Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd7bdea9-33ea-36a2-be7f-8cc8e8fa0ea0.roa
File:                     bd7bdea9-33ea-36a2-be7f-8cc8e8fa0ea0.roa (raw, json)
Hash identifier:          l5sPcOkYkuCgMVW7B4RDoX7IpUDcY5quAEzPvMaeRPg=
Subject key identifier:   CC:B8:26:16:7D:23:FE:13:AA:92:9C:EC:89:7E:BA:15:F7:67:66:66
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285842B167E677536E7AA0057C3790
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd7bdea9-33ea-36a2-be7f-8cc8e8fa0ea0.roa
Signing time:             Fri 28 Jul 2023 04:32:41 +0000
ROA not before:           Fri 28 Jul 2023 04:32:41 +0000
ROA not after:            Thu 26 Oct 2023 04:32:41 +0000
asID:                     31898
IP address blocks:        67.217.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b1:67:e6:77:53:6e:7a:a0:05:7c:37:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 28 04:32:41 2023 GMT
            Not After : Oct 26 04:32:41 2023 GMT
        Subject: CN=9e13cd1e-ac64-4ecd-8c78-fd7e45e0805e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:e0:f7:0c:c7:c3:07:e8:78:ca:b9:b9:43:
                    28:0c:e4:d1:13:d3:40:9d:f3:a2:6f:90:e2:80:ea:
                    07:6a:9c:55:7a:0e:fd:46:cf:c3:4a:f1:98:5e:da:
                    36:fb:81:52:ed:c5:a2:a7:70:b8:c4:ae:91:61:c4:
                    d3:bb:b6:f6:d6:36:f7:0d:d6:8b:7d:1b:6f:ff:2c:
                    77:ae:90:ec:b5:c7:b3:43:f0:b2:2f:05:1e:08:e9:
                    58:13:60:76:a1:9e:61:f0:a0:18:32:8d:de:1c:27:
                    5e:34:fc:9f:c1:4c:42:60:51:a8:1a:c6:17:93:85:
                    e9:5f:48:c0:49:82:e0:27:b4:5c:4c:e6:ad:2b:06:
                    96:ff:c1:5a:3c:65:6a:c1:0f:b5:5f:b3:dd:0f:57:
                    6a:a2:4c:ef:ba:c4:74:66:2c:9e:3b:97:93:07:9d:
                    92:21:f6:90:b2:40:e8:f0:47:f9:17:30:a9:a8:43:
                    06:17:21:cd:75:2b:c0:38:96:df:e7:98:62:bd:bc:
                    e8:4b:8e:bf:14:c8:25:af:e6:1e:51:bd:fa:6d:70:
                    08:60:3f:f6:0b:37:79:e6:b4:2a:75:26:a5:d9:f3:
                    a1:33:8d:77:23:50:c6:38:bb:e1:cc:fd:01:6c:09:
                    75:5c:91:c6:5f:f3:e2:7a:16:e7:57:29:f6:35:28:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B8:26:16:7D:23:FE:13:AA:92:9C:EC:89:7E:BA:15:F7:67:66:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd7bdea9-33ea-36a2-be7f-8cc8e8fa0ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:f7:65:b3:f6:60:71:c1:1f:01:f5:7f:f5:45:5a:6f:fd:
         5a:d1:4b:ad:d9:03:cb:47:0e:d8:3b:e8:db:28:bb:65:69:67:
         d7:50:cf:c2:8a:36:77:16:73:96:b6:49:7a:cb:da:86:1e:0e:
         71:cf:8a:9d:1c:55:0f:b8:e3:32:cf:3f:5d:a9:74:47:60:ce:
         ac:3f:e3:55:58:46:14:e7:32:d5:a9:e6:88:b5:4a:9d:dc:9d:
         18:91:93:f4:8d:81:a7:ec:03:a1:bb:48:61:90:a1:cf:b1:a9:
         d1:8c:90:0d:fc:e7:42:fd:90:72:6b:69:42:7b:60:f3:8b:f5:
         29:40:07:0e:d5:41:01:3a:ba:28:fd:b4:6a:86:e3:63:98:d6:
         42:a9:bf:82:a0:65:5f:27:21:40:5c:18:c2:77:f3:67:e4:5c:
         ca:9f:49:7f:8f:38:c6:01:88:15:da:07:e1:d9:43:42:b8:cd:
         34:e9:c0:a0:12:c9:67:ea:6d:08:e0:c9:b3:95:ce:c8:24:d8:
         d0:28:52:b3:e2:68:f3:ae:5b:ba:93:e0:73:83:fa:e2:a6:ad:
         d3:19:bf:53:ee:0d:47:6a:9a:d9:95:b0:05:1d:a5:2f:32:89:
         68:29:b9:f1:04:17:eb:5e:0d:8a:f8:32:36:fa:42:92:95:8c:
         05:76:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----