Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c8c3e67e-2098-30f3-ba2b-f78137632577.roa
File:                     c8c3e67e-2098-30f3-ba2b-f78137632577.roa (raw, json)
Hash identifier:          UcdLNQAm2zHoCd8oa2aJga1Ck6WdBhwLEHdByyJvX4U=
Subject key identifier:   6C:76:04:91:BD:B4:11:6A:E2:B0:A8:53:1A:5E:86:7F:DA:AB:5A:D2
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F432858445D4CDC6D6E3F5DAB3EAC9600
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c8c3e67e-2098-30f3-ba2b-f78137632577.roa
Signing time:             Thu 28 Dec 2023 11:04:11 +0000
ROA not before:           Thu 28 Dec 2023 11:04:11 +0000
ROA not after:            Wed 27 Mar 2024 10:04:11 +0000
asID:                     30633
IP address blocks:        64.120.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5d:4c:dc:6d:6e:3f:5d:ab:3e:ac:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec 28 11:04:11 2023 GMT
            Not After : Mar 27 10:04:11 2024 GMT
        Subject: CN=ec82b88c-2278-4c87-9823-02c6c7ad9d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:59:62:74:c5:3b:66:8e:17:98:7f:71:be:
                    85:9d:b3:cd:b3:57:bc:06:b8:67:32:69:86:a2:ff:
                    fc:5f:39:a6:e2:ae:8d:65:81:be:81:cb:bb:47:b7:
                    16:75:8e:77:6a:d2:9d:4c:ea:07:3d:32:ac:cf:36:
                    c8:e8:3a:9f:56:d3:9b:3b:a9:30:26:d7:e0:27:98:
                    60:ed:2d:cd:40:8a:bb:33:98:cc:4d:fa:40:3c:25:
                    d3:87:04:ee:3f:31:cc:80:28:ff:9f:9b:c1:f7:8d:
                    1c:d9:17:74:00:88:44:d0:3e:d0:45:fd:00:bc:3f:
                    e1:ca:03:8f:93:08:2a:d9:e6:6c:d7:74:d3:78:1b:
                    10:84:e0:da:88:af:b6:4a:79:d6:48:c2:f8:3f:c0:
                    ed:39:87:b5:c0:c7:6c:7c:8b:1b:4b:a2:fa:50:ea:
                    73:9c:96:2b:34:3e:07:8a:b0:82:51:17:67:d8:12:
                    92:ef:d6:c6:bb:6a:aa:5e:1f:f6:52:62:86:77:79:
                    ab:09:27:f5:cc:3b:49:f0:00:db:b2:a7:21:4c:d2:
                    a2:28:ef:60:10:e7:0c:4d:85:16:07:63:5a:05:f9:
                    de:33:c8:ad:8c:aa:0c:2e:eb:d2:98:dc:91:d4:04:
                    9c:76:fb:6f:76:bd:74:05:6d:c3:17:64:1e:b1:ae:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:76:04:91:BD:B4:11:6A:E2:B0:A8:53:1A:5E:86:7F:DA:AB:5A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c8c3e67e-2098-30f3-ba2b-f78137632577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:01:ff:6f:90:a6:10:3f:54:ad:a6:89:cc:9e:2f:10:a8:e8:
         8c:62:15:21:ef:47:d8:8b:d1:a2:50:05:c8:a2:76:c1:3b:be:
         fb:f5:d7:bb:09:a0:78:7b:28:22:74:27:b5:eb:c2:49:b1:35:
         25:c1:48:a1:7c:07:0b:b9:44:6d:3e:9f:43:44:41:43:da:dd:
         04:42:b3:d0:e1:b4:3f:52:ce:5a:a9:0f:05:64:35:5f:5c:46:
         08:41:af:5a:8a:28:8e:e5:8f:cf:2c:05:41:dc:1b:86:35:43:
         50:f6:bd:b7:e9:bd:88:b8:f7:32:06:5d:11:50:9c:7d:89:fb:
         ea:52:6e:6e:29:c5:50:8d:71:45:0f:62:93:0e:92:18:5f:9b:
         2f:a4:fa:d0:7b:ca:6a:1a:4c:0f:61:ab:5f:1a:35:fa:95:85:
         1e:c7:6a:67:aa:06:05:f8:91:93:d2:7c:09:98:54:d3:12:ed:
         a2:66:7a:96:2f:b1:c3:1a:b1:5d:fa:c5:bb:14:41:4b:fd:0d:
         60:35:a6:56:84:fe:ea:de:27:fa:3a:a0:03:82:31:b4:cf:fa:
         f9:60:8e:75:79:16:44:45:59:c6:c2:f4:e7:ab:ec:d3:d4:f4:
         43:46:9d:32:cf:a2:48:70:de:ed:a8:c8:d2:be:c7:7c:6a:85:
         a5:02:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----