Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/348a1d9c-eff1-3a79-b824-2e92b8e8f22f.roa
File:                     348a1d9c-eff1-3a79-b824-2e92b8e8f22f.roa (raw, json)
Hash identifier:          ybPbFTsAIJYwZwdZPY8f1X5KKLjtpVzFfq29pqE+Y8M=
Subject key identifier:   93:D5:4D:C1:C2:50:2A:F5:6A:65:80:D0:27:84:26:3D:E3:51:52:AB
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583E2E94102702FBE4348E04D3C0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/348a1d9c-eff1-3a79-b824-2e92b8e8f22f.roa
Signing time:             Tue 24 May 2022 14:30:08 +0000
ROA not before:           Tue 24 May 2022 14:30:08 +0000
ROA not after:            Sun 10 Jul 2022 04:00:00 +0000
asID:                     205220
IP address blocks:        116.206.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2e:94:10:27:02:fb:e4:34:8e:04:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: May 24 14:30:08 2022 GMT
            Not After : Jul 10 04:00:00 2022 GMT
        Subject: CN=bb9a9941-f41a-43cf-98c4-0c2936ef7a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:a7:cc:ef:fa:67:fe:d7:4b:f9:fe:7d:c4:
                    a6:35:00:5f:c1:62:2e:ab:89:5f:e2:1c:da:64:ca:
                    d7:1a:f5:90:48:9a:26:29:a2:8b:76:64:67:97:13:
                    eb:76:62:60:45:1b:6e:d2:d9:a2:b0:33:31:80:20:
                    64:70:89:2a:6b:fc:04:4f:77:22:f3:90:1a:82:a4:
                    4b:b8:56:8a:a2:9a:0d:df:31:58:5f:0d:4c:71:ab:
                    a0:45:fd:93:1f:e5:c6:c3:e6:cc:6e:02:fd:5f:39:
                    51:88:f4:81:04:0f:6d:d6:96:10:97:60:7d:46:ba:
                    a7:33:08:ed:1c:a3:a5:f2:5e:96:b3:d7:a0:77:a6:
                    5a:7b:42:a2:62:5a:d2:aa:fa:fd:da:99:4b:5a:a4:
                    f5:32:f3:9b:84:5e:c1:18:03:31:a3:0f:91:07:00:
                    a9:73:19:02:16:85:46:37:7c:07:a1:6e:c2:22:12:
                    67:de:9a:bc:c2:b9:60:5b:11:70:25:d8:ac:c9:7a:
                    cb:79:e2:a9:fa:ee:2f:74:b3:b7:88:dd:c0:aa:d3:
                    47:bc:47:52:c0:bb:56:47:bf:04:ec:b3:97:3c:c4:
                    b7:a4:e7:77:c8:cc:39:b3:9d:b1:7b:40:76:a6:39:
                    47:66:be:3a:62:2a:10:e8:c5:d7:e8:6f:07:b0:d4:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D5:4D:C1:C2:50:2A:F5:6A:65:80:D0:27:84:26:3D:E3:51:52:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/348a1d9c-eff1-3a79-b824-2e92b8e8f22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:33:5c:80:30:8c:3b:62:ec:29:11:32:38:41:16:9d:89:
         86:02:45:08:de:b0:ef:fa:01:43:b2:61:3d:a7:77:93:37:6c:
         8d:2c:95:85:b9:4a:06:9b:1a:fa:cd:2a:2b:3e:24:f4:c1:b4:
         09:c2:ef:50:4f:65:03:5a:31:b1:f1:bc:55:33:44:50:b7:78:
         89:a1:86:5a:b9:94:70:96:b4:90:c7:b6:09:63:72:53:59:e2:
         e9:f9:6f:ca:f8:f8:93:7a:1f:73:35:fb:f9:6d:e4:b6:0b:49:
         28:fe:51:f3:46:76:40:dc:ef:78:1c:6c:0d:13:cb:d1:11:b6:
         05:53:e8:9c:35:e1:b2:e2:41:24:26:c5:ee:87:31:48:a0:2f:
         65:70:6a:0d:8e:21:54:58:6e:d3:5c:ad:9a:ce:8e:3f:1c:c6:
         06:78:81:00:98:80:17:22:c1:39:a3:a7:02:94:0e:8e:de:19:
         b1:f7:51:a9:1b:2b:ad:c9:09:8e:e3:3a:80:9f:00:29:64:b2:
         25:2b:9e:ea:1f:57:d4:b4:c7:ae:11:1c:09:e1:34:1a:ce:95:
         46:f6:c7:3e:97:62:fd:1d:37:ee:15:d1:03:10:67:71:f9:1f:
         94:72:20:32:8f:50:f8:7f:07:bd:df:77:1f:06:63:1a:71:1c:
         9c:09:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----