Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/629e40ad-e01f-3c3a-8593-0aa7eae9b9e8.roa
File:                     629e40ad-e01f-3c3a-8593-0aa7eae9b9e8.roa (raw, json)
Hash identifier:          pB34Q/Ot4hSxp5tldK3hANO5YfwB5OfEZjEFf9mSW80=
Subject key identifier:   0D:D3:43:F5:F2:E8:92:EB:38:77:3A:45:19:E2:A4:6A:F8:1A:34:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F5EF809D017FA5CF43A95FEC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/629e40ad-e01f-3c3a-8593-0aa7eae9b9e8.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Sun 26 Mar 2023 04:00:00 +0000
asID:                     399084
IP address blocks:        65.49.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5e:f8:09:d0:17:fa:5c:f4:3a:95:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Mar 26 04:00:00 2023 GMT
        Subject: CN=7a3a832b-5710-4e74-99e7-884fdb31b632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:c8:1b:66:f1:46:25:18:29:99:de:94:11:
                    f5:dc:99:b5:d8:ec:95:4c:63:2c:9d:d9:a7:09:0d:
                    1a:23:20:85:1f:f7:cd:1b:fe:8e:f5:1a:0e:4e:d1:
                    7b:98:59:89:72:aa:1f:17:28:42:ae:0b:9f:58:44:
                    bf:4e:74:44:1e:06:33:5d:31:88:b1:5b:56:b8:84:
                    de:f2:7c:a6:be:ad:eb:f4:d3:63:36:e7:c5:fb:4a:
                    62:7c:5f:a1:50:dc:67:0f:09:fd:f1:30:08:47:f1:
                    4d:e9:c9:47:20:9b:0a:08:6e:b8:b4:e0:41:6e:7c:
                    f3:84:97:79:df:70:11:21:9f:3e:f9:ef:7e:8e:a6:
                    0f:a2:43:df:85:b8:ef:fe:fc:de:06:b9:b6:6b:73:
                    c2:2d:d1:88:48:3c:a4:8b:e4:89:77:c7:6e:52:9f:
                    9f:ed:ea:d8:b2:15:20:51:91:ea:c1:1d:24:7d:99:
                    f8:4a:5b:fc:ac:72:90:d3:35:59:c1:97:6b:df:e1:
                    a8:98:8e:69:8e:e5:9a:ac:db:bc:8d:e4:14:31:07:
                    af:47:52:29:56:98:ec:07:ca:f5:ab:75:b2:12:23:
                    fd:54:c0:65:af:49:0b:4c:4d:3a:eb:04:5d:28:a3:
                    89:61:22:85:9b:c4:b9:42:f7:01:16:63:5f:b2:56:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D3:43:F5:F2:E8:92:EB:38:77:3A:45:19:E2:A4:6A:F8:1A:34:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/629e40ad-e01f-3c3a-8593-0aa7eae9b9e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:d3:86:40:ac:70:95:b8:d9:75:56:23:88:ee:0d:f3:ac:
         f5:bd:a7:e0:7c:8c:16:dd:36:40:51:f6:bd:ad:5a:63:57:a3:
         33:74:bd:20:72:48:f4:d3:56:7c:fb:fb:f0:56:35:de:b4:d8:
         88:9b:96:07:c5:4b:a8:43:1e:f5:07:3b:75:ca:43:e8:59:73:
         3d:1c:61:1a:2d:3d:c8:a0:34:e2:19:83:97:b7:3e:62:49:f9:
         81:1e:54:f5:ca:39:a4:22:33:3c:29:4a:b3:5c:51:3a:19:67:
         e9:66:f1:62:b5:88:c0:15:ba:22:c0:90:f3:30:fc:2e:66:92:
         8c:78:4d:a2:25:5e:13:c5:ab:dd:b8:88:1b:b6:50:e4:9e:96:
         c2:8c:86:9b:d7:0a:9b:ff:eb:d6:fb:82:d7:77:78:aa:e6:ff:
         b2:00:8b:37:37:63:61:c5:cc:3c:2e:e1:92:31:df:fc:fd:4b:
         bc:1f:ad:d2:61:da:b8:34:40:8f:07:45:27:be:f8:bf:06:5b:
         8f:79:c6:74:1b:c9:f0:9a:c0:76:4a:a0:3f:1a:6a:64:94:58:
         50:1d:f3:83:e5:15:b7:24:43:59:e6:13:71:22:10:50:4c:f8:
         49:40:06:f3:e4:7d:4b:4c:33:bc:33:e9:23:9b:64:60:fe:6b:
         2d:9d:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:42 2023 by rpki-client on console-fra.rpki-client.org