Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1a310003-157c-355d-9653-b04e2e5b8c5d.roa
File:                     1a310003-157c-355d-9653-b04e2e5b8c5d.roa (raw, json)
Hash identifier:          hnMKJzf49+753SMNt7FkEd4mkd5vrHROo8zvJKRJcBE=
Subject key identifier:   3A:69:53:A7:0B:EA:F9:12:8D:D4:12:5C:77:DA:F5:4A:BF:5D:AC:51
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583E7CFD22070CF8153E270DC8C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1a310003-157c-355d-9653-b04e2e5b8c5d.roa
Signing time:             Thu 08 Jul 2021 16:58:24 +0000
ROA not before:           Thu 08 Jul 2021 16:58:24 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7c:fd:22:07:0c:f8:15:3e:27:0d:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul  8 16:58:24 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=5adc9ec3-e6cb-4b88-b5bc-b9fb2d6a6c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:b3:23:78:64:88:01:67:f2:50:a7:2c:7d:
                    5d:14:d5:5e:6a:97:8f:41:85:38:67:fe:ff:f9:90:
                    bb:c7:5b:86:a6:74:38:53:97:07:99:77:16:24:b4:
                    11:a5:60:5c:ee:e4:52:56:d0:62:0f:26:28:34:13:
                    3c:9c:72:5a:d7:af:cb:9c:38:93:3a:f1:fa:b8:54:
                    7c:83:cb:d0:88:ce:99:eb:1c:7c:28:0b:9d:98:18:
                    40:ec:c7:be:0c:a3:43:74:13:ea:2b:35:39:ae:9a:
                    40:5a:49:90:b2:01:c7:56:64:bc:4a:f1:06:9b:62:
                    2d:83:88:63:e5:9a:2c:20:87:eb:d8:f4:c4:2e:49:
                    d4:dc:b9:80:e8:ec:cf:ac:14:8c:6f:ec:fb:48:2c:
                    f5:88:7e:cc:72:0b:ee:53:d3:00:b5:b7:1a:54:aa:
                    da:61:1a:e4:ac:9b:20:3f:52:24:c1:54:c6:3e:22:
                    fe:01:f8:b5:68:ce:ed:6a:11:20:5a:fd:66:69:8f:
                    13:8f:4a:a5:cc:4f:84:b0:ec:fc:16:2e:5a:90:a8:
                    ed:7d:78:ba:6c:8b:00:f7:79:3c:9b:e8:ac:58:6d:
                    a1:45:05:4b:3c:37:db:d9:d4:da:59:ce:fb:74:56:
                    98:87:c5:b5:7a:88:39:aa:03:f8:f7:e3:c9:cc:6c:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:53:A7:0B:EA:F9:12:8D:D4:12:5C:77:DA:F5:4A:BF:5D:AC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1a310003-157c-355d-9653-b04e2e5b8c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:39:69:4e:a5:00:f0:9d:b7:eb:88:a7:5d:95:31:b9:b3:39:
         d1:60:d6:fa:e3:a9:6c:05:24:fd:3a:ac:3a:47:96:6b:39:dc:
         26:ed:e5:8b:09:df:73:58:ca:cf:86:60:4e:b0:9e:4b:6c:52:
         d3:51:1c:b9:31:c5:98:67:d9:6a:25:2e:8f:cd:72:5e:27:de:
         a0:1b:e8:a1:59:2a:b1:45:59:0d:2d:f7:1d:af:33:df:8b:db:
         88:e4:8b:c2:e7:c5:8f:fe:22:03:3c:d1:5f:cc:57:7f:97:2f:
         07:9f:42:8d:e0:dc:74:8d:3c:c1:c3:45:bf:b1:69:ce:48:40:
         85:33:ba:51:84:f2:25:ae:76:d4:67:db:9a:27:eb:32:d1:62:
         41:0d:b0:f1:68:8d:45:25:af:3d:9b:f5:5d:c6:73:21:73:98:
         46:d3:f8:3f:a4:84:98:23:29:e4:84:a6:20:42:1d:ba:ec:7e:
         eb:8d:c4:53:55:7b:7d:36:90:fe:a0:81:8c:8d:3d:10:f6:bb:
         9d:2a:c9:3c:88:3b:a9:52:ec:c3:b4:21:06:62:85:f3:49:36:
         e3:bb:75:7c:ef:35:2d:bd:46:53:1c:f1:77:7a:a7:4d:5a:38:
         c3:bb:4b:af:25:84:03:c2:26:44:6f:e4:aa:4a:55:03:2d:a3:
         21:bd:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----