Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/62a56c21-a088-3081-a7f1-a4a243f7701b.roa
File:                     62a56c21-a088-3081-a7f1-a4a243f7701b.roa (raw, json)
Hash identifier:          gqia320kGwOhrD57waXF9ZuTXBDS/e/gd/9XlREG6d8=
Subject key identifier:   7D:AA:2C:88:14:03:CE:00:D1:49:8B:BF:B7:73:99:EB:A9:F4:D3:74
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E248241B60BD86AFAC3E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/62a56c21-a088-3081-a7f1-a4a243f7701b.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 10 Aug 2023 00:42:42 +0000
asID:                     834
IP address blocks:        216.74.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:24:82:41:b6:0b:d8:6a:fa:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug 10 00:42:42 2023 GMT
        Subject: CN=93ae97c3-4b7c-47dc-ab97-df676d8c0e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:03:9a:e0:ed:bf:1b:b0:35:92:a7:b2:80:
                    7e:39:c5:e8:aa:69:35:7a:c0:81:3d:2f:e3:89:68:
                    70:07:5a:b3:da:7b:3e:c1:c2:4b:52:f0:5c:d6:81:
                    16:66:49:60:b5:75:c5:50:ce:91:ab:f1:37:5f:13:
                    2a:e9:3c:1a:cf:d5:39:ed:87:33:e5:73:78:2d:2e:
                    ed:d5:d0:a8:66:5e:a2:61:95:64:15:f6:c5:3f:60:
                    c1:c5:aa:86:7d:ab:22:ae:cf:9a:1c:81:3a:ed:a9:
                    67:9d:42:24:07:cc:49:f8:fa:41:3b:45:66:6f:9b:
                    78:85:64:b9:85:0c:dd:88:cd:99:fc:92:1b:6f:88:
                    23:94:b3:e1:90:4e:7d:89:2d:f8:83:a1:0e:95:b0:
                    23:ec:91:3e:0d:af:85:3b:dd:51:7a:de:5d:52:bf:
                    7f:ea:2b:9d:84:61:e3:2b:cc:75:4c:b6:8c:78:f6:
                    47:33:cf:eb:e3:f5:a8:6b:2d:bc:dc:7f:55:e8:ee:
                    0e:d1:58:49:ba:ac:e9:99:35:a3:20:76:23:ee:bd:
                    9a:2f:aa:01:7f:f5:a6:b0:70:31:6f:74:70:4a:cf:
                    f1:cc:39:1b:94:6a:1f:a7:e7:aa:21:1f:01:17:87:
                    0d:51:e2:3e:78:9c:fb:cd:ea:cb:27:74:23:24:d0:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AA:2C:88:14:03:CE:00:D1:49:8B:BF:B7:73:99:EB:A9:F4:D3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/62a56c21-a088-3081-a7f1-a4a243f7701b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:86:cd:33:4c:39:6c:cf:5d:20:25:1a:85:e7:c6:53:79:53:
         84:55:34:1b:d4:61:01:43:af:a3:5d:cb:27:b7:68:f5:ab:d5:
         a3:34:47:2e:cd:b9:e7:83:a0:78:ac:45:dd:88:15:48:60:85:
         fc:46:b1:74:f8:99:4f:f4:7c:2d:8b:63:da:ac:b8:00:30:7a:
         e3:05:24:dc:6a:8f:cd:ee:a7:3a:4d:dc:98:e5:20:17:b3:d5:
         7d:ec:e9:15:08:99:4f:4d:0c:de:8c:47:6d:ce:dc:54:94:2f:
         f9:64:da:51:fc:0c:c5:d1:08:75:fc:05:cf:9e:92:92:39:b7:
         88:f5:5b:d2:48:0a:19:5e:32:e3:ed:de:21:2b:93:17:ec:f9:
         dd:f9:87:9a:51:6b:5d:1d:d7:96:b2:2f:fb:a0:12:87:86:56:
         ca:df:49:5e:ac:94:ab:63:0d:84:76:0d:28:38:db:94:3b:c7:
         74:60:46:5a:4e:23:22:5b:e8:62:59:96:2c:98:16:b0:04:93:
         d9:dd:8a:7e:a1:4a:48:6e:1a:76:ca:86:60:c5:2b:0c:37:d1:
         77:19:69:d3:ed:15:b3:e9:b6:96:43:16:e2:58:78:ca:f3:80:
         92:0b:84:ba:42:8e:3e:3f:70:f8:a8:a2:b9:6a:3a:4f:79:be:
         86:b5:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----