Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/815b55f0-3ab5-3c41-b200-549112df4271.roa
File:                     815b55f0-3ab5-3c41-b200-549112df4271.roa (raw, json)
Hash identifier:          8XVYBWOMnkpWLH7nQWfXghDjneDL1Ao/7VX3ttNHEDc=
Subject key identifier:   B1:77:9D:ED:E0:18:DA:5B:F0:34:A4:61:ED:67:97:5D:A6:42:2B:96
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285841E46C88935F7899BBAAF41B80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/815b55f0-3ab5-3c41-b200-549112df4271.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 31 May 2023 02:48:33 +0000
asID:                     25924
IP address blocks:        65.51.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:88:93:5f:78:99:bb:aa:f4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : May 31 02:48:33 2023 GMT
        Subject: CN=8d35cfcc-315d-4009-bf90-cdd89fe9ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:2f:98:5d:30:91:22:fc:4a:61:70:f0:b0:
                    c7:db:e5:64:5a:3a:ef:70:ee:42:fe:a1:f5:c2:93:
                    4a:58:99:96:93:31:6c:14:ad:92:5d:b7:94:96:4a:
                    96:cb:44:52:c3:2d:82:39:78:7f:9d:c5:d8:0e:e2:
                    40:9f:8c:66:42:03:b8:15:5b:52:f3:85:53:84:d4:
                    63:6d:0d:76:36:df:41:01:4d:e3:9a:71:f9:78:d0:
                    71:55:74:5b:44:4e:26:2a:d0:fc:e3:c0:2d:41:6b:
                    8e:58:5c:08:2e:ba:7b:4e:fe:34:0c:13:58:82:65:
                    6f:9e:7f:5c:63:b6:19:d7:ee:cc:ce:27:08:2f:6a:
                    1d:09:05:2e:8e:ee:e4:d8:32:94:64:cd:6f:bb:90:
                    3a:fb:b9:3d:0a:14:29:13:a2:b1:13:5f:a4:b3:d7:
                    44:a4:ff:09:5c:3f:4c:23:81:02:76:0f:82:27:90:
                    f1:f9:a5:f4:f0:b0:66:99:1c:e2:3f:f5:71:f6:15:
                    f4:15:d1:c0:93:06:d1:55:b8:69:74:d8:55:21:f7:
                    ea:0f:1a:d0:c9:87:b8:f9:ff:4b:ab:87:57:5a:f9:
                    45:77:92:bc:f4:16:1a:61:62:4d:df:b0:85:b1:99:
                    5b:75:b5:65:19:a9:06:d2:60:5b:d8:67:89:d7:48:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:9D:ED:E0:18:DA:5B:F0:34:A4:61:ED:67:97:5D:A6:42:2B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/815b55f0-3ab5-3c41-b200-549112df4271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:ff:e4:52:70:02:88:4c:8b:25:4d:e9:66:c5:e9:dc:65:97:
         db:42:4b:e9:b2:5a:95:91:54:0b:2b:15:23:07:02:27:2b:52:
         f3:b6:60:82:36:69:0e:ad:d5:8b:51:4c:50:a2:7e:a9:0c:6c:
         43:fc:20:68:08:48:ed:c7:a5:86:a7:38:4d:53:ea:37:b4:b3:
         7f:7b:51:17:77:0e:ae:2c:7d:d3:04:73:e7:22:05:54:f2:cb:
         87:12:58:23:e3:a9:3d:43:d0:b2:45:52:1d:fa:9f:e5:88:2f:
         e1:3b:85:e2:a7:c6:d0:63:d6:c4:40:1d:51:69:1a:80:e9:14:
         2f:8b:41:7e:fd:85:44:0e:8d:20:8f:f3:9e:e0:b1:0c:81:3f:
         33:83:17:bc:ce:41:b0:0c:a3:92:bc:1a:0f:75:55:9b:e0:71:
         ef:2e:36:d1:b5:2f:79:be:a5:75:51:81:b5:43:9a:69:ef:38:
         47:e1:5d:18:8c:92:84:91:a8:45:64:66:24:c0:26:94:0a:e7:
         a6:ce:20:c8:84:17:ec:a4:09:f3:f2:c9:bf:20:61:38:6f:9b:
         53:e1:69:da:89:30:9c:fc:6e:cd:4f:ea:d0:55:0f:0e:4c:49:
         c9:85:22:0c:f9:1d:7e:30:48:ea:a6:68:49:57:00:87:0c:f1:
         b3:3c:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----