Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/84cfb4fc-e3e4-3aa1-b3ea-1c3f734bb068.roa
File:                     84cfb4fc-e3e4-3aa1-b3ea-1c3f734bb068.roa (raw, json)
Hash identifier:          c7qco9pRcPWVIPROiu18ITl4xzpQEIODcuZvmOp29Hs=
Subject key identifier:   79:52:5F:A6:6C:75:55:90:71:8B:8E:11:CA:1D:EB:33:E6:77:EA:44
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858434A8A3237E1ED669C92848960
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/84cfb4fc-e3e4-3aa1-b3ea-1c3f734bb068.roa
Signing time:             Thu 21 Sep 2023 01:00:23 +0000
ROA not before:           Thu 21 Sep 2023 01:00:23 +0000
ROA not after:            Wed 20 Dec 2023 02:00:23 +0000
asID:                     984
IP address blocks:        65.110.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4a:8a:32:37:e1:ed:66:9c:92:84:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Sep 21 01:00:23 2023 GMT
            Not After : Dec 20 02:00:23 2023 GMT
        Subject: CN=b80dbb41-d124-4ce0-a190-a01311aacb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:8c:cd:ad:98:bd:ad:67:23:14:d1:8d:3d:
                    5d:cb:b8:8b:16:d5:65:23:5f:87:44:41:85:2c:4f:
                    5c:13:2f:e7:8a:c2:5a:55:8c:10:21:09:28:be:19:
                    c9:02:4e:96:61:cd:7c:e0:9a:fa:09:4e:df:6b:1e:
                    e5:14:7c:d0:56:8a:1d:97:0d:b3:87:64:8e:18:e8:
                    3b:6b:9a:30:bb:3b:49:e3:6b:66:77:4f:56:25:5a:
                    2a:b2:4e:98:89:2f:31:ff:43:46:10:46:8d:0d:4b:
                    94:82:bc:c6:b5:93:4c:a3:11:e2:c8:7a:80:85:63:
                    c1:2d:31:d1:b5:4c:54:33:af:fc:83:45:c0:9d:27:
                    ce:9d:0d:01:a7:a2:fb:03:0f:e1:02:db:e7:d7:ab:
                    87:c2:0b:e1:4e:de:00:e6:d0:44:a9:65:f1:36:0c:
                    6b:8a:07:d0:a9:6a:94:b2:03:10:3a:68:14:fc:29:
                    31:2e:01:5c:9c:c1:c7:e0:53:f9:16:bc:d3:09:c9:
                    42:bd:31:10:2f:c9:ae:4d:8b:ec:54:fe:b8:ea:b6:
                    8a:36:c3:4d:32:21:ca:74:91:3e:ca:4d:72:d6:2d:
                    e4:ea:3d:cc:3c:f2:e6:cb:c9:a8:77:fe:9a:ed:0c:
                    1d:51:d4:2f:af:51:11:a2:99:e8:d7:0d:15:ca:5c:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:5F:A6:6C:75:55:90:71:8B:8E:11:CA:1D:EB:33:E6:77:EA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/84cfb4fc-e3e4-3aa1-b3ea-1c3f734bb068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:6e:10:b4:06:fb:b7:c8:3f:c8:71:8c:b6:fa:67:6a:41:
         ac:90:97:48:f2:80:b3:eb:fa:46:9b:69:d3:9c:bf:de:c4:4f:
         7f:80:39:b0:31:e4:33:31:aa:6e:b7:ff:a4:fa:8b:7e:1c:b7:
         82:c9:53:e5:ba:77:93:76:6a:c7:e0:e8:45:92:8a:bd:36:0a:
         af:f3:80:a8:07:93:77:de:ed:5a:df:be:db:af:36:49:5e:c3:
         5d:49:2d:76:37:9f:0b:e8:4d:6c:f8:ac:1b:18:f1:49:4b:c2:
         b9:ae:8a:06:c2:28:dd:cd:d4:33:0d:24:b3:84:a8:23:c3:93:
         25:ab:68:00:c4:3b:90:c2:9a:d3:38:53:e1:cb:8d:4f:d1:83:
         fc:2b:93:2a:84:82:4e:36:80:0f:5b:2b:93:8d:72:1f:f0:2d:
         00:81:7c:ad:c4:22:90:66:d2:7a:89:1c:d0:71:72:2f:66:dc:
         7c:06:b4:70:3a:8a:e9:75:d4:44:df:57:a5:fb:44:80:4e:dc:
         8f:59:4b:c7:da:23:38:71:a9:fc:50:eb:17:42:53:40:97:6c:
         4a:95:29:87:aa:8b:0c:bc:28:d6:a2:1b:00:ac:89:2a:a9:8b:
         fe:41:13:eb:91:46:a4:97:bc:a9:0c:04:50:5d:d9:5e:6e:39:
         d4:43:75:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENKijI34e1mnJKEiWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTIzMDkyMTAxMDAyM1oXDTIzMTIyMDAyMDAyM1owLzEtMCsGA1UEAxMk
YjgwZGJiNDEtZDEyNC00Y2UwLWExOTAtYTAxMzExYWFjYjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A6Mza2Yva1nIxTRjT1dy7iLFtVlI1+HREGF
LE9cEy/nisJaVYwQIQkovhnJAk6WYc184Jr6CU7fax7lFHzQVoodlw2zh2SOGOg7
a5owuztJ42tmd09WJVoqsk6YiS8x/0NGEEaNDUuUgrzGtZNMoxHiyHqAhWPBLTHR
tUxUM6/8g0XAnSfOnQ0Bp6L7Aw/hAtvn16uHwgvhTt4A5tBEqWXxNgxrigfQqWqU
sgMQOmgU/CkxLgFcnMHH4FP5FrzTCclCvTEQL8muTYvsVP646raKNsNNMiHKdJE+
yk1y1i3k6j3MPPLmy8mod/6a7QwdUdQvr1ERopno1w0VylwW4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlSX6ZsdVWQcYuOEcod6zPmd+pEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODRjZmI0ZmMtZTNlNC0z
YWExLWIzZWEtMWMzZjczNGJiMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8SbhC0Bvu3yD/IcYy2+mdqQayQl0jygLPr+kabadOcv97ET3+AObAx
5DMxqm63/6T6i34ct4LJU+W6d5N2asfg6EWSir02Cq/zgKgHk3fe7VrfvtuvNkle
w11JLXY3nwvoTWz4rBsY8UlLwrmuigbCKN3N1DMNJLOEqCPDkyWraADEO5DCmtM4
U+HLjU/Rg/wrkyqEgk42gA9bK5ONch/wLQCBfK3EIpBm0nqJHNBxci9m3HwGtHA6
iul11ETfV6X7RIBO3I9ZS8faIzhxqfxQ6xdCU0CXbEqVKYeqiwy8KNaiGwCsiSqp
i/5BE+uRRqSXvKkMBFBd2V5uOdRDdfQ=
-----END CERTIFICATE-----