Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15871bce-01a8-3727-ab8c-f76faa57b4fd.roa
File:                     15871bce-01a8-3727-ab8c-f76faa57b4fd.roa (raw, json)
Hash identifier:          wvx4h6TrnwjT4bjYxZHc8l039HyzlUu2DCKJb9lxib0=
Subject key identifier:   1A:86:4D:C8:E0:FD:67:66:A0:86:4E:87:15:70:5E:9F:CD:6E:E4:29
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A51350B10FB076B6EAF9FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15871bce-01a8-3727-ab8c-f76faa57b4fd.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     394996
IP address blocks:        74.82.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:35:0b:10:fb:07:6b:6e:af:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=9b9d826f-f0a3-4b27-a812-47f05a7cee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:78:69:52:5a:e5:1b:32:77:8b:3e:5f:d5:
                    46:bd:be:a4:31:60:e9:75:3d:24:76:ad:42:65:88:
                    cd:56:16:7d:e0:9a:e7:1b:b8:89:e3:12:71:02:51:
                    de:2b:18:ae:e4:53:08:72:50:6f:3d:d8:4b:cf:68:
                    c7:d6:9f:bd:15:14:17:a2:53:ee:5a:8f:aa:0f:51:
                    8a:f2:64:75:ab:c3:c3:38:84:a4:34:c2:f1:1d:e6:
                    e8:a3:e0:0b:2a:fc:7d:fa:1d:b1:e2:b2:ef:39:da:
                    c0:75:51:84:5c:03:20:f2:3d:5a:1e:38:e4:91:fa:
                    34:92:06:c6:5f:0e:9f:55:2c:2a:a2:07:bd:98:27:
                    ee:b3:88:fc:63:f3:62:5c:8b:9f:a7:c0:00:5c:e0:
                    bc:52:27:31:fe:d4:ae:73:fe:5a:9e:66:b7:d2:75:
                    f6:cb:cd:99:e5:f2:37:79:ad:10:53:d0:3a:5b:80:
                    94:32:55:bc:ee:a4:26:fb:fe:22:ad:db:e8:58:51:
                    57:00:4b:12:18:65:45:13:34:25:6b:f0:b5:b4:6d:
                    96:d8:0b:59:e9:20:f1:09:ac:54:60:14:59:7f:db:
                    d0:5c:00:19:42:7a:8c:ad:99:7b:2e:a7:99:61:81:
                    54:a7:cd:8a:92:24:aa:71:24:97:ad:00:0a:58:3b:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:4D:C8:E0:FD:67:66:A0:86:4E:87:15:70:5E:9F:CD:6E:E4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15871bce-01a8-3727-ab8c-f76faa57b4fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:27:c8:d1:28:60:9c:f0:08:5e:23:fa:41:95:1c:c1:20:e6:
         b3:5d:28:d3:39:89:68:3c:2b:ae:b3:d8:e1:27:90:4c:3e:83:
         1d:c6:b9:d6:c9:9a:af:39:f8:a9:c2:04:1c:2d:a0:21:b6:32:
         16:61:e1:b6:3c:60:ef:ed:10:83:93:fa:0a:cf:19:8a:ec:50:
         67:b2:c3:c9:bf:3a:fc:14:de:92:12:c4:e2:59:09:07:84:54:
         60:c4:0c:a9:7d:df:df:61:cf:2c:19:b5:69:3f:f3:f6:0d:12:
         6e:6d:6f:6c:fb:3f:f3:bf:59:67:b1:fe:76:24:f1:b2:36:2b:
         ac:93:fe:f6:c3:8a:e6:1d:ee:d7:05:46:b3:18:48:df:16:e5:
         55:81:9b:b5:f9:2d:38:93:d8:4a:1a:c7:fd:cb:14:91:eb:16:
         a1:09:e0:46:64:2c:39:d5:ec:1f:49:d1:58:58:3f:13:cf:ff:
         26:65:4b:0b:96:e4:e0:85:f6:4e:50:f9:1b:bf:17:00:d6:bc:
         32:c4:62:be:ea:d9:58:ff:b9:06:28:07:88:96:55:7a:d3:2c:
         bd:95:33:b5:4c:07:f9:81:01:dc:37:64:60:18:90:e2:b6:96:
         6c:88:1f:e6:5d:11:c2:74:2b:81:da:f9:e8:6a:c8:88:a6:3d:
         d3:55:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----