Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/80326660-83a8-3a94-b7e4-f17471709ea2.roa
File:                     80326660-83a8-3a94-b7e4-f17471709ea2.roa (raw, json)
Hash identifier:          BeC8DCl1RKj9uPLVdW5rLW4ImjRbfl8DoRGSQDkX98U=
Subject key identifier:   E9:5C:E9:71:B1:7F:95:F7:39:14:4F:E5:DF:FE:2B:B7:D7:A6:A8:82
Certificate issuer:       /CN=4454f19d-c14e-499f-8d66-357970248d2c
Certificate serial:       010D0C9F43285844527996E189CB39656D1D98C0
Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/80326660-83a8-3a94-b7e4-f17471709ea2.roa
Signing time:             Sun 24 Dec 2023 14:00:20 +0000
ROA not before:           Sun 24 Dec 2023 14:00:20 +0000
ROA not after:            Sat 23 Mar 2024 13:00:20 +0000
asID:                     1239
IP address blocks:        199.192.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:52:79:96:e1:89:cb:39:65:6d:1d:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c
        Validity
            Not Before: Dec 24 14:00:20 2023 GMT
            Not After : Mar 23 13:00:20 2024 GMT
        Subject: CN=7c8b6eb7-dad7-4ef6-9eb6-707a8acad2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:ef:6d:32:dd:aa:8d:32:02:83:63:a1:bd:
                    41:d5:84:25:4c:19:53:52:19:fd:32:d7:fa:66:9d:
                    99:16:78:5a:ba:b9:23:13:bb:c0:57:4b:e7:4f:10:
                    d8:61:c3:3b:a6:44:69:20:76:9a:04:62:59:1f:8c:
                    17:b4:0f:72:18:3e:71:02:6e:16:3f:7e:38:15:f7:
                    47:36:8d:93:46:b2:4c:2e:dd:cb:a4:22:a5:b1:e2:
                    e6:e1:77:62:fc:b8:5d:c5:df:a3:6b:9c:21:99:e4:
                    9f:64:79:1a:54:cd:15:e7:4e:42:64:a3:0d:23:20:
                    45:ba:b0:11:cc:dd:d0:43:01:97:cf:8f:f9:b0:49:
                    2d:68:8c:21:0a:3b:60:50:b3:52:0c:cb:95:8f:39:
                    b7:ef:93:d5:f2:f3:76:9c:51:28:2f:e8:b6:90:f4:
                    80:9a:2c:8d:c3:94:ef:48:bb:b9:96:d4:97:23:68:
                    d9:d5:62:38:0c:a0:b5:b5:d6:76:13:9f:1e:e6:e8:
                    88:2a:b8:1e:40:ea:59:fb:f2:ce:bd:01:f5:ce:e0:
                    6c:16:0b:38:b0:26:28:09:f4:5e:6e:d9:96:91:61:
                    5c:b8:7c:54:18:f0:a3:16:ee:bf:19:6e:f6:76:e3:
                    a1:30:f3:59:e6:08:6b:c7:ef:aa:7b:2a:30:6b:4d:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5C:E9:71:B1:7F:95:F7:39:14:4F:E5:DF:FE:2B:B7:D7:A6:A8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/80326660-83a8-3a94-b7e4-f17471709ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:41:6f:c1:ce:79:72:4d:78:c6:1b:e7:31:4e:e4:8c:53:
         30:48:86:48:68:a6:d8:2d:05:85:8a:7e:76:f8:dc:46:d3:81:
         b3:c4:48:76:4b:88:6f:97:d8:57:12:f6:4d:5c:67:2c:26:89:
         f7:40:ae:7b:83:1e:e8:2f:d0:7d:b5:35:af:8a:e0:13:32:0c:
         a2:41:68:26:bd:d3:59:1b:50:49:54:52:57:7b:e2:5d:30:09:
         c0:15:f3:d0:bb:8e:e2:bf:db:4c:2e:77:ce:e9:18:b2:7c:2a:
         fa:25:7b:da:24:92:a9:7a:d6:09:6f:b3:13:a1:48:5b:f4:51:
         54:d0:77:cf:9b:d9:ac:16:cc:03:00:fd:80:a4:eb:f1:80:31:
         30:ee:07:5a:f3:64:92:ba:bd:d5:4e:68:b6:2c:32:4c:ca:c6:
         37:e4:87:c0:1b:c8:93:af:47:da:51:b4:b2:5a:82:67:f0:ad:
         73:18:77:34:58:7a:8a:6c:9a:b5:74:9f:f1:bf:ea:e0:25:cc:
         9b:e3:eb:f7:1e:22:0c:7c:ce:7e:48:6b:e7:31:c7:c2:43:19:
         d1:29:0f:75:e2:e8:54:a9:ad:72:35:55:62:3e:4b:55:66:e8:
         20:d0:4e:cf:e5:ae:e2:db:73:fe:66:64:36:3e:e5:51:af:7e:
         c0:2b:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----