Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8c6c7661-9417-33ba-94a6-87ff79e27a03.roa
File:                     8c6c7661-9417-33ba-94a6-87ff79e27a03.roa (raw, json)
Hash identifier:          H3rybHWqLQZFlJgC05D0pXU7H52Xm435WSU9MedqGfc=
Subject key identifier:   DD:45:68:76:AB:82:1E:10:C5:0D:F5:F0:20:A0:7D:36:D7:3D:23:F4
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583F8FFE4C7F0D0759A72F0CF920
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8c6c7661-9417-33ba-94a6-87ff79e27a03.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        161.69.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8f:fe:4c:7f:0d:07:59:a7:2f:0c:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=e67ed533-389b-4680-a858-f1905013535e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:5f:6a:89:69:cf:f8:a5:9e:c2:f6:75:5a:
                    12:78:f3:66:0c:e3:08:3b:52:38:91:38:4a:88:56:
                    05:48:bb:08:99:28:f1:80:1a:2a:82:79:2a:da:92:
                    b6:7d:48:7c:34:03:b2:63:99:ea:c1:0c:23:50:1d:
                    b8:c9:e0:76:4a:9f:b0:bb:2f:e2:1c:02:a6:c8:e5:
                    0e:ce:45:19:c9:13:b5:7d:64:d1:1e:1c:82:b2:0b:
                    c7:b9:03:7b:dd:b1:aa:7c:72:42:c8:ac:11:5c:be:
                    55:e3:cc:b1:f0:f0:9c:f5:e6:e1:ac:5b:b7:36:84:
                    ac:fe:eb:5e:57:6b:76:30:e7:92:e4:7d:9d:3a:02:
                    b0:5d:51:d7:9d:7d:3f:3a:22:2e:5e:0b:c9:e2:ac:
                    61:ef:29:2d:67:57:f6:a5:33:e0:19:13:71:ba:77:
                    84:5f:e5:b7:19:16:d9:fc:3e:d6:5b:4f:b2:db:44:
                    21:95:b4:76:8b:4f:62:db:61:71:f5:6e:d6:35:9e:
                    a6:14:63:48:14:64:18:97:1e:40:49:f5:bc:68:20:
                    b4:94:94:a2:99:b1:ae:0e:54:2d:6b:00:6a:5c:93:
                    40:63:53:df:5a:e3:e9:6d:45:8b:ee:2c:12:2b:bd:
                    fe:b7:6e:a7:9d:a9:55:ef:8d:8f:47:4a:8d:12:31:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:45:68:76:AB:82:1E:10:C5:0D:F5:F0:20:A0:7D:36:D7:3D:23:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8c6c7661-9417-33ba-94a6-87ff79e27a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:86:28:a9:fc:f5:e2:14:d8:93:bc:33:83:1a:e0:93:98:
         f8:61:7d:dc:94:f0:4b:ec:aa:e9:14:5e:69:6d:fb:ac:27:9e:
         f9:19:c3:e8:a4:64:49:98:3c:ba:3f:49:e4:06:96:4b:f1:25:
         45:ae:23:a2:5f:f4:5d:1a:75:dd:b3:26:85:cb:00:50:1e:04:
         18:5a:bf:17:58:8d:6f:79:b7:8d:82:5c:9e:6e:33:79:51:f9:
         34:13:69:12:9c:15:eb:0c:99:06:63:9b:8d:36:b0:2b:34:bd:
         4d:19:c2:55:d6:23:b4:e9:87:92:fb:37:af:8d:79:f2:75:3a:
         a8:af:dd:76:74:58:b1:df:35:c3:39:52:ef:3e:20:bf:07:b7:
         f4:36:e9:55:44:36:1f:d2:47:72:45:2a:3d:ba:d1:16:62:2f:
         40:25:b9:91:0f:21:19:6b:3f:83:32:fd:09:98:6a:ca:fc:f3:
         26:b7:d4:5d:50:72:77:45:4d:25:7a:a1:bd:7f:44:00:3a:aa:
         f6:11:30:0f:48:87:74:77:1c:b2:b5:ca:11:f2:0e:6e:2e:65:
         b4:10:6e:06:ce:94:3c:7e:55:9e:76:83:49:a7:c4:43:ae:2b:
         57:05:1f:4b:c9:77:cc:4b:15:9a:74:cd:1b:ed:98:b3:2a:54:
         f5:6e:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----