Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e20364eb-b2a6-342a-8912-d97dca63f523.roa
File:                     e20364eb-b2a6-342a-8912-d97dca63f523.roa (raw, json)
Hash identifier:          H/9iYzu8PYZwFnnIxoiXGEb1pbJKVyabhhLNknPwWJg=
Subject key identifier:   92:11:CD:43:DE:C6:9E:5A:93:1F:A4:99:0B:EE:FC:0A:69:04:1F:6F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285843F877F50832D0367FC7461CC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e20364eb-b2a6-342a-8912-d97dca63f523.roa
Signing time:             Wed 22 Nov 2023 08:14:22 +0000
ROA not before:           Wed 22 Nov 2023 08:14:22 +0000
ROA not after:            Tue 20 Feb 2024 08:14:22 +0000
asID:                     15003
IP address blocks:        64.120.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f8:77:f5:08:32:d0:36:7f:c7:46:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Nov 22 08:14:22 2023 GMT
            Not After : Feb 20 08:14:22 2024 GMT
        Subject: CN=4a9cc402-7284-4d40-ba36-02d979590f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:b7:55:c5:6e:ca:6b:cf:a7:92:80:48:5e:
                    d4:d8:02:1a:28:cb:19:59:71:59:14:b0:2e:17:3f:
                    2f:b7:71:32:60:60:ab:59:de:f3:dc:81:8d:51:c7:
                    05:d9:b7:b7:13:22:82:f6:f2:ce:05:63:27:8a:d3:
                    12:b0:cf:0c:74:ca:12:7d:03:32:73:96:37:0f:1b:
                    9e:4c:40:dd:17:1f:e5:cf:59:e4:c1:f2:48:16:f8:
                    ea:b2:52:b6:f5:ce:4b:bd:3b:e1:67:70:ec:a1:a1:
                    48:36:b6:6c:63:ef:ed:24:92:df:19:a7:e6:eb:02:
                    ce:5e:b5:92:20:b6:22:60:24:3b:e1:af:4b:bb:ca:
                    20:ff:55:7f:51:20:32:20:92:db:d8:ae:bc:9d:76:
                    83:30:93:b7:92:54:74:32:8b:72:84:f4:22:e0:94:
                    96:ba:b1:96:dc:ce:30:0b:22:49:01:91:4a:93:86:
                    eb:f3:cb:a8:cd:72:cf:5d:fe:51:cf:ea:bf:a3:2d:
                    ed:8a:af:61:53:26:46:f5:a3:f4:d5:0a:32:bd:e9:
                    95:50:2f:ac:d4:17:15:02:6c:1b:3c:7c:6b:f7:1e:
                    ef:6f:fd:c0:c8:4e:5d:d5:67:b1:04:f0:84:79:0d:
                    bf:aa:84:63:e5:17:be:43:6a:df:42:62:99:78:dc:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:CD:43:DE:C6:9E:5A:93:1F:A4:99:0B:EE:FC:0A:69:04:1F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e20364eb-b2a6-342a-8912-d97dca63f523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:b0:8f:c1:91:1c:47:85:2a:ad:18:0b:8a:19:de:e3:3b:
         94:13:5a:06:ab:e3:4a:c5:34:66:5e:66:b9:01:2d:54:df:4d:
         fb:9f:a6:2e:8b:15:6e:16:ba:fb:b1:fc:53:4e:df:95:93:f8:
         c7:c4:3a:08:28:1f:cc:59:bc:2e:a3:f8:2b:52:88:51:c5:d4:
         e3:90:5f:e8:1c:bf:86:6d:bc:5e:2f:1a:7a:b5:70:60:75:e6:
         0f:4b:ef:06:77:9e:3b:ba:25:66:65:b5:7a:ec:08:aa:84:e6:
         6f:a8:c7:de:39:20:8d:d3:95:bb:f6:c2:81:29:4e:1c:66:cc:
         b3:0b:47:56:05:ac:2c:e2:43:6c:29:8d:6b:5b:d5:03:d9:92:
         dd:77:a5:b3:14:c5:94:2e:55:29:d9:ef:ee:5e:2f:8f:ef:6f:
         f6:c7:33:61:63:d4:2a:42:55:42:a4:fc:7b:6c:7a:b2:2a:cd:
         3c:f5:56:1a:ec:cf:f7:c9:97:25:3e:e6:06:2d:39:55:05:91:
         02:b1:a9:6b:66:c6:b3:53:94:f5:dc:49:e4:bd:a5:5b:2b:62:
         21:f4:7e:b4:f3:29:bb:aa:aa:d6:9d:56:6d:ce:a1:9d:f0:9e:
         92:db:50:84:39:ad:60:b6:ee:eb:b9:bd:a4:01:69:c8:72:72:
         1b:b2:a8:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEP4d/UIMtA2f8dGHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTIzMTEyMjA4MTQyMloXDTI0MDIyMDA4MTQyMlowLzEtMCsGA1UEAxMk
NGE5Y2M0MDItNzI4NC00ZDQwLWJhMzYtMDJkOTc5NTkwZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR63VcVuymvPp5KASF7U2AIaKMsZWXFZFLAu
Fz8vt3EyYGCrWd7z3IGNUccF2be3EyKC9vLOBWMnitMSsM8MdMoSfQMyc5Y3Dxue
TEDdFx/lz1nkwfJIFvjqslK29c5LvTvhZ3DsoaFINrZsY+/tJJLfGafm6wLOXrWS
ILYiYCQ74a9Lu8og/1V/USAyIJLb2K68nXaDMJO3klR0MotyhPQi4JSWurGW3M4w
CyJJAZFKk4br88uozXLPXf5Rz+q/oy3tiq9hUyZG9aP01QoyvemVUC+s1BcVAmwb
PHxr9x7vb/3AyE5d1WexBPCEeQ2/qoRj5Re+Q2rfQmKZeNxwGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIRzUPexp5akx+kmQvu/AppBB9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTIwMzY0ZWItYjJhNi0z
NDJhLTg5MTItZDk3ZGNhNjNmNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHhtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACV/sI/BkRxHhSqtGAuKGd7jO5QTWgar40rFNGZeZrkBLVTfTfufpi6L
FW4Wuvux/FNO35WT+MfEOggoH8xZvC6j+CtSiFHF1OOQX+gcv4ZtvF4vGnq1cGB1
5g9L7wZ3nju6JWZltXrsCKqE5m+ox945II3Tlbv2woEpThxmzLMLR1YFrCziQ2wp
jWtb1QPZkt13pbMUxZQuVSnZ7+5eL4/vb/bHM2Fj1CpCVUKk/HtserIqzTz1Vhrs
z/fJlyU+5gYtOVUFkQKxqWtmxrNTlPXcSeS9pVsrYiH0frTzKbuqqtadVm3OoZ3w
npLbUIQ5rWC27uu5vaQBachychuyqEg=
-----END CERTIFICATE-----