Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2d2cc768-ec02-3ab6-9366-7cfd5c7f3032.roa
File:                     2d2cc768-ec02-3ab6-9366-7cfd5c7f3032.roa (raw, json)
Hash identifier:          KhnEi5/J4us/dD1wqbeFZUzb9JD700hNV+0xUGkK1Nw=
Subject key identifier:   43:EA:C9:A3:D9:34:6A:88:90:92:52:B0:C1:FA:CF:08:87:D7:B0:D6
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328583AA7A1120E8DB3A15D0911B900
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2d2cc768-ec02-3ab6-9366-7cfd5c7f3032.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        172.102.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:12:0e:8d:b3:a1:5d:09:11:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9b920162-f30e-4528-ac30-29ef2172324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:e8:20:4f:87:03:bb:24:45:a9:9c:28:17:
                    8f:5d:9c:b9:6e:6f:e8:c1:5a:ae:da:2d:35:a8:da:
                    04:b2:9c:58:01:39:cd:72:d5:e5:ef:9c:12:5e:b6:
                    15:39:61:d9:34:7e:5b:eb:32:f3:cc:f3:13:ce:e0:
                    9b:d2:e4:fc:11:11:42:44:b4:ef:3d:f4:b6:79:de:
                    41:4e:d4:aa:46:14:59:e3:e5:4b:c1:1f:a6:0b:bc:
                    64:7b:d2:53:66:bf:01:d0:70:4d:bb:b8:58:76:17:
                    b3:44:23:02:7c:2d:92:37:da:b9:ea:07:3b:d7:f3:
                    e0:5b:79:6d:89:ec:f9:6c:33:bd:98:1c:90:5f:32:
                    5e:16:7c:4a:2a:00:60:88:d4:35:3f:c3:ec:70:9c:
                    2e:79:aa:fb:91:ef:c6:4d:c5:ee:c4:f5:fc:28:7b:
                    dc:23:c1:ca:ab:e5:e7:31:e6:6d:e1:12:7f:88:ca:
                    79:37:36:5b:ae:60:f5:38:a7:35:40:d2:78:1c:27:
                    d7:be:be:62:25:d9:3a:98:80:ea:f2:bd:47:64:5b:
                    e0:ae:ac:d0:75:35:89:03:32:9b:9a:ba:17:4d:e4:
                    f2:61:c4:49:c4:6a:2a:0e:3b:f6:da:a4:92:b5:30:
                    06:19:fb:20:8a:2d:86:4e:38:50:ca:73:f8:69:a9:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EA:C9:A3:D9:34:6A:88:90:92:52:B0:C1:FA:CF:08:87:D7:B0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/2d2cc768-ec02-3ab6-9366-7cfd5c7f3032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:39:76:7b:ca:8e:02:e9:26:96:aa:f1:f7:7e:57:9c:d7:6a:
         90:98:da:ce:5b:73:9c:2e:eb:24:b3:7f:50:0b:2e:fc:62:37:
         f6:9a:60:55:d1:70:88:25:bc:cd:78:ec:55:d4:24:9d:79:b9:
         1a:2d:2c:be:a0:b1:32:76:1a:92:c9:4a:50:6a:2c:77:76:54:
         73:a1:3b:31:29:f3:72:c4:96:e9:49:df:96:55:13:18:ce:1b:
         5b:a5:00:1e:e8:6e:f8:a0:37:a5:29:d3:16:c4:81:1f:80:32:
         6f:e6:79:fa:14:20:bf:e5:f3:60:d1:ba:a4:a4:a9:97:a1:61:
         e5:a3:be:f9:c4:34:fa:60:01:c3:1d:ff:18:b3:44:f9:3c:bd:
         bc:58:84:68:c6:d8:0d:07:c3:ff:2e:9a:11:52:49:0d:96:ab:
         89:bb:0e:8b:f0:30:34:89:a2:67:e8:31:f5:58:43:94:0f:4f:
         0d:74:7d:cd:bd:6f:05:5c:6b:b4:2c:6c:bd:62:ed:6e:10:5b:
         17:46:55:e2:63:bd:2f:aa:0c:16:e9:f4:1f:b2:f9:2c:b1:f0:
         3b:55:ce:c8:f4:8f:52:1c:7f:1f:a0:b4:1c:20:71:93:79:05:
         de:dc:20:ca:24:b1:af:9c:c3:b5:3f:03:df:d9:7e:f5:6e:6a:
         d6:8f:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----