Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/5b44d943-2fca-31e2-896f-c896ea2b23c1.roa
File:                     5b44d943-2fca-31e2-896f-c896ea2b23c1.roa (raw, json)
Hash identifier:          bnj6DSNBSBG23EDCZRuXqo8XKo9RL9pC3ZTT+nVkhvY=
Subject key identifier:   05:D7:17:1A:56:B6:AE:02:68:CB:86:DE:E9:95:9E:5C:98:1B:CA:AB
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F43285842102DCB473A95CF63034A3900
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/5b44d943-2fca-31e2-896f-c896ea2b23c1.roa
Signing time:             Wed 31 May 2023 10:30:28 +0000
ROA not before:           Wed 31 May 2023 10:30:28 +0000
ROA not after:            Tue 29 Aug 2023 10:30:28 +0000
asID:                     49999
IP address blocks:        23.151.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:10:2d:cb:47:3a:95:cf:63:03:4a:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: May 31 10:30:28 2023 GMT
            Not After : Aug 29 10:30:28 2023 GMT
        Subject: CN=5f747e19-a471-4dd3-a62e-3e4e6e5b23ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:0d:d4:77:b3:29:c5:34:7d:f6:0c:f5:34:
                    61:66:f9:0b:26:45:84:84:14:55:dd:01:99:f4:93:
                    aa:aa:a6:60:fb:de:e1:7a:f0:d3:93:d4:d2:5b:97:
                    e1:eb:81:36:9f:54:51:30:47:61:4b:52:2d:8c:13:
                    38:e1:32:6a:17:46:93:d6:a9:bd:60:63:be:f5:ee:
                    a5:74:59:7e:3d:0d:74:f8:11:00:75:7c:58:65:70:
                    98:ea:5f:25:46:54:c9:29:cd:e2:5d:81:49:ff:fb:
                    87:41:93:8c:86:dc:38:a0:79:ce:55:e8:25:85:c6:
                    64:c1:c3:aa:86:ae:c9:83:b5:96:ac:7d:6e:40:0c:
                    92:94:5d:b0:99:e7:a0:3e:14:3c:45:6f:07:bd:bc:
                    e2:ba:a8:de:9e:4e:fa:e9:f3:c4:80:a4:18:c1:a8:
                    4e:4e:41:11:d0:1d:b2:1e:3f:77:c9:f9:b2:8d:2c:
                    f2:c5:15:ee:db:b0:3b:99:8e:fc:bc:7f:7b:c4:08:
                    ce:3b:8b:97:a6:5f:ef:dc:4f:1b:38:0d:83:a8:1d:
                    ee:2b:24:ae:b5:f2:f8:ff:ae:79:26:40:ef:b8:03:
                    81:8c:1a:56:74:76:df:29:86:2c:49:f6:43:c1:97:
                    ec:ec:5f:c6:86:b2:46:2d:88:31:de:da:1d:6e:b7:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D7:17:1A:56:B6:AE:02:68:CB:86:DE:E9:95:9E:5C:98:1B:CA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/5b44d943-2fca-31e2-896f-c896ea2b23c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:53:a0:a3:a0:cc:41:13:42:ac:dc:83:d2:9b:15:32:60:
         ef:c9:9d:a8:0b:23:02:60:14:f1:23:39:64:02:64:02:60:0b:
         7f:23:de:55:bb:01:a0:bb:f1:b2:79:3a:56:6b:65:76:ad:f9:
         9e:3a:8c:d6:fc:39:f2:e6:5a:2e:db:61:36:c4:5c:3e:fa:da:
         c1:44:3b:f1:9e:b6:0f:dd:17:f7:ad:8d:bb:86:8e:05:3b:24:
         8b:f4:1d:70:23:22:23:cc:8e:16:da:6e:46:76:f4:79:95:35:
         9f:b9:01:e2:16:c9:02:5c:41:fd:66:9e:b6:3e:ab:2f:43:0a:
         72:6e:01:44:a2:03:c2:f4:aa:77:e3:96:84:b9:fe:f3:41:e6:
         ea:18:e9:bb:d4:10:37:98:2d:3e:09:8a:02:87:f7:0b:6a:3f:
         e4:ae:82:76:9f:53:a0:29:1d:c1:f2:f1:49:11:08:0f:3b:7c:
         cd:8c:b5:b9:9b:a2:ba:53:15:23:b2:c3:d7:fe:09:1f:89:ca:
         5f:f2:16:42:c1:28:76:81:c3:e7:d0:b0:be:f5:bd:c9:c3:76:
         80:bc:2f:28:a5:f9:7b:36:6d:95:f9:10:6d:60:c9:92:85:f5:
         d0:9f:1a:3a:4a:e4:dd:50:5a:5c:83:70:2f:70:1d:9d:12:54:
         20:78:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----