Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/0ac41a7a-5259-3905-941a-47040479ae6b.roa
File:                     0ac41a7a-5259-3905-941a-47040479ae6b.roa (raw, json)
Hash identifier:          249NyclpCBwf37zTTlc6BW+4VjN9AYiUAm/wVazo6tY=
Subject key identifier:   4F:91:D0:DE:75:81:74:F1:88:3C:05:FC:A3:A3:01:9E:A8:71:19:65
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858469EC141C53BD524872392C580
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/0ac41a7a-5259-3905-941a-47040479ae6b.roa
Signing time:             Mon 22 Jul 2024 07:20:07 +0000
ROA not before:           Mon 22 Jul 2024 07:20:07 +0000
ROA not after:            Sun 20 Oct 2024 07:20:07 +0000
asID:                     149196
IP address blocks:        103.251.27.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9e:c1:41:c5:3b:d5:24:87:23:92:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jul 22 07:20:07 2024 GMT
            Not After : Oct 20 07:20:07 2024 GMT
        Subject: CN=f5f03054-ce97-4ccb-a4e2-002bfe8e3bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:41:cb:0b:4e:22:2a:4e:65:b4:82:34:6b:
                    32:bf:59:e3:04:06:3d:79:58:2e:10:1b:cf:91:73:
                    b6:fe:f5:f1:40:f5:2d:22:0f:20:31:43:ad:89:31:
                    3b:c4:0a:b5:30:4e:00:70:22:4d:4c:81:10:e5:85:
                    ea:dc:b0:1d:31:b2:d1:79:0f:d2:55:e7:2b:3c:d9:
                    37:3b:12:c4:11:8e:b9:a4:2c:00:21:3d:47:43:55:
                    d9:74:12:a0:11:ba:be:62:64:80:4e:1a:11:5a:32:
                    68:61:fc:1f:45:29:3d:57:8a:57:74:c9:a8:53:ae:
                    57:24:8e:f2:dc:0e:24:44:e0:e5:7d:56:3c:eb:b5:
                    ac:09:72:87:c1:2a:7f:3d:b2:21:72:42:f2:4d:02:
                    7a:c7:4a:f7:45:a3:63:69:cf:d6:88:9e:ac:7b:8c:
                    e1:c6:45:2a:bf:08:f0:1c:e2:cb:85:e2:c3:a3:42:
                    cf:75:12:62:58:e2:6a:68:b9:14:53:2c:fa:90:a3:
                    f5:c9:02:00:ad:14:a3:64:2e:35:b2:3b:5b:27:e2:
                    b8:8f:4a:26:77:75:e6:c2:21:7c:9a:3f:34:81:23:
                    5d:87:c7:47:5c:9e:11:0a:21:fa:13:73:9a:f9:30:
                    53:ea:97:24:46:63:eb:4f:df:05:af:b3:da:ea:a1:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:D0:DE:75:81:74:F1:88:3C:05:FC:A3:A3:01:9E:A8:71:19:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/0ac41a7a-5259-3905-941a-47040479ae6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:8d:43:73:af:2c:22:da:03:99:bb:63:50:4c:80:93:a6:
         30:25:a7:ae:d9:3c:0b:a7:a6:14:5e:22:aa:af:c4:69:b3:34:
         c3:ae:8b:a3:00:c4:a7:2a:f5:8f:33:d7:75:82:95:2f:43:7f:
         c3:f2:5c:a3:b7:ea:2a:ff:20:50:03:73:18:7c:93:c2:03:34:
         42:60:29:83:c0:cc:18:af:2e:79:d4:bf:fd:e3:2e:06:61:30:
         30:ba:58:13:a7:3e:a0:c9:3e:7a:a0:16:8e:3e:f7:f0:ad:d4:
         1f:af:dd:fa:79:56:ef:42:f5:86:cf:3f:d7:1e:7a:87:3b:05:
         07:8b:2f:87:71:4e:fb:66:e4:67:f8:b9:94:a4:a1:23:fd:cd:
         e6:54:7d:ab:42:3f:6f:21:79:b6:5d:b9:9a:63:83:4e:33:2b:
         6a:5a:26:86:03:e1:92:0b:94:40:a3:17:d2:63:3b:84:a4:58:
         7e:1a:48:56:55:03:ce:84:20:de:75:85:9d:64:4d:08:7e:63:
         6d:20:ce:0b:fd:d9:7f:fc:e7:f0:cb:09:16:fe:64:7c:7c:8d:
         a8:8d:94:5a:ea:3c:3f:c6:83:ed:d6:e2:33:8c:59:66:46:64:
         ae:4a:a1:d7:eb:15:24:e8:7d:14:26:e3:34:3a:67:d3:f0:2d:
         d0:dd:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----