Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7d4f7e6-4135-3bc2-bef4-8a2241c59cd8.roa
File:                     f7d4f7e6-4135-3bc2-bef4-8a2241c59cd8.roa (raw, json)
Hash identifier:          xdRARmSoURcCOO3nnGMREBBmqROFdcPQRBAs0pk0cpk=
Subject key identifier:   3D:E8:8E:C3:77:BC:5E:D6:B6:1E:2A:31:C5:36:99:09:CE:24:AB:80
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583D0D0DD42568E98F276D83FD00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7d4f7e6-4135-3bc2-bef4-8a2241c59cd8.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0d:0d:d4:25:68:e9:8f:27:6d:83:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=401e4e36-f71b-44f9-a1cf-d651d70bb78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:c6:3e:47:42:b6:db:d5:96:1c:4b:80:8e:
                    3a:a5:f1:6c:89:41:0f:b9:1c:bd:cd:6f:79:6c:99:
                    b0:30:ff:ad:bc:83:9f:90:12:15:5e:9b:35:a5:b6:
                    f4:46:1c:36:3a:7f:86:8d:e9:24:45:ee:47:e4:db:
                    42:dd:f9:2d:27:a3:be:3d:3c:8d:7e:0a:05:24:e5:
                    c0:0e:f3:bc:ef:ad:67:9f:7d:f7:b3:32:93:87:02:
                    fc:6e:56:83:0b:e7:5b:db:20:10:14:87:55:4d:31:
                    88:c4:62:e4:43:67:03:ba:a2:9a:51:f5:3a:4c:82:
                    99:15:53:6e:42:0c:53:99:cf:5b:26:1e:a1:dc:ca:
                    0d:6e:48:66:9c:2b:22:49:d2:de:6d:26:2c:56:df:
                    6a:50:6b:a1:b8:ec:a3:30:5d:cf:dd:2c:88:47:a3:
                    0c:d1:3d:54:f2:8f:22:4e:88:dd:3e:70:e6:8b:0b:
                    2a:72:5d:b7:95:9f:93:c7:d6:e5:0b:b5:9e:6a:b1:
                    71:f8:87:bc:4c:47:2d:35:f6:48:5f:b9:7d:f2:e6:
                    bc:b6:6b:fe:20:92:41:6f:8c:51:df:95:f3:46:f8:
                    2a:25:fd:a8:37:ab:6b:d1:d4:0e:40:e5:0b:8d:f3:
                    26:66:6a:b6:bd:a5:7a:33:a0:07:ed:48:d3:9d:88:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E8:8E:C3:77:BC:5E:D6:B6:1E:2A:31:C5:36:99:09:CE:24:AB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7d4f7e6-4135-3bc2-bef4-8a2241c59cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:3c:a3:07:70:84:b7:00:2d:00:66:21:cf:92:ec:cc:88:
         66:6a:ad:db:66:82:e1:c6:e9:5b:5a:70:eb:84:c0:ca:f8:33:
         cd:bb:56:e9:be:4e:8d:9d:24:53:9c:73:7c:2b:4e:d1:79:68:
         9e:75:4f:93:c0:d4:14:63:71:e2:d9:39:c0:7b:9b:c5:0c:06:
         ee:6e:30:e3:e2:8a:2e:7c:84:cb:7f:5b:d6:74:41:1e:ac:e1:
         98:27:2e:3f:10:2a:18:42:72:f3:a2:23:38:d5:82:60:c5:2a:
         1c:d6:dc:d2:f5:06:2a:bb:3b:b1:49:b0:81:9a:15:32:8a:eb:
         80:c0:7e:7e:ae:4a:99:1a:e8:2d:de:1e:46:14:db:0f:65:43:
         43:78:fd:5d:ef:6e:96:8e:32:3f:37:65:03:9f:08:b4:cf:ae:
         fe:a9:8e:7c:41:66:2e:bb:6f:9d:1a:d5:fa:7c:42:f8:47:a4:
         e1:b8:06:fe:4f:c9:61:99:cb:50:8a:4f:8d:5d:21:ef:b6:39:
         62:32:0f:14:5e:0a:74:1c:eb:20:25:b4:f1:f9:9e:c2:1d:b8:
         ca:76:83:64:95:42:c5:f2:bd:41:0b:f8:9e:73:f4:cb:3e:a6:
         1b:fc:aa:1d:b5:ef:bd:42:da:32:20:76:9d:50:51:f3:83:aa:
         ae:74:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----