:b9:88:60:3c:fc:8f:42:67:e6:d4:
         9c:dd:13:aa:7e:44:a2:fa:83:40:d3:e5:1e:98:50:ab:b9:03:
         91:dd:38:76:0f:7f:ff:ad:8f:dc:0a:9f:43:75:9d:4a:b1:65:
         3e:bc:e2:73:b1:59:19:15:a9:66:a5:d1:f1:36:49:7a:1a:57:
         bd:89:24:32:d6:cc:ff:60:1e:3c:4d:7d:28:0c:ed:21:d5:01:
         f7:23:e5:fd:7b:3a:21:5a:43:86:9c:6d:f3:c4:26:b9:fd:0c:
         82:6e:b8:2f:c5:52:12:be:6f:91:0c:30:6a:7b:83:29:0a:37:
         35:01:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----