Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c052b08-4e36-36f5-86c5-1550734741f7.roa
File:                     1c052b08-4e36-36f5-86c5-1550734741f7.roa (raw, json)
Hash identifier:          XtszbqqsciklpYv5YzryHVM40vMYOPUyhUL6Lze6ZyE=
Subject key identifier:   8E:40:01:58:04:C1:C4:7D:45:9F:27:1A:DC:C8:2F:23:A3:FA:8C:D3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5D1093052D1DE96560440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c052b08-4e36-36f5-86c5-1550734741f7.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     35911
IP address blocks:        209.226.56.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:d1:09:30:52:d1:de:96:56:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=214461f0-45b5-42d3-a673-3c3f36655b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:7c:df:49:5c:56:5c:00:f7:3c:d7:0c:1b:
                    9e:2c:44:35:04:ee:33:c3:be:7b:72:88:76:30:c8:
                    bb:81:5a:f8:4e:ba:dc:a3:58:90:b9:a3:fe:f2:5c:
                    15:1e:38:5b:15:1e:25:1d:a9:20:a1:a7:95:e4:c8:
                    0a:5b:78:76:28:63:e9:24:27:dc:f1:0d:01:60:96:
                    78:d1:d4:68:4f:d5:2e:a5:78:4a:b2:aa:ee:08:55:
                    a0:12:fc:16:1b:5e:f6:ec:9f:89:a6:c5:a3:e0:5d:
                    80:9a:70:40:b9:61:03:44:54:0b:ac:e9:56:b9:e9:
                    b4:93:61:26:ff:b6:65:d0:60:5b:c5:c7:c4:14:58:
                    a9:4c:a6:7a:01:fd:43:d3:2a:29:97:8f:58:fe:2b:
                    96:a8:84:6e:5a:1e:5e:40:dc:ec:f9:40:1c:5f:fb:
                    19:0d:a8:e1:ff:3a:61:62:37:33:42:96:74:90:1f:
                    eb:e0:96:8f:14:41:a9:b6:ac:55:79:1f:77:bc:20:
                    cf:43:89:2c:e6:dd:89:de:02:a3:65:86:68:5b:49:
                    13:a0:d8:96:39:05:2a:c9:d0:43:64:c8:ab:2d:38:
                    d4:fc:43:23:d2:80:57:8a:7e:e5:41:49:0c:3c:a0:
                    f4:ee:14:e6:bb:3c:2a:63:c6:a0:e6:32:6a:24:7d:
                    7a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:01:58:04:C1:C4:7D:45:9F:27:1A:DC:C8:2F:23:A3:FA:8C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c052b08-4e36-36f5-86c5-1550734741f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0c:14:be:4a:a1:f1:00:ab:e5:81:d1:fa:77:96:6f:21:17:
         49:5e:3e:ec:3e:ed:8c:71:8f:27:67:b4:b1:98:c7:34:d5:37:
         dd:ff:df:a0:bf:17:99:5c:8a:06:c8:50:c7:93:1e:02:d8:57:
         00:ec:56:61:70:31:09:64:f2:85:94:7d:b5:11:b1:67:1c:84:
         b0:89:9c:e6:b7:db:96:57:5e:c5:60:ca:68:c6:f6:07:98:98:
         05:4a:fc:a0:1b:e8:00:46:24:2e:00:1f:de:ca:f1:e4:0d:f7:
         e1:7a:21:a0:a2:39:74:70:10:fe:a8:8a:3b:1b:81:37:d7:bb:
         83:a6:c6:6a:cb:f9:b1:bb:4b:90:15:26:3f:66:aa:79:3e:e5:
         20:d8:e9:5e:7b:6d:96:45:ac:44:85:38:8f:13:5b:27:46:35:
         5f:1d:14:4e:46:40:ff:37:e3:9a:20:99:6e:21:16:b3:5a:bd:
         a7:a7:eb:da:d2:f0:2a:4a:5f:d8:d1:83:6f:70:95:c4:b5:60:
         3b:35:a1:bf:f5:f2:c7:92:b0:ca:24:1e:60:29:29:11:68:0b:
         40:35:55:9e:bb:0d:e8:c2:75:5e:b3:53:b6:14:3f:16:47:13:
         8b:91:d2:84:96:e5:36:27:f3:b6:44:cc:f3:0f:51:cc:bc:a7:
         b7:d1:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----