Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/a0b102bd-196c-32df-8815-d27edeb60edc.roa
File:                     a0b102bd-196c-32df-8815-d27edeb60edc.roa (raw, json)
Hash identifier:          aw7k9I/RbPaUpNFIShrCnevnJzm4BtmaSuPPcgstwFI=
Subject key identifier:   31:CB:4D:29:3F:D9:93:62:6E:8B:A8:EF:02:A0:CE:DD:8F:1D:29:8C
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F43285841E4477F3112E0E5D8DC3BF580
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/a0b102bd-196c-32df-8815-d27edeb60edc.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sat 03 Jun 2023 23:15:35 +0000
asID:                     11550
IP address blocks:        68.68.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:7f:31:12:e0:e5:d8:dc:3b:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  3 23:15:35 2023 GMT
        Subject: CN=5185010f-cf04-4d56-ae9a-313ff807b430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:bd:3d:8c:f6:64:32:a2:a2:8d:1d:73:f5:
                    00:3e:62:a2:ef:b2:06:3c:f7:7f:34:95:f7:3a:b9:
                    96:3b:ee:0a:f6:29:a7:b0:15:63:53:c0:44:4f:0d:
                    66:70:80:b3:c6:12:43:df:e6:9e:66:a8:4f:4f:57:
                    cb:d9:45:0e:8c:ab:f7:6b:0c:8e:8d:24:8e:fc:5b:
                    cf:ac:5f:76:0c:32:62:f1:6f:c4:3e:b5:fe:bf:6d:
                    11:8b:94:15:2f:47:d5:59:96:ff:1d:3d:96:72:64:
                    ce:84:6e:8e:2b:dc:41:9d:14:2b:39:3d:14:76:1d:
                    a8:f0:dd:0b:29:50:70:9b:9d:ee:57:32:62:8c:df:
                    10:23:bd:49:0b:99:b0:23:f2:29:9c:23:a6:e5:4b:
                    dc:8f:84:b6:c0:11:be:67:be:34:59:b8:6b:ca:1c:
                    29:dd:7b:8a:b0:d8:db:4d:14:fc:37:51:7c:50:c6:
                    61:61:96:38:b5:0c:66:f1:b5:5e:51:7c:9e:60:ee:
                    2f:cf:ca:55:6f:da:23:78:bf:b8:2a:b3:5b:2b:eb:
                    6a:8e:01:a8:39:5e:ec:d4:ee:2f:c3:0d:99:ff:ad:
                    8b:e7:c7:33:44:35:61:bb:23:50:39:f4:40:76:3b:
                    51:5a:d1:37:d9:ee:bd:c7:c5:58:e6:53:2a:f0:df:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:4D:29:3F:D9:93:62:6E:8B:A8:EF:02:A0:CE:DD:8F:1D:29:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/a0b102bd-196c-32df-8815-d27edeb60edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:20:b4:0d:bc:78:3a:7e:5c:8d:30:3e:55:ef:db:2a:0a:
         b7:fe:6f:27:ce:c2:84:74:19:4c:7b:0c:7e:9e:09:3c:f9:f8:
         22:5d:c2:0e:d2:10:6c:50:76:b7:bb:82:1f:10:ed:7f:e1:40:
         da:20:2e:33:63:6f:8a:57:09:b8:57:46:8c:e6:e8:d6:d4:80:
         e7:4c:f9:76:8b:ea:46:45:58:7b:3f:05:00:42:21:4a:06:c8:
         af:cf:fa:6d:48:f5:62:be:93:64:9e:0a:ca:ee:2a:cc:70:39:
         d8:ab:6a:c3:89:1d:0c:07:c0:3c:58:d9:1b:49:d0:57:75:60:
         89:1c:9a:99:f9:1d:e7:71:36:26:bc:42:c2:75:94:ce:9f:2c:
         06:9c:be:74:9a:52:3e:15:eb:4c:53:03:1e:5d:3d:31:11:cc:
         5e:0e:2c:65:64:ad:17:ef:6a:b4:99:f7:88:60:37:b0:65:02:
         87:65:75:e9:7c:d8:05:4e:f8:61:44:f1:5b:71:bd:1b:71:d4:
         66:73:c7:5c:e1:f3:c2:9f:a0:df:6d:a6:3f:d8:d5:3f:19:72:
         c2:d8:d8:cb:83:6b:ac:8d:a9:b3:df:32:77:3a:e4:d6:3c:60:
         c7:d5:c8:9b:04:c5:f5:55:4e:de:a4:4a:82:d8:21:bc:38:eb:
         c8:d4:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----