Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/46be3904-049e-3605-b9fd-dfc4590775e0.roa
File:                     46be3904-049e-3605-b9fd-dfc4590775e0.roa (raw, json)
Hash identifier:          MVPoxVi5DwoDcofkhg9t9d33aCsKuq/bi/pspAp2J7k=
Subject key identifier:   81:D6:67:74:D8:AA:20:E2:A2:A9:25:F0:CC:79:DF:21:84:22:45:57
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285841AB270BCD342C5FDF87CD6200
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/46be3904-049e-3605-b9fd-dfc4590775e0.roa
Signing time:             Sun 23 Apr 2023 12:00:00 +0000
ROA not before:           Sun 23 Apr 2023 12:00:00 +0000
ROA not after:            Wed 24 May 2023 04:00:00 +0000
asID:                     20473
IP address blocks:        103.4.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ab:27:0b:cd:34:2c:5f:df:87:cd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Apr 23 12:00:00 2023 GMT
            Not After : May 24 04:00:00 2023 GMT
        Subject: CN=73221595-5e39-4b64-9dda-31004de07a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:38:13:4b:66:d6:59:7c:28:62:bf:f4:46:
                    a9:c6:4d:e2:b4:4c:e1:c3:4b:3d:9d:3a:5a:b8:37:
                    0c:fc:3f:85:36:23:62:d6:31:fa:c4:96:5c:4f:65:
                    99:0d:8b:65:e0:48:b6:c8:bc:ed:f5:fe:f7:5a:47:
                    4d:9b:02:dc:db:2e:04:44:9d:a6:9f:55:ce:55:a9:
                    38:39:f0:ff:d9:62:78:c0:08:52:53:10:5b:33:e2:
                    e0:69:a8:cd:77:a9:04:dc:90:59:f6:ec:34:0a:01:
                    8c:69:2f:09:0b:8c:3c:b1:7f:01:c5:62:c2:24:a3:
                    0d:9b:1f:ff:25:4a:b6:86:a9:f4:32:db:d4:48:a5:
                    9f:7c:4d:90:05:ea:df:46:f3:92:be:1f:26:e3:e4:
                    e2:9f:5d:74:48:e8:b8:41:1a:42:29:c4:f4:d5:b9:
                    e9:be:45:8e:b2:5d:f6:5c:9a:ad:67:f8:08:65:f3:
                    51:d9:5b:b1:19:1f:bb:d1:5c:06:08:d6:f4:58:93:
                    52:c7:f5:d8:82:40:78:19:96:04:8c:4a:5d:2b:3b:
                    fb:1a:01:d4:e7:b5:3e:f1:9d:93:f8:cb:83:84:58:
                    46:2b:f3:93:eb:88:a6:a5:e7:3f:a6:67:83:c5:e2:
                    74:60:5b:32:34:09:7e:7d:a3:7d:48:0a:ef:47:1f:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:67:74:D8:AA:20:E2:A2:A9:25:F0:CC:79:DF:21:84:22:45:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/46be3904-049e-3605-b9fd-dfc4590775e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:93:29:8d:3e:6d:62:05:08:a4:e3:05:05:d4:25:4e:a1:1d:
         11:5f:22:04:09:10:af:93:e7:2e:0c:59:87:e0:5a:5c:28:e2:
         70:2f:f4:fd:0b:f5:da:7d:db:f0:50:04:dd:c2:ad:a8:77:80:
         fc:80:0a:19:5f:fa:2a:d1:ab:62:a9:f8:07:7d:09:f7:c9:2e:
         f4:f9:8b:1b:e2:1c:5f:77:11:b6:84:94:b8:f7:e8:cb:c5:ba:
         64:f7:a3:f7:e4:a7:87:c8:1b:d1:08:51:42:a9:12:89:82:f6:
         c1:80:2d:6c:ee:e3:b1:c6:04:f1:a2:9a:8b:27:a4:3e:b9:46:
         33:47:5e:26:04:6c:bd:c1:2a:57:a7:12:f2:ba:80:a2:94:9f:
         c1:de:f3:f5:7a:f6:52:5e:5e:dc:97:fb:28:d9:ed:4a:ea:b4:
         17:14:9a:ee:90:d2:88:7c:18:49:21:23:70:6a:0a:f5:46:35:
         c4:09:e6:f7:0d:7d:1c:e1:d0:8b:de:88:5a:fc:48:57:41:98:
         3f:31:aa:45:9a:96:52:34:b5:28:cd:2f:9f:9e:71:6c:cc:e8:
         95:c0:6f:74:c1:97:6b:51:82:3e:61:7d:4b:e7:aa:56:28:e4:
         37:b9:0e:1d:7e:38:c3:b6:13:37:5c:15:a8:18:cc:e1:85:98:
         09:ee:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----