Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/df558005-a75c-331f-a505-746ff5693e67.roa
File:                     df558005-a75c-331f-a505-746ff5693e67.roa (raw, json)
Hash identifier:          6N1lnP3FNoWQV+cCqdqhxtGYyqmFYZy1mqar0qzOSFo=
Subject key identifier:   35:F0:46:B3:B2:C0:04:E1:03:2A:AF:4F:FD:46:9E:7E:72:72:38:74
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858434C56B2A003B3F5990802E400
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/df558005-a75c-331f-a505-746ff5693e67.roa
Signing time:             Thu 21 Sep 2023 16:28:19 +0000
ROA not before:           Thu 21 Sep 2023 16:28:19 +0000
ROA not after:            Wed 20 Dec 2023 17:28:19 +0000
asID:                     0
IP address blocks:        128.254.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4c:56:b2:a0:03:b3:f5:99:08:02:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Sep 21 16:28:19 2023 GMT
            Not After : Dec 20 17:28:19 2023 GMT
        Subject: CN=02f0d442-7689-4eff-9276-dc3963b823a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:ef:ca:ad:40:14:f2:0e:4c:f1:4e:26:fb:
                    b5:fd:97:b0:30:08:2b:3c:fc:95:51:1d:f1:3d:13:
                    46:02:a5:f1:3a:f7:69:c2:29:8c:71:c8:fd:ef:b1:
                    1f:f7:55:81:12:9d:0a:7e:51:dc:cf:51:d2:25:ff:
                    c9:08:6a:09:10:12:96:b5:49:5f:b0:8f:14:18:c7:
                    75:3e:a9:93:2d:e4:98:90:66:68:3a:de:b7:a1:de:
                    b4:35:22:39:a4:07:31:3b:78:3d:99:62:4b:c4:fb:
                    f5:79:09:05:2d:17:0e:1b:2f:26:41:75:8d:8d:4c:
                    9e:a4:f1:81:1b:18:4a:90:fa:09:e1:42:41:08:c1:
                    0d:dd:45:69:1e:29:14:57:aa:66:c7:3c:f2:8a:5a:
                    56:91:0b:63:3c:b9:e7:b2:d9:e6:ed:30:b4:d2:ac:
                    d5:4f:9f:4d:37:1d:28:e1:82:9c:8c:b6:6a:33:f2:
                    b5:ac:49:f9:66:32:f3:2c:dd:96:25:da:84:25:72:
                    e2:01:26:c1:1b:81:f7:ce:38:90:4c:74:ab:b5:c5:
                    ff:8f:22:98:b2:1f:7c:5a:46:ca:ce:7c:1b:5f:f6:
                    c2:45:00:05:c6:47:96:c5:e7:49:bf:9a:85:5a:4b:
                    86:e9:ea:8f:af:7a:d0:92:66:8d:3c:e9:46:cb:75:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F0:46:B3:B2:C0:04:E1:03:2A:AF:4F:FD:46:9E:7E:72:72:38:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/df558005-a75c-331f-a505-746ff5693e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:9a:45:dd:88:c4:aa:20:8a:ee:9c:c4:e4:b2:08:10:cb:
         9a:4f:04:39:6d:5a:70:51:79:1c:ed:2e:c1:f9:67:35:6e:f5:
         3d:4e:e7:95:31:28:4c:69:1e:1d:13:b3:6b:0b:71:2f:e4:32:
         6b:00:21:3d:45:b5:92:ba:e8:e0:08:26:8f:ef:50:ac:ad:cd:
         ea:30:70:4f:90:b3:36:a6:af:90:b6:9f:f7:59:d7:0c:e5:9a:
         00:f4:f5:cd:85:8b:7b:69:9a:a2:9d:99:31:12:3e:3c:b2:79:
         b0:e2:e8:4e:1b:4a:09:d4:2e:3d:bd:4a:47:8d:56:ec:b3:5e:
         df:51:d1:f1:01:ca:07:0b:e7:b2:78:b6:d3:cb:7a:b4:6c:06:
         7f:e1:53:c1:15:c0:67:ae:b4:cb:37:06:8d:47:ab:b8:a5:e9:
         8b:ae:62:ab:b9:90:11:9d:92:bb:bf:d6:c2:6f:01:f5:e6:92:
         a5:15:7f:2a:ce:b5:06:67:9f:94:0d:52:84:14:44:3c:8b:4a:
         26:83:14:85:7a:2c:47:3f:4c:ba:fe:99:9f:9d:31:f3:df:ff:
         fc:f3:04:0b:a4:2f:d6:f2:c0:89:97:8b:c6:13:13:db:e9:0b:
         c6:ac:28:f1:76:cc:45:c0:2b:ed:3d:04:7f:6c:f1:46:77:1e:
         0d:03:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----