Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/2dbcfbd4-418e-3b2b-8972-1bfa86ebf382.roa
File:                     2dbcfbd4-418e-3b2b-8972-1bfa86ebf382.roa (raw, json)
Hash identifier:          0oE0TlpMXweYmQR/UDctyaWk66vKnw9miAJgr3iRjoA=
Subject key identifier:   05:A6:83:06:EA:67:D4:C1:34:D3:86:CC:84:BA:CF:EA:72:28:B7:30
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F43285841EC60276F19FC1C8C85B1E100
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/2dbcfbd4-418e-3b2b-8972-1bfa86ebf382.roa
Signing time:             Thu 18 May 2023 14:42:50 +0000
ROA not before:           Thu 18 May 2023 14:42:50 +0000
ROA not after:            Wed 16 Aug 2023 14:42:50 +0000
asID:                     0
IP address blocks:        23.134.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:60:27:6f:19:fc:1c:8c:85:b1:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: May 18 14:42:50 2023 GMT
            Not After : Aug 16 14:42:50 2023 GMT
        Subject: CN=0cfbd443-3258-4b8b-886b-9e65160aa91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:33:87:71:39:96:21:3d:2b:ea:f3:61:07:
                    e2:42:30:c8:79:e0:d4:bf:8a:45:54:85:e2:15:c5:
                    04:59:02:0a:53:93:a2:de:f4:a1:64:d4:ea:89:d2:
                    b5:81:06:02:4c:2a:52:34:7e:20:f1:12:bf:7e:e5:
                    e9:3f:8d:85:8f:cc:96:b3:7e:4a:f1:4b:0b:dc:80:
                    95:84:6a:c4:87:3a:a3:b0:1a:77:49:db:8d:bd:d5:
                    53:c2:8e:c5:58:89:95:f3:43:68:c8:e9:e9:40:ed:
                    b5:3e:35:52:82:6a:db:19:34:3b:67:57:7f:b0:54:
                    d6:aa:bc:d0:49:24:31:6c:6a:0a:50:79:66:25:af:
                    b0:63:4b:b0:57:23:00:48:2b:f9:7b:4f:50:7b:70:
                    36:66:22:3a:84:7b:85:52:dc:a4:be:3a:fa:e0:3e:
                    52:d7:f0:4d:30:ed:66:20:9a:39:8b:c3:77:33:9f:
                    5e:f7:f9:c6:13:9e:f5:ec:d7:95:e5:ee:ff:ae:34:
                    e4:93:ce:a3:e2:1f:8f:3c:40:a7:81:ea:df:b3:be:
                    ad:5b:74:ea:04:11:f2:91:5a:05:21:68:53:bf:d3:
                    73:b9:ae:6f:85:37:a8:a8:dc:50:d0:b9:eb:3e:58:
                    2b:39:2d:81:f5:5a:8b:8f:4d:ab:fd:6a:fd:3b:35:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:83:06:EA:67:D4:C1:34:D3:86:CC:84:BA:CF:EA:72:28:B7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/2dbcfbd4-418e-3b2b-8972-1bfa86ebf382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:af:41:bb:4f:2d:34:2b:73:57:f4:12:96:d7:8e:bc:48:
         7b:09:6b:c0:b4:44:9a:dd:09:84:b9:a8:6e:44:d1:52:ff:c2:
         5e:87:89:d9:86:34:4f:12:41:f8:36:95:f7:b0:98:6a:c6:16:
         97:5e:e1:fe:3b:3d:a5:90:86:6d:6a:69:dc:60:9b:97:ab:f4:
         6b:b4:69:41:ea:50:0e:e8:8d:4a:d4:bf:aa:56:33:a9:0a:60:
         2d:6b:6d:b7:2a:2c:1f:3d:42:e9:11:38:e5:d4:9f:db:d0:1b:
         9f:86:46:05:11:bc:b2:a3:27:19:f4:d0:b9:f5:f6:e7:5c:1a:
         48:39:d3:11:6d:3e:45:49:3a:d0:e4:19:7f:59:15:32:bf:56:
         12:f8:2b:08:76:bc:b6:f5:c8:ef:e6:a6:fe:ef:f3:27:f2:89:
         98:47:b3:6d:91:7e:8c:fd:74:e8:65:c7:b1:b6:b7:2e:2e:0e:
         e3:13:f1:46:05:6b:46:67:65:46:10:cf:08:02:23:69:6a:8f:
         d9:40:d6:75:34:40:fd:26:da:6a:e9:2e:b9:6b:84:99:53:6f:
         86:f2:fc:b2:25:3a:6d:8c:1f:2b:5c:5b:29:de:38:21:b1:bc:
         4b:01:09:a8:56:ff:b1:14:98:f3:58:f8:12:2b:e7:35:f1:03:
         ee:67:7a:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHsYCdvGfwcjIWx4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTIzMDUxODE0NDI1MFoXDTIzMDgxNjE0NDI1MFowLzEtMCsGA1UEAxMk
MGNmYmQ0NDMtMzI1OC00YjhiLTg4NmItOWU2NTE2MGFhOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4kzh3E5liE9K+rzYQfiQjDIeeDUv4pFVIXi
FcUEWQIKU5Oi3vShZNTqidK1gQYCTCpSNH4g8RK/fuXpP42Fj8yWs35K8UsL3ICV
hGrEhzqjsBp3SduNvdVTwo7FWImV80NoyOnpQO21PjVSgmrbGTQ7Z1d/sFTWqrzQ
SSQxbGoKUHlmJa+wY0uwVyMASCv5e09Qe3A2ZiI6hHuFUtykvjr64D5S1/BNMO1m
IJo5i8N3M59e9/nGE5717NeV5e7/rjTkk86j4h+PPECngerfs76tW3TqBBHykVoF
IWhTv9Nzua5vhTeoqNxQ0LnrPlgrOS2B9VqLj02r/Wr9OzV8LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWmgwbqZ9TBNNOGzIS6z+pyKLcwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMmRiY2ZiZDQtNDE4ZS0z
YjJiLTg5NzItMWJmYTg2ZWJmMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxlr0G7Ty00K3NX9BKW1468SHsJa8C0RJrdCYS5qG5E0VL/wl6HidmG
NE8SQfg2lfewmGrGFpde4f47PaWQhm1qadxgm5er9Gu0aUHqUA7ojUrUv6pWM6kK
YC1rbbcqLB89QukROOXUn9vQG5+GRgURvLKjJxn00Ln19udcGkg50xFtPkVJOtDk
GX9ZFTK/VhL4Kwh2vLb1yO/mpv7v8yfyiZhHs22Rfoz9dOhlx7G2ty4uDuMT8UYF
a0ZnZUYQzwgCI2lqj9lA1nU0QP0m2mrpLrlrhJlTb4by/LIlOm2MHytcWyneOCGx
vEsBCahW/7EUmPNY+BIr5zXxA+5neuI=
-----END CERTIFICATE-----