Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/d0da1124-feec-31b2-8182-bc7ce4ce35ed.roa
File:                     d0da1124-feec-31b2-8182-bc7ce4ce35ed.roa (raw, json)
Hash identifier:          YOzb4JR8YgAarUKMk8omhYmXAyZJqNesCri/39h7+lM=
Subject key identifier:   6C:52:66:C9:E8:81:A5:2D:38:EE:A7:56:8A:A9:8C:F1:DC:9A:B8:46
Certificate issuer:       /CN=721773b3-ff70-4a20-99dc-aaba81c23ebf
Certificate serial:       010D0C9F43285841E4478271B9CE44C4EB6E4240
Authority key identifier: 86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/d0da1124-feec-31b2-8182-bc7ce4ce35ed.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 04 Jun 2023 04:02:01 +0000
asID:                     40519
IP address blocks:        149.112.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:82:71:b9:ce:44:c4:eb:6e:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721773b3-ff70-4a20-99dc-aaba81c23ebf
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  4 04:02:01 2023 GMT
        Subject: CN=4d68f1d3-9e84-439c-b84d-8e872b7d2542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ad:6b:54:30:35:53:1c:70:cf:08:54:55:4a:
                    a8:44:99:ee:c6:86:18:e7:6b:7e:a2:d9:03:99:75:
                    5a:7b:e8:6f:88:27:88:cc:8d:29:5c:f2:3b:10:ba:
                    6d:57:50:a9:4e:67:c0:3a:c1:0c:31:54:60:34:72:
                    0b:61:74:f0:53:5e:f0:11:7a:7e:32:93:14:29:e8:
                    a0:ac:5e:03:53:9d:7c:de:92:04:21:bc:ec:a5:cc:
                    7c:73:e5:31:d3:f8:43:43:a4:8d:ab:de:71:fe:9d:
                    b4:e1:ca:c1:5b:7e:30:46:27:c8:af:54:d7:ea:08:
                    3f:f5:40:e0:72:2a:8e:4e:49:64:ff:dd:29:bd:16:
                    27:74:60:e9:00:b9:a9:e5:b2:0c:2b:4f:1e:86:aa:
                    02:6e:1b:71:2a:f7:04:ee:99:72:62:e2:34:21:35:
                    ec:2f:a1:07:40:8b:8f:51:10:a7:8e:d0:ba:a3:26:
                    39:5d:48:00:93:5b:73:f7:7d:03:88:c2:97:09:a2:
                    d8:48:2a:3f:c7:8c:39:d1:0f:7f:02:04:ce:29:2a:
                    ab:84:aa:74:9a:9e:95:d6:c8:ae:e8:a4:6a:10:ea:
                    8b:bc:9b:4f:40:5b:e8:89:16:f1:6d:61:69:0c:c7:
                    ae:63:51:f1:ee:65:f3:10:9a:fb:2c:c0:06:23:ba:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:52:66:C9:E8:81:A5:2D:38:EE:A7:56:8A:A9:8C:F1:DC:9A:B8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/d0da1124-feec-31b2-8182-bc7ce4ce35ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf/721773b3-ff70-4a20-99dc-aaba81c23ebf.crl

            X509v3 Authority Key Identifier:
                keyid:86:5C:EF:82:0B:58:4C:55:1B:A5:0E:9E:AE:E6:B3:17:9D:70:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/721773b3-ff70-4a20-99dc-aaba81c23ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:ea:42:56:63:db:f8:c5:77:3d:13:5e:08:dd:e9:00:a4:
         32:36:dd:52:b3:f8:b8:a0:7b:3f:84:46:5c:87:3b:25:82:d0:
         14:fb:71:23:97:1b:f8:e4:4b:49:c8:51:bd:70:7e:54:0b:10:
         2d:84:bb:45:a6:a6:94:c4:b5:d2:95:96:78:72:ef:4d:86:3f:
         91:35:53:13:40:c3:ce:40:eb:59:6e:8d:ef:16:53:8a:f9:38:
         af:9e:cb:7c:39:d7:75:1b:00:2e:65:00:dd:5a:43:a5:c7:dd:
         d7:86:53:64:53:6c:ce:9b:a5:fd:c2:74:41:70:f4:78:b5:dc:
         37:ce:49:49:e2:ff:ed:38:30:3c:60:b0:6e:49:52:1a:52:72:
         bd:53:f3:f3:28:02:9e:dd:c2:31:41:7a:9f:d2:e3:30:10:70:
         3d:11:8c:da:08:64:89:3d:8f:27:a7:b4:6a:a9:5b:06:a0:c8:
         50:22:d6:b4:f6:86:81:10:0f:df:ca:0c:6c:a0:c7:04:9f:49:
         81:71:9f:b1:8a:93:1e:39:85:6b:7d:2a:93:30:54:fc:4b:ea:
         36:ce:53:4c:84:17:af:74:98:63:5a:bb:53:7c:4a:a2:f3:5f:
         96:e6:2f:1e:89:bb:61:21:bd:1d:28:29:2f:ea:82:47:a2:44:
         1b:bb:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----