Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8e1f8ae2-6bd6-3287-9db4-d91d20c4b838.roa
File:                     8e1f8ae2-6bd6-3287-9db4-d91d20c4b838.roa (raw, json)
Hash identifier:          yAP7Eif15iXRbM6ClmQlkkqT/blH17vXsDC3yuaS0jE=
Subject key identifier:   32:22:95:2F:FF:07:6E:EF:B9:F6:F8:D9:D5:26:44:DC:14:13:14:84
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285842616E0D619131267FECFEEBA0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8e1f8ae2-6bd6-3287-9db4-d91d20c4b838.roa
Signing time:             Thu 29 Jun 2023 13:00:19 +0000
ROA not before:           Thu 29 Jun 2023 13:00:19 +0000
ROA not after:            Wed 27 Sep 2023 13:00:19 +0000
asID:                     52041
IP address blocks:        144.172.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:61:6e:0d:61:91:31:26:7f:ec:fe:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 29 13:00:19 2023 GMT
            Not After : Sep 27 13:00:19 2023 GMT
        Subject: CN=05345dc1-1211-44dd-a747-a1569e925b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:66:09:08:d7:7e:aa:dc:9c:67:11:12:b9:
                    f1:19:42:58:26:4a:44:e1:0e:3c:31:78:49:de:74:
                    0b:b7:ab:0e:7d:82:2d:4a:2c:b7:f9:ff:e2:87:e1:
                    91:b0:f7:56:44:60:7e:4d:c9:1b:75:de:a0:8a:24:
                    8b:c9:07:f5:b5:d4:0a:86:68:ef:bd:79:28:88:6a:
                    c9:1f:49:8b:f2:c5:29:b0:e7:e0:2e:58:6c:ae:b7:
                    df:a2:54:e7:58:69:e8:55:d9:68:df:d5:3a:ac:e3:
                    e9:d3:64:25:86:13:bd:0d:29:0d:6c:da:5d:3e:d9:
                    33:66:c8:6e:b3:e4:a9:fa:de:05:b6:71:d5:bc:50:
                    f2:ac:a4:e5:95:ba:b9:37:dd:d1:4b:b4:2c:de:c9:
                    89:2b:14:9e:02:1c:dc:2a:6d:76:ce:ed:cd:be:6b:
                    a6:a3:2a:18:8d:2f:f4:f5:69:f2:8c:0d:9c:d4:15:
                    d0:37:54:d7:7d:5d:ed:85:25:21:bb:bd:a0:54:4f:
                    f1:9d:8b:d8:45:7d:d5:c2:38:99:73:d7:bd:ad:40:
                    9e:e7:ba:e8:81:97:57:fa:89:c3:d9:bb:49:f1:8c:
                    28:18:ad:bb:b9:61:f6:ee:b8:cc:64:32:8b:ff:36:
                    7f:e2:d8:e1:f1:a2:9b:80:4e:10:74:51:9f:c3:15:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:95:2F:FF:07:6E:EF:B9:F6:F8:D9:D5:26:44:DC:14:13:14:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8e1f8ae2-6bd6-3287-9db4-d91d20c4b838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:36:9e:36:7d:2a:09:42:a5:76:8b:1a:80:eb:97:7d:46:
         aa:1a:7b:c4:d1:e7:a9:9f:4b:a7:7d:d8:33:2c:47:59:9f:08:
         ac:88:6a:fa:78:7c:a7:8b:4e:47:37:fd:e7:f1:70:47:66:f5:
         a8:34:ab:e7:dd:a1:68:a7:d7:a9:96:d3:4a:32:70:0f:ba:66:
         8d:95:aa:db:73:1b:0a:eb:da:2e:8f:e2:cb:9a:03:87:8a:43:
         fa:3b:70:cb:ed:41:34:32:ec:23:6d:fe:5f:a4:25:ec:99:e5:
         cb:24:9e:a5:7c:41:61:f7:86:54:fa:f5:dd:a4:a8:9f:77:00:
         69:ef:b3:36:56:e2:c2:60:5d:26:9d:37:61:fd:d8:bb:46:86:
         d6:3d:e2:9b:5c:ce:d3:16:e5:3d:5d:5f:7b:bd:80:86:c6:b3:
         13:8c:bd:69:b2:db:8a:ac:f8:18:52:49:8d:99:07:90:23:aa:
         a3:8a:68:a1:9e:3f:38:c8:0e:67:2e:97:31:0a:12:6a:1b:44:
         db:93:7f:4b:12:64:86:42:15:84:90:be:8a:b7:92:de:37:5e:
         cb:7d:35:1c:d5:a0:64:99:da:ab:5d:0c:80:4f:c0:4a:d1:ec:
         cf:21:da:42:78:10:cb:a4:5d:63:9d:c9:92:c7:8b:b3:8a:a2:
         41:ff:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----