Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/ef8619b7-0dec-3d4a-931f-9b79dec4bd96.roa
File:                     ef8619b7-0dec-3d4a-931f-9b79dec4bd96.roa (raw, json)
Hash identifier:          ap0OqNPRMUYzL1F9oegN54Dn7vKXiFsxpDIOMbjEFos=
Subject key identifier:   18:EE:84:EC:2A:39:76:CF:7A:AF:42:6A:95:F6:EF:F0:CF:30:18:04
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F4328584484E315923EC2F3B90DC1A000
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/ef8619b7-0dec-3d4a-931f-9b79dec4bd96.roa
Signing time:             Thu 11 Jan 2024 15:23:23 +0000
ROA not before:           Thu 11 Jan 2024 15:23:23 +0000
ROA not after:            Wed 10 Apr 2024 14:23:23 +0000
asID:                     36051
IP address blocks:        64.72.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:84:e3:15:92:3e:c2:f3:b9:0d:c1:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Jan 11 15:23:23 2024 GMT
            Not After : Apr 10 14:23:23 2024 GMT
        Subject: CN=0dba1a36-20f7-4b8f-9ef6-9f20c264af53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:08:74:fb:c2:5b:ef:76:f3:f1:7b:91:ff:
                    11:eb:ac:e1:b0:94:83:d2:6e:ef:50:01:25:af:59:
                    d4:85:9b:5e:70:0b:0a:a5:16:74:eb:bd:b4:62:3f:
                    08:4f:fa:98:49:a4:49:bb:12:f9:b9:10:98:c1:fc:
                    02:3b:82:34:6d:8e:1d:43:ca:75:ce:4c:1c:7f:1f:
                    b7:11:92:e5:a3:3d:4c:79:9c:93:10:a1:8c:8f:06:
                    01:0a:41:45:7a:a6:84:14:87:b3:ec:4e:b2:13:8d:
                    7f:0d:28:57:49:58:35:ae:ab:64:22:68:43:87:a5:
                    9c:51:9d:5a:93:b2:7c:50:1c:42:fb:e6:bb:38:e4:
                    c9:53:cc:98:87:1c:56:2e:5b:57:04:a6:fc:61:c0:
                    96:fa:d9:18:56:09:b0:bb:8f:0c:29:2e:04:a2:09:
                    71:1a:9c:b9:2d:56:66:81:c0:49:bf:da:41:33:e4:
                    68:d6:60:99:3b:60:6e:e9:3b:10:c4:74:68:53:af:
                    9a:74:1f:64:14:c7:1c:7e:d8:2a:01:9c:29:4a:4a:
                    ef:f5:7c:89:0e:99:7f:f8:3a:00:11:10:43:b9:31:
                    90:5e:89:83:8b:f6:7d:2d:45:32:bf:7c:60:cb:7d:
                    63:63:dc:ec:61:58:7e:54:08:4d:5c:61:e9:f5:01:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EE:84:EC:2A:39:76:CF:7A:AF:42:6A:95:F6:EF:F0:CF:30:18:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/ef8619b7-0dec-3d4a-931f-9b79dec4bd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:28:9b:dc:9f:ef:27:f3:7e:b1:27:7b:91:6b:c9:30:8e:
         8d:62:c2:69:b0:d5:aa:e6:77:58:74:5a:65:02:79:56:e7:ea:
         91:8b:c9:65:f0:de:8b:ea:3d:a2:29:67:84:32:81:1a:ed:30:
         81:d4:6d:81:ac:45:02:57:ca:db:bb:b3:6a:40:52:eb:f7:77:
         05:e9:3a:3e:9b:15:b6:90:8e:46:b2:21:bc:9e:26:d6:f6:5e:
         94:a0:bc:43:ad:92:da:7f:9b:08:60:dd:62:8c:f5:63:0a:ea:
         7f:c4:ea:a3:d8:9b:53:46:62:7a:ec:ff:3c:10:d4:d4:96:c2:
         8b:ce:77:ad:a2:ca:a1:4d:b3:73:c2:bd:84:51:02:8d:42:97:
         ec:92:53:22:8b:62:e6:ad:98:26:5e:47:da:6d:d2:16:58:a2:
         a8:dd:96:38:36:88:08:13:8e:7f:a6:63:39:9c:cb:f3:56:03:
         73:2b:a8:85:87:69:2f:fa:d7:28:41:4f:16:0b:fe:9c:cf:6b:
         6d:bc:c3:56:29:93:13:dd:89:81:36:d4:ee:b0:61:7c:58:c1:
         a5:74:b1:27:9c:da:09:20:b7:68:3d:d0:fb:16:d8:91:fc:39:
         45:f9:50:e0:eb:ca:44:0e:72:27:67:4a:02:23:02:8c:99:e2:
         8c:fd:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----