Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/d408197a-d4ae-34b8-bdeb-394538a34cc6.roa
File:                     d408197a-d4ae-34b8-bdeb-394538a34cc6.roa (raw, json)
Hash identifier:          em0HOuCPWX0TIynMn/JvAs6Nf9hnZH5NZ18CzYJLukA=
Subject key identifier:   F0:79:C1:68:77:71:4C:1F:BD:81:F7:7C:93:70:F5:49:BF:D0:C2:D3
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584504D9AEEA0858CC7772711A80
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/d408197a-d4ae-34b8-bdeb-394538a34cc6.roa
Signing time:             Mon 26 Feb 2024 11:27:55 +0000
ROA not before:           Mon 26 Feb 2024 11:27:55 +0000
ROA not after:            Sun 26 May 2024 10:27:55 +0000
asID:                     834
IP address blocks:        64.130.0.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:04:d9:ae:ea:08:58:cc:77:72:71:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Feb 26 11:27:55 2024 GMT
            Not After : May 26 10:27:55 2024 GMT
        Subject: CN=837b10d9-69cf-4109-b950-907c798bb39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:b3:2a:26:32:2d:03:2e:90:67:7b:6d:60:
                    fc:3e:e8:48:79:e0:1c:68:c0:46:91:e0:33:60:13:
                    7b:fe:8f:81:14:fd:38:9f:f7:f8:5b:36:7f:50:8f:
                    5d:9f:1a:5b:c7:4a:79:40:e8:df:53:a5:d5:35:d5:
                    83:c8:b0:45:e4:e4:6d:96:cd:29:c9:c6:87:2e:3f:
                    68:2e:85:43:ca:17:1d:1e:17:79:d9:05:f2:70:65:
                    79:b0:63:0e:2a:ab:54:cb:e9:cc:44:e7:21:45:f8:
                    a7:5d:19:ff:de:86:5e:22:9a:83:bb:7b:cd:14:82:
                    06:6c:54:1d:89:60:20:91:37:5c:fb:60:23:da:f5:
                    81:aa:48:ec:4d:77:f0:17:b6:b2:18:bc:9a:92:4d:
                    1c:7c:7e:52:8b:8f:64:5b:5c:05:15:03:2f:93:95:
                    d3:60:05:4b:11:a6:f4:0c:13:76:2f:46:1e:85:7d:
                    1c:26:c6:5e:4e:1b:36:51:45:da:d4:fb:f0:1a:7a:
                    91:7d:74:99:92:23:bd:b8:e8:65:67:32:8b:63:b9:
                    2e:29:16:bd:e0:c5:bf:ab:75:bc:38:58:9c:d0:bc:
                    53:65:f2:b2:76:4f:d2:3b:a9:13:ff:61:17:6a:b5:
                    3e:fe:16:10:53:85:69:1f:b8:d7:5f:ca:6c:cd:64:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:79:C1:68:77:71:4C:1F:BD:81:F7:7C:93:70:F5:49:BF:D0:C2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/d408197a-d4ae-34b8-bdeb-394538a34cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:62:d2:c6:ea:d3:1b:06:c3:83:35:a2:a7:d8:66:85:09:
         e2:76:32:e6:23:9b:24:08:f6:ca:61:f9:51:5f:0c:2e:dc:66:
         5e:df:85:5c:8a:02:d1:a2:21:42:a0:ce:17:ff:e8:66:ce:e1:
         5e:cf:de:74:78:52:d1:df:29:c3:f9:6c:b4:7e:c7:db:84:eb:
         f2:a0:89:ec:43:6c:e5:a5:a8:8c:a8:9e:e1:f4:1d:f6:c3:57:
         6b:c6:6d:dc:c9:59:d7:b0:51:9c:68:9d:ff:83:37:c5:9f:82:
         be:5b:09:cf:d4:d0:7c:e0:c6:42:02:d4:be:63:d6:0c:d0:11:
         9b:77:62:58:0a:cc:50:6b:06:2d:c9:31:1f:d9:6a:e6:72:53:
         0f:6f:d7:47:9d:67:a7:d0:b1:f3:f4:39:e4:e8:56:60:d8:15:
         87:96:a9:04:9c:20:c4:df:32:29:c7:48:47:8c:3c:9a:21:93:
         61:91:7f:fb:0b:33:00:c2:84:a0:87:8f:45:4c:0d:0c:c8:de:
         bb:53:bb:09:bd:f9:65:ae:1d:14:1c:a8:b0:1f:bb:98:20:47:
         3a:df:d6:7c:6a:10:fd:98:15:49:4c:cb:1d:bf:31:f5:2b:ec:
         bc:3d:0f:3d:bc:10:62:f2:c9:23:76:d3:05:5b:78:1c:b2:e4:
         7d:48:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----