Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/81266b4c-3ecc-3a16-9054-ba6b2c56a9f2.roa
File:                     81266b4c-3ecc-3a16-9054-ba6b2c56a9f2.roa (raw, json)
Hash identifier:          qxXt2jQrr/7RNTX9uDzj5RKy520FREMHJF0wab9jj20=
Subject key identifier:   64:97:E7:33:DC:FA:8E:75:B9:FB:B5:AB:83:24:EA:CF:4D:E9:23:61
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285842502014B183E1F83C8E673D80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/81266b4c-3ecc-3a16-9054-ba6b2c56a9f2.roa
Signing time:             Fri 23 Jun 2023 08:14:34 +0000
ROA not before:           Fri 23 Jun 2023 08:14:34 +0000
ROA not after:            Thu 21 Sep 2023 08:14:34 +0000
asID:                     14618
IP address blocks:        103.207.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:20:14:b1:83:e1:f8:3c:8e:67:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jun 23 08:14:34 2023 GMT
            Not After : Sep 21 08:14:34 2023 GMT
        Subject: CN=2d1981e7-24c5-40fa-b5a0-a3678cc53e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8b:97:35:a6:8a:b0:a1:07:ab:c3:10:17:ab:
                    f1:fc:43:47:c0:b6:27:84:1a:22:37:cb:03:b3:fe:
                    0a:d6:52:d1:86:ac:2f:f4:4d:75:66:bf:24:b6:1c:
                    3e:75:36:73:0b:a6:b0:45:06:18:1d:6f:d0:4e:91:
                    25:13:0c:18:5a:3f:58:90:9d:e3:8c:e3:43:0c:06:
                    b7:56:b0:ab:44:be:6b:a7:7f:a2:00:3b:30:06:ca:
                    71:2f:e3:1f:ee:cb:17:4f:df:36:2e:05:6c:9a:7d:
                    5b:f0:55:ee:6b:2b:06:5f:f4:5e:eb:68:c0:a1:40:
                    64:23:32:e3:61:69:db:57:23:47:d5:c8:38:b4:90:
                    4f:c9:38:d2:3a:ca:91:dc:e7:53:ad:01:0b:f5:6a:
                    f7:a6:1c:f4:d8:63:ab:da:13:9e:f6:48:f3:33:70:
                    d5:b8:0d:e4:04:9b:53:36:68:d5:e9:ff:d6:5a:16:
                    22:0d:17:c3:6b:91:e6:45:ba:97:24:84:14:46:fe:
                    27:3f:de:12:77:e4:2e:0b:d4:e9:b3:d6:b8:0a:d7:
                    b8:c8:3e:a8:82:d9:d3:23:eb:3a:43:75:52:17:72:
                    a9:94:97:26:cb:5f:c9:bb:13:2f:81:2e:49:89:3e:
                    79:c5:45:05:fc:24:31:1c:ff:bc:3a:31:36:21:99:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:E7:33:DC:FA:8E:75:B9:FB:B5:AB:83:24:EA:CF:4D:E9:23:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/81266b4c-3ecc-3a16-9054-ba6b2c56a9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:59:50:5c:cb:3c:6b:91:73:ab:a3:eb:08:de:d9:05:d4:e6:
         31:77:5d:37:ea:c4:47:b9:63:84:bf:13:f0:ff:40:cb:1a:6d:
         f1:cd:93:f9:4b:9d:cb:ab:5d:4e:e1:c2:59:0c:31:fa:d8:a9:
         68:51:25:11:6a:7b:f7:da:68:70:3e:8b:70:94:37:de:65:ac:
         24:4f:dc:25:54:b0:52:cd:0b:7c:75:27:cb:61:ee:3b:83:31:
         13:9b:7b:5c:2f:67:bc:9d:f0:61:10:27:61:dd:c2:b5:8b:3d:
         d2:6a:af:1c:79:de:f6:25:f4:18:7d:d9:43:a6:ca:6f:d3:72:
         d7:0c:6d:d1:83:b9:42:1a:b9:dd:20:b7:1a:55:e5:eb:a1:08:
         a6:87:83:7d:8e:ac:83:62:8c:75:e8:7a:3c:b9:64:3b:37:0d:
         26:45:5d:db:eb:a9:0c:a2:57:8e:91:21:c1:af:12:29:b1:cf:
         e3:6a:cc:65:89:69:aa:d9:8c:cf:9a:76:01:1b:6e:c0:94:9e:
         8a:2b:fe:af:20:10:40:4c:3c:f1:7f:5c:2b:f2:fc:10:6b:c9:
         67:5c:69:0f:8a:84:db:0c:11:84:0f:85:bd:95:f6:11:f0:4f:
         78:be:ef:2d:2f:02:13:ee:3e:04:b4:bc:82:56:1e:70:9b:cb:
         45:97:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----