Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/22751be5-3353-318c-bf28-a691b95b9fb7.roa
File:                     22751be5-3353-318c-bf28-a691b95b9fb7.roa (raw, json)
Hash identifier:          aQ06eIdaOiArGpUBfBGyopGVrZoXKmdgwPsBBBDNQkg=
Subject key identifier:   76:11:CF:98:FD:9A:10:35:4E:5A:6A:EB:52:A4:EB:D6:B5:76:DD:27
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584250002B1E2A1FB43D7351ED00
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/22751be5-3353-318c-bf28-a691b95b9fb7.roa
Signing time:             Fri 23 Jun 2023 07:10:16 +0000
ROA not before:           Fri 23 Jun 2023 07:10:16 +0000
ROA not after:            Thu 21 Sep 2023 07:10:16 +0000
asID:                     33362
IP address blocks:        69.89.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:00:2b:1e:2a:1f:b4:3d:73:51:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jun 23 07:10:16 2023 GMT
            Not After : Sep 21 07:10:16 2023 GMT
        Subject: CN=f1486c30-ce69-4819-a44a-39d716cced26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:67:0f:67:eb:dc:2b:44:6d:6d:43:94:89:
                    f4:10:b7:66:d6:63:8d:12:e9:a9:4d:fd:ab:44:ae:
                    8d:86:84:4d:0d:91:a2:d6:8c:a0:df:87:19:4b:2a:
                    d8:49:d0:b3:e7:d1:eb:e0:52:18:0e:dd:f2:71:6f:
                    cb:76:65:34:56:1a:95:a0:69:5e:c9:09:1a:87:83:
                    f1:93:0d:20:f5:a1:dd:83:1f:7b:51:92:48:77:2b:
                    34:cc:69:23:f9:0f:1a:8c:1e:75:ae:75:7b:33:94:
                    cd:44:52:79:bb:94:bf:be:4e:9e:2e:c8:4b:db:fd:
                    61:2c:e9:67:d9:d6:82:02:2b:81:9f:49:5c:35:4f:
                    de:60:77:5e:3d:6c:58:01:ab:7d:45:8b:e2:9e:53:
                    f8:a1:59:d6:1a:2e:e7:99:c6:5d:07:c7:15:5f:ed:
                    c3:de:65:2f:21:a3:d3:70:d8:8a:5e:a9:02:83:2b:
                    5e:6f:2f:0f:73:84:9a:87:a5:71:9c:d4:5a:2b:53:
                    bd:1e:42:d8:73:d8:63:2e:18:7b:02:e1:60:37:9a:
                    4c:12:22:4f:07:62:98:4a:a6:9a:73:4a:ec:17:3f:
                    f5:f1:d2:f5:81:e5:7d:9e:f6:28:e7:9a:c3:68:8f:
                    49:89:5b:a8:39:2e:ee:37:6a:a9:d7:7d:0f:2e:52:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:11:CF:98:FD:9A:10:35:4E:5A:6A:EB:52:A4:EB:D6:B5:76:DD:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/22751be5-3353-318c-bf28-a691b95b9fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:36:1c:15:0f:d9:40:99:8b:28:8a:16:4b:95:fb:26:43:74:
         8a:3b:6d:1c:19:27:ee:f0:94:51:25:89:dd:a2:f1:25:c7:e2:
         10:65:c0:41:d5:9e:aa:22:d2:cf:d1:70:57:4f:e1:87:23:a7:
         d7:70:78:53:7e:8d:3c:87:9c:61:da:9d:7f:83:bb:09:9d:5b:
         54:e9:98:02:35:3d:3f:c6:e5:06:b5:8f:30:18:50:d5:20:6a:
         e1:2e:94:6f:99:25:ea:80:5b:aa:02:03:8f:a1:d6:45:56:58:
         13:87:55:7f:0b:31:14:84:ba:c5:40:cf:3a:df:8c:d0:30:53:
         36:41:23:1d:c3:cf:01:98:91:0e:76:13:0a:38:4c:f9:90:7d:
         ec:e6:27:1e:4b:e5:39:12:b1:70:31:6d:2a:c0:6e:9b:27:b3:
         19:60:35:dc:39:cb:73:ee:9a:6c:f5:34:8e:0a:b9:ed:3a:0c:
         e7:f7:87:25:14:c6:cf:53:59:c5:e0:80:d7:9e:36:ff:e7:9d:
         d5:62:63:ee:eb:a6:40:f8:42:c8:9c:43:ff:12:a2:af:6a:89:
         81:7b:36:82:d1:7e:2e:67:27:a9:34:7a:31:ed:7a:32:8e:d2:
         ff:dd:ba:61:8a:3d:ae:a6:0a:6a:3e:c1:2e:0d:3f:4e:6b:cc:
         c2:32:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----