Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d4b43574-bfbe-3852-9595-99e21db45d9a.roa
File:                     d4b43574-bfbe-3852-9595-99e21db45d9a.roa (raw, json)
Hash identifier:          jd7GXuF7x8YJTBnricxK8kgxneTLKdHUE817ajV6vUc=
Subject key identifier:   EB:CB:74:1E:F5:A7:CF:A4:13:CC:5D:AB:DA:F1:1B:F7:59:95:9B:C2
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583F8FFED36A7AB68A063B946140
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d4b43574-bfbe-3852-9595-99e21db45d9a.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8f:fe:d3:6a:7a:b6:8a:06:3b:94:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=65f92641-ae3d-4886-bfcc-644f0b66cbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:ac:4c:eb:1d:e6:7e:e1:a0:b4:08:9b:95:
                    47:c8:1f:4c:6d:78:84:fa:1f:34:1b:33:36:20:47:
                    18:29:48:79:11:0a:c1:69:ad:34:78:b6:32:eb:65:
                    19:c3:23:c4:b6:aa:66:2e:6b:d3:be:6a:80:18:40:
                    d6:a9:11:35:18:be:47:d5:4e:97:a5:04:ab:ae:a0:
                    c5:9a:be:c7:3b:5f:fc:42:80:a8:1b:ec:6c:c5:5d:
                    58:7e:80:f8:de:94:46:97:15:eb:49:83:87:37:af:
                    6c:02:0a:8f:83:5f:33:f1:d2:a2:6e:c1:71:35:5f:
                    c0:97:78:ef:66:99:96:c6:c2:c4:37:d5:32:a9:36:
                    a5:24:cc:78:ca:49:64:b0:ba:f9:e7:64:1b:ae:49:
                    5f:6d:cd:64:6c:b5:5b:89:1a:08:47:2e:0c:01:d7:
                    5a:75:2e:82:d5:53:ce:56:bf:1c:60:47:c6:09:92:
                    15:3a:ce:a7:a8:93:55:fb:70:30:90:5e:40:fb:9b:
                    0e:da:7e:2b:6a:4e:ff:68:16:a7:24:79:e1:51:67:
                    a7:81:f0:10:d2:e1:b1:9f:3a:80:d0:ac:bf:8a:fe:
                    80:d7:42:86:96:b0:70:00:30:7f:db:b9:d0:61:d0:
                    04:37:b1:fd:a1:95:1c:a8:30:53:75:64:4f:61:29:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CB:74:1E:F5:A7:CF:A4:13:CC:5D:AB:DA:F1:1B:F7:59:95:9B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d4b43574-bfbe-3852-9595-99e21db45d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:52:b6:95:49:5f:37:a7:46:fa:8b:88:52:a2:e4:0d:ba:45:
         11:5c:9b:fd:04:1c:48:0e:9e:7e:8f:55:0b:f8:46:a7:ff:8f:
         53:43:ee:e3:6e:93:36:a0:3f:90:95:7c:7f:08:35:5e:73:96:
         dc:10:a6:bd:9b:25:62:5a:e8:36:69:39:a5:4c:84:1e:db:a8:
         b1:13:28:db:f4:7c:43:c6:b7:83:2f:92:d4:f2:1c:c6:49:f1:
         ae:81:b3:aa:ca:08:d0:a7:53:9a:1b:1b:8b:ba:f9:c8:03:81:
         55:06:40:bb:46:a3:d6:9d:db:59:18:e2:ae:a4:af:22:58:d3:
         45:55:02:fb:f0:eb:ee:85:e8:2f:fa:89:f2:29:48:da:3f:4a:
         39:4e:b8:2c:d5:70:ce:b4:61:b1:e6:44:54:30:f5:c0:0f:23:
         0c:62:ff:92:98:63:22:61:05:0c:90:00:42:aa:40:89:9e:2d:
         7f:0f:cd:47:64:96:ca:b6:50:85:2f:6c:84:3d:23:d7:2a:1f:
         8f:5e:b1:d3:7c:23:f4:24:3e:45:34:ab:b8:23:6a:c9:c8:b8:
         42:38:e8:35:48:84:5f:1c:f0:20:48:d1:34:9d:0c:17:5f:5a:
         7d:bb:b6:56:f6:2e:ac:b2:07:5d:92:ff:6c:f7:fc:53:c0:d9:
         49:06:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----