Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7645d07f-ac9e-3997-8490-d609dd93eab9.roa
File:                     7645d07f-ac9e-3997-8490-d609dd93eab9.roa (raw, json)
Hash identifier:          Q793WQUP7wwO4nfEse/oGxsLEXrYbbKJic6GT3J+OKA=
Subject key identifier:   8D:D8:1B:98:E2:71:FE:2B:24:C1:63:7C:02:09:36:EA:43:46:B9:15
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583E579D7CD3E9F47261BF38EE00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7645d07f-ac9e-3997-8490-d609dd93eab9.roa
Signing time:             Thu 08 Jul 2021 16:58:24 +0000
ROA not before:           Thu 08 Jul 2021 16:58:24 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        161.69.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:57:9d:7c:d3:e9:f4:72:61:bf:38:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul  8 16:58:24 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=7180d743-1b2d-4448-8643-106d38fa8221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:54:6f:7c:ff:74:d5:50:09:90:32:55:6c:
                    9e:12:c8:d8:75:58:21:41:a1:88:ae:82:b4:72:d2:
                    86:2e:af:76:94:03:76:ec:b8:e7:eb:5c:32:f9:ca:
                    c3:ae:62:14:4b:56:22:32:a6:2e:41:36:bb:7b:fe:
                    7c:05:c4:89:b7:6a:b1:2a:45:0f:21:ec:5d:08:ba:
                    5d:0c:f6:4c:8a:1e:3f:71:34:c2:2b:0d:ce:f1:da:
                    83:d4:9e:e1:ae:17:9b:4e:c4:c8:e1:fb:ec:d7:53:
                    88:bd:27:b5:b0:75:16:fb:96:b2:ef:a9:02:c3:1d:
                    a0:95:e4:79:a9:f8:07:e1:96:d2:b4:62:96:0d:61:
                    b3:5d:2d:3e:80:a5:aa:ff:49:8a:cf:fc:49:bd:83:
                    f0:28:e8:ff:26:c9:f3:5f:33:b6:27:0e:23:ab:75:
                    d7:b4:a0:ba:f6:a5:f3:e9:28:33:4a:d2:0f:f4:a3:
                    18:d6:37:17:a4:2f:ab:01:8b:0c:f3:dd:c6:7e:ed:
                    d1:96:4c:22:83:19:19:06:21:d8:a2:3f:79:e4:92:
                    d2:b3:27:7b:f4:2d:18:b7:18:73:ac:fa:45:66:94:
                    cb:1c:c5:39:6d:7e:0c:57:2f:22:f5:b1:95:e3:9d:
                    ac:6a:8c:a2:5b:fa:4d:e7:19:61:54:37:e1:ab:fa:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:1B:98:E2:71:FE:2B:24:C1:63:7C:02:09:36:EA:43:46:B9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7645d07f-ac9e-3997-8490-d609dd93eab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:e1:50:2e:7e:d8:6c:80:6e:1c:7d:62:e8:ec:f9:47:a8:
         e2:51:29:2c:16:8a:f3:f4:80:ba:8e:67:d6:47:b2:57:1e:2c:
         8f:e8:62:dc:47:fe:45:94:36:97:b7:92:46:36:89:8d:80:0a:
         ef:54:2d:c2:b6:a4:05:87:99:ba:f8:0c:d7:95:d9:9c:89:36:
         fc:72:40:d2:1a:83:ae:2e:b7:96:e5:e9:5c:fc:68:e0:3b:2a:
         31:8d:73:41:0a:f3:2d:03:66:97:e2:44:6a:da:08:97:99:bd:
         5c:ad:48:5d:78:41:a9:4b:15:83:00:45:5e:17:3a:62:a0:fb:
         d8:b6:a7:2f:28:e4:57:6b:15:10:ec:f8:61:97:cb:b6:e8:ba:
         06:3d:04:cf:3b:b4:69:27:d0:a1:02:85:94:e5:41:61:3a:4e:
         07:ec:24:f1:12:7b:58:f1:bc:47:fb:88:2a:3c:96:92:c9:f4:
         a0:03:db:d6:d7:ac:57:e9:dd:aa:a7:c4:92:73:91:a8:95:a3:
         bc:7a:d4:50:27:07:72:a0:e0:56:d1:54:b2:85:e2:41:fa:58:
         c0:10:a0:e4:ba:2b:73:ba:25:b5:4c:4f:90:ee:db:2b:27:54:
         3e:c7:98:83:45:12:11:08:9e:e9:ac:9e:6d:5a:ed:56:8e:ce:
         47:fa:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----