Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/52a40b16-8dab-3855-b031-d4cb0fe296bb.roa
File:                     52a40b16-8dab-3855-b031-d4cb0fe296bb.roa (raw, json)
Hash identifier:          u46zP4pnkg/CL9fs+0Dg8XHyBTkAZIWbPmdQRhTiRss=
Subject key identifier:   53:6C:D6:F8:74:8A:6A:44:21:D1:D6:BA:4B:AA:E1:FF:B0:20:A6:02
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F43285843B92136F5B647E350EE900240
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/52a40b16-8dab-3855-b031-d4cb0fe296bb.roa
Signing time:             Mon 30 Oct 2023 15:43:40 +0000
ROA not before:           Mon 30 Oct 2023 15:43:40 +0000
ROA not after:            Sun 28 Jan 2024 16:43:40 +0000
asID:                     64267
IP address blocks:        64.72.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b9:21:36:f5:b6:47:e3:50:ee:90:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Oct 30 15:43:40 2023 GMT
            Not After : Jan 28 16:43:40 2024 GMT
        Subject: CN=50d6654d-dd03-4e36-9c5f-969056464d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:10:68:dc:26:2f:86:41:0e:e6:8c:85:e7:
                    24:bc:cf:c6:82:77:39:fc:2d:58:df:8f:99:50:d3:
                    08:41:0b:4e:14:e8:83:37:0d:08:05:2f:2d:1e:7f:
                    d3:72:42:e4:e8:8f:c1:db:63:c5:e6:78:ca:a5:78:
                    a5:ca:11:87:94:d9:47:49:00:d7:41:d1:f6:88:ea:
                    a6:26:f3:b8:ab:02:ad:ef:83:43:96:18:2d:e9:ca:
                    e8:e9:db:ff:4a:26:bc:47:1a:eb:cd:cf:d4:64:51:
                    5b:3b:5b:71:9d:04:66:4c:16:74:4b:8d:10:81:b5:
                    fc:43:d7:9c:9b:43:9c:9f:d2:75:f8:8a:d9:63:65:
                    a2:b5:60:c8:59:c7:97:f2:3c:d9:22:a4:ec:68:03:
                    01:5f:3c:8f:56:58:bf:99:e3:37:56:de:5c:f2:94:
                    58:21:e5:c5:6b:5e:b2:93:40:86:b4:ba:a1:e0:87:
                    4c:51:9b:75:29:49:bf:ca:64:09:2c:87:7a:ca:ae:
                    69:d1:52:67:33:51:5e:54:c0:4b:6c:1a:3c:d2:30:
                    6f:69:ad:67:72:39:d6:15:37:5a:f2:b7:0a:da:a8:
                    43:50:e0:e3:44:14:48:2e:e2:42:ac:46:f2:cf:c6:
                    76:0d:6a:57:9e:d6:83:0c:30:5e:0c:d3:43:57:98:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6C:D6:F8:74:8A:6A:44:21:D1:D6:BA:4B:AA:E1:FF:B0:20:A6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/52a40b16-8dab-3855-b031-d4cb0fe296bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:4e:5d:47:d4:37:ef:c7:67:41:44:c6:d5:fc:e8:85:f8:
         a8:15:dc:27:8b:a7:a8:28:15:26:27:5a:dd:8e:b6:1b:59:9a:
         d5:41:ad:de:75:a7:18:88:43:79:c3:b0:46:0a:fe:d2:fa:e6:
         e5:f0:81:47:ba:c3:ef:fb:e6:7e:08:74:57:62:8a:7b:ba:5a:
         75:ec:64:fd:ad:34:71:92:2c:89:a7:db:52:69:b5:84:14:75:
         42:e6:3d:9a:09:8a:4b:ce:e0:e3:bd:02:94:4d:61:59:85:0b:
         64:53:3e:0e:56:62:e6:07:b0:99:5a:e8:62:da:c2:0e:63:1c:
         0c:51:31:15:50:5a:94:1c:3b:64:9e:74:1f:f5:b3:9a:6e:d3:
         50:29:1e:0b:49:a7:4f:06:5f:5c:8a:ab:85:c5:dc:a0:9d:86:
         cc:09:c7:98:b9:47:9e:4a:27:eb:66:b4:f2:da:41:3d:ec:f1:
         41:11:c5:3a:d5:92:15:cd:0f:0b:aa:47:f2:25:90:79:90:9d:
         07:77:d0:5c:af:f6:cd:25:47:d1:c9:d2:5a:9f:e4:31:1c:71:
         5a:e1:07:cf:9e:9f:9d:d5:3e:52:46:4f:93:3e:1c:f7:ae:bc:
         5b:73:f9:74:76:5b:6e:65:c5:14:4b:50:96:89:6a:c1:3f:6d:
         16:e4:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----