Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e627ff08-47b3-3a84-af52-79abb683ef4f.roa
File:                     e627ff08-47b3-3a84-af52-79abb683ef4f.roa (raw, json)
Hash identifier:          vq8QE7sxXTKBh4/RY90GW4Qz3kALkYuGaX9r9X0uwRs=
Subject key identifier:   D2:E1:A8:08:6C:65:E8:4F:33:F8:91:F4:FF:A2:72:AC:05:E7:61:8B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285841E42AD34491B7625DDACB54C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e627ff08-47b3-3a84-af52-79abb683ef4f.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Sat 27 May 2023 20:19:34 +0000
asID:                     14618
IP address blocks:        130.137.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:d3:44:91:b7:62:5d:da:cb:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : May 27 20:19:34 2023 GMT
        Subject: CN=ae2308a9-0177-440e-92ef-e0f9919416e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:b3:c3:c7:21:32:e6:24:61:2e:f4:0a:24:
                    71:dc:1d:9b:ee:24:83:fd:43:a7:b2:c0:a0:41:63:
                    ef:82:99:a2:69:87:34:89:f3:18:61:2a:69:47:0b:
                    45:06:05:20:f8:be:c9:f6:9c:f8:bd:1b:72:0b:22:
                    b8:2b:ab:7d:bc:35:65:7f:b0:9e:6e:89:30:54:59:
                    06:9e:9b:2d:4b:b8:04:24:49:6b:5a:85:57:0b:ec:
                    fd:56:36:64:0e:97:65:36:8b:6f:74:30:8c:9a:66:
                    10:87:65:f5:7b:92:3f:f6:7b:ec:0d:77:9f:f2:4b:
                    d3:66:39:ea:a4:ca:4f:d4:f1:e3:db:25:42:77:15:
                    28:3b:90:da:5f:98:35:6a:ac:ae:d2:03:fa:ec:36:
                    b6:86:4e:62:52:2d:6f:64:4a:fb:ec:a0:10:95:b3:
                    80:72:c2:c7:88:36:42:20:cc:a8:14:d4:0b:94:8e:
                    5e:17:5a:95:cd:86:f0:75:cf:5c:15:cb:49:a7:17:
                    47:23:1d:1d:f6:08:bd:ff:a4:1a:0d:dc:83:62:01:
                    0c:3c:29:1f:83:ed:8e:0b:4b:27:98:be:b2:1d:27:
                    76:b8:fc:13:b3:53:a9:b1:ab:28:72:38:58:ee:54:
                    23:da:a8:52:99:b4:95:c1:50:28:26:d8:b8:c8:b6:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:A8:08:6C:65:E8:4F:33:F8:91:F4:FF:A2:72:AC:05:E7:61:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e627ff08-47b3-3a84-af52-79abb683ef4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:16:95:34:6c:de:b0:18:0d:2a:78:be:07:f3:65:84:59:
         89:84:b5:61:3e:e0:6f:57:40:0e:76:8b:49:db:f7:38:3b:5c:
         25:77:c1:c0:05:ef:c9:70:aa:2d:b9:3b:bc:e0:d6:43:f4:a7:
         17:64:8b:35:11:fc:bb:d7:3a:a0:9c:0a:be:42:43:b1:e3:9b:
         ce:f6:3d:db:32:6b:4b:f4:d7:22:f8:95:c6:61:f2:d3:1e:e5:
         65:12:68:da:d0:bb:4b:7f:5a:3e:67:ce:13:71:ad:8f:49:55:
         b0:0e:91:03:14:a3:2a:a9:a3:d5:b4:fe:44:4b:b8:f8:86:06:
         a7:1d:e0:4b:f0:24:c3:f6:2e:cc:b1:31:3a:ac:7b:4b:b9:d4:
         2a:1e:23:85:49:be:b7:fa:a4:1e:5f:eb:ab:07:a3:6b:d4:54:
         15:16:15:b3:28:e9:44:b2:e4:68:c6:df:6c:f3:11:ef:44:49:
         e5:97:f2:b8:16:0a:a1:e5:d6:b8:3d:20:28:94:a1:14:da:08:
         76:66:2c:5c:d2:b5:f0:40:8a:6a:4a:62:53:54:00:0a:01:1a:
         9f:74:cb:29:d6:fa:c8:3f:9e:30:37:1c:6d:55:db:35:7c:f0:
         53:34:86:80:d8:60:65:52:84:97:71:66:8a:d5:aa:f5:ee:ce:
         3d:6d:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----