Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a34e7cd1-3144-3fec-97c6-0c34756aa980.roa
File:                     a34e7cd1-3144-3fec-97c6-0c34756aa980.roa (raw, json)
Hash identifier:          Ox9sU7EgOB9dO1ZVvBS0Zt463xxnoFm1I0WuLOVP65c=
Subject key identifier:   25:CC:22:B1:D0:C0:DE:DB:5C:D3:66:2E:A0:A4:9A:50:A5:71:CA:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858470C4B01CE4B2FCB6E2694DD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a34e7cd1-3144-3fec-97c6-0c34756aa980.roa
Signing time:             Fri 30 Aug 2024 13:00:41 +0000
ROA not before:           Fri 30 Aug 2024 13:00:41 +0000
ROA not after:            Thu 28 Nov 2024 14:00:41 +0000
asID:                     34984
IP address blocks:        23.221.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:4b:01:ce:4b:2f:cb:6e:26:94:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 30 13:00:41 2024 GMT
            Not After : Nov 28 14:00:41 2024 GMT
        Subject: CN=7fcd632c-de88-4cbf-8b1d-5eb9b9e5519c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:37:33:d5:2d:d4:22:3f:4d:37:fc:4e:07:
                    d1:0b:22:a7:1e:f5:18:62:14:88:09:5d:42:ca:ed:
                    6f:9a:ce:6e:f3:a4:7b:0c:6e:80:3c:93:b2:35:da:
                    e7:ae:f2:e6:e5:a6:d3:18:43:91:fe:02:df:8f:bd:
                    e5:f8:37:46:27:97:c9:79:31:15:26:36:db:a9:9d:
                    a5:33:c4:68:ac:f8:78:db:be:cd:5e:23:32:89:5f:
                    c1:b3:14:a3:63:5a:91:df:72:d1:9f:cd:2a:48:51:
                    c9:bc:e7:2d:15:8f:e5:58:14:eb:03:30:87:e9:15:
                    62:8b:ad:68:bd:b2:0a:66:8d:ac:98:36:02:5d:63:
                    55:e8:f9:06:67:95:84:0e:3a:ba:00:8a:04:3e:b9:
                    2a:50:00:80:85:a6:9c:26:c4:dd:fb:3b:47:18:e3:
                    54:0f:69:3b:06:b1:9c:98:d7:f9:c2:6e:cf:b6:26:
                    c8:ad:6e:60:35:83:9a:75:10:8a:59:31:fa:ac:ff:
                    0e:0c:98:7a:cc:8b:c6:87:e3:28:82:74:8b:0b:13:
                    98:92:93:24:8f:89:c8:9d:6d:f7:ca:f7:fc:00:6e:
                    c2:c0:98:5b:e5:d3:fa:4d:c9:08:46:f8:15:88:82:
                    83:da:cf:dd:b4:08:db:af:9c:4e:22:fe:f8:d3:76:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CC:22:B1:D0:C0:DE:DB:5C:D3:66:2E:A0:A4:9A:50:A5:71:CA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a34e7cd1-3144-3fec-97c6-0c34756aa980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.221.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:f0:2c:29:2a:82:ad:70:2e:cb:ef:38:12:fb:7c:9b:47:
         57:46:f3:ba:c7:62:37:5a:3b:16:e5:0a:b0:a4:4c:5f:df:11:
         7d:ed:7e:5d:f0:9e:fb:61:44:9a:99:fe:41:75:ed:61:99:75:
         66:e4:73:67:ab:0d:1b:93:eb:f3:4f:ab:40:26:6d:c0:48:71:
         a3:2a:5c:f7:1c:8c:03:d9:91:c9:0a:86:c6:86:90:d9:51:8c:
         43:ea:e6:12:7b:25:c2:f6:79:e7:75:87:b8:a3:eb:a9:03:3d:
         ff:4c:96:49:05:6a:69:d5:7c:c7:31:27:fb:b6:11:d6:7c:fc:
         d8:30:ab:85:a2:f8:f9:03:53:e4:8f:cd:b9:4a:ff:2a:18:c6:
         76:9b:30:fe:cb:34:2d:1e:17:e0:e2:00:4a:d2:ab:60:12:fc:
         53:4e:ee:6e:b4:e5:b5:5b:46:bb:60:54:37:75:b4:f3:cd:1f:
         7d:23:41:4b:ad:ee:a6:1a:3c:2c:38:12:71:c2:c5:cb:a7:23:
         16:72:03:40:5b:9e:a6:ec:85:e0:f3:47:d3:fa:45:ff:9d:ee:
         96:04:c0:72:b1:17:f1:2b:13:21:ac:b2:5e:34:0a:80:b1:9a:
         c6:63:36:9a:7e:41:3d:3d:16:fd:94:7a:53:08:22:05:e4:f6:
         b9:a0:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----