Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/bdc368b9-c845-3fbe-ad00-f0e8c1f0af8c.roa
File:                     bdc368b9-c845-3fbe-ad00-f0e8c1f0af8c.roa (raw, json)
Hash identifier:          67YyXNdan+9qa9+KhTQfRtOtydBPia3F6TMzWNKwjqk=
Subject key identifier:   F4:0C:4C:A7:B0:25:C6:9C:AB:8C:4D:AE:0F:38:B3:6C:46:41:C1:0B
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584863CB134817BDE9A1E37E6A80
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/bdc368b9-c845-3fbe-ad00-f0e8c1f0af8c.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     26548
IP address blocks:        104.218.102.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:13:48:17:bd:e9:a1:e3:7e:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=4d34b41a-5208-430f-9443-0dd22460f7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:f6:cf:04:f2:9c:47:e7:04:f0:64:4d:6f:
                    17:76:cf:17:5b:a3:95:2d:4f:0b:10:ae:de:2d:54:
                    c7:4b:1e:ca:38:3f:42:d6:be:a9:14:1c:37:0d:2e:
                    82:6a:0c:d1:89:32:b3:14:bd:4d:99:7a:6a:e0:a1:
                    9e:b0:e1:47:c1:c9:8e:b7:1c:8a:f0:88:f7:bb:11:
                    1f:16:04:16:9a:86:79:38:b1:91:ca:42:27:1f:01:
                    cb:5d:7f:22:f3:38:06:8b:b8:53:8b:39:e9:21:7a:
                    5b:69:34:74:76:cc:7f:bd:5c:47:b1:39:eb:c2:aa:
                    60:c9:61:24:bb:64:34:c0:4f:70:18:d8:8b:eb:49:
                    aa:ac:90:19:5e:2d:e3:7f:12:84:36:08:e9:0d:cd:
                    28:9b:f9:e1:a8:e5:67:60:b7:13:8d:95:0d:9b:d2:
                    f5:da:68:c9:d7:ce:5c:ce:5e:bb:39:ee:18:5d:4f:
                    d4:27:f7:4f:2e:94:9d:c3:1d:c7:87:2e:cc:8a:74:
                    a0:1b:f4:bb:4a:23:6d:e1:11:cc:b2:a5:95:85:be:
                    d0:fa:ac:fe:f0:83:03:39:16:86:37:32:d7:9f:80:
                    c1:26:fe:ca:c0:df:fc:88:f9:20:30:8d:bc:5e:32:
                    8a:be:3f:1f:2f:c0:3d:5e:12:fa:63:62:47:ed:ca:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:4C:A7:B0:25:C6:9C:AB:8C:4D:AE:0F:38:B3:6C:46:41:C1:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/bdc368b9-c845-3fbe-ad00-f0e8c1f0af8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:90:93:ab:32:0d:b5:4d:1b:62:36:7d:0b:12:41:a8:e3:ae:
         56:4b:75:23:69:ef:55:0b:98:48:f2:f3:be:a7:cb:ee:94:9e:
         3c:b6:53:32:7e:9b:70:a7:71:b4:2d:19:0f:95:b6:66:60:5c:
         ec:09:fe:c9:7b:a5:ba:de:36:27:ab:1c:9e:6f:3f:c7:dd:42:
         dd:55:13:62:f2:af:68:99:e1:e4:20:d1:b4:8a:ac:b5:17:80:
         92:8c:23:49:45:6c:4d:20:ab:fa:08:60:64:0e:d9:17:b1:92:
         e1:92:9c:5a:24:f0:cc:97:b9:f7:e8:9c:d6:99:f9:76:80:ad:
         70:8c:0a:b3:10:70:ac:f5:0e:5a:9d:e7:89:85:e0:f2:42:13:
         0f:e9:da:22:c7:11:c4:e3:fe:20:31:95:2d:19:5a:9d:67:f8:
         33:31:50:24:da:24:c3:5b:79:a4:88:b7:9c:fa:43:37:8d:eb:
         fe:29:ef:11:43:ce:f0:01:82:45:30:bb:9d:af:49:b8:0e:88:
         0f:2e:03:5c:b3:2c:11:81:e8:6e:db:ca:d4:bb:df:d0:04:2e:
         2b:cf:a8:46:40:c7:de:31:b0:52:d2:7f:43:53:67:92:38:06:
         4d:a8:22:40:ad:2c:e6:69:96:e4:99:ff:57:80:01:d8:72:af:
         ad:d2:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----