Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa
File:                     40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa (raw, json)
Hash identifier:          2pO0oM8qMN5kqRiJeHLV6TnnT45uX8vmuRpRtqJsLEM=
Subject key identifier:   64:E2:D4:FA:2C:BF:0A:35:62:D5:89:B4:47:A2:8D:F1:58:6D:21:5E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75D4C51F3133B5383D05A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        209.128.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:d4:c5:1f:31:33:b5:38:3d:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=2cc2236d-607b-4732-a781-ba5222a28c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:72:58:bd:41:71:31:ef:53:5c:fb:59:e5:
                    ab:b5:5f:d0:a0:8c:f6:02:63:aa:c9:9f:c6:59:ae:
                    55:29:fb:75:b3:cf:ef:31:60:74:80:83:1c:4d:8b:
                    ec:32:ea:e9:2f:f7:d2:a0:7b:ee:9f:84:0d:4a:18:
                    e1:09:f6:67:7d:a6:b7:d3:35:8d:f7:af:c6:75:63:
                    72:4b:84:77:8f:e2:55:8a:2a:1c:fd:b8:4b:f5:b6:
                    17:9f:4a:93:b2:5e:d4:7d:28:28:0e:a7:42:44:71:
                    b9:b8:0e:8d:4e:2d:3e:fa:34:dc:05:dd:fc:ba:19:
                    fd:72:78:0b:20:9b:5f:8d:18:10:7c:3f:8e:85:82:
                    5b:63:32:99:c4:02:0e:c1:64:ad:d4:39:79:e9:31:
                    61:30:b8:ac:31:52:fc:0e:5c:50:95:e4:d6:e6:88:
                    f9:c1:8e:dc:b8:7c:b1:f8:30:bc:2b:00:4f:6c:4b:
                    71:b0:f9:f0:dd:65:d6:00:97:5b:fe:1c:23:43:29:
                    95:af:7f:23:73:b4:7d:99:7f:ec:14:1e:52:30:00:
                    63:61:06:51:73:03:56:1e:9b:ea:60:f3:4a:d7:f7:
                    46:31:c7:86:02:e1:60:5b:b2:75:65:5b:1b:a6:34:
                    49:00:25:a9:c5:c9:35:ff:a9:79:fb:13:d2:e6:50:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E2:D4:FA:2C:BF:0A:35:62:D5:89:B4:47:A2:8D:F1:58:6D:21:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40e9e3dd-4e6e-31e0-b05a-066c7b219571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:40:1f:b6:3d:0c:62:67:6c:8b:7e:e6:7c:fa:73:8e:e1:3f:
         99:70:c5:84:f6:a7:15:2f:2b:09:5f:10:dc:12:08:17:8c:73:
         c2:28:df:55:d4:c0:31:90:49:e2:10:f0:fb:6d:9a:58:de:bf:
         62:34:fb:41:76:31:d9:ff:e2:83:07:43:0b:07:91:04:cd:ac:
         e0:8a:86:58:c3:7f:52:61:c9:01:85:04:f3:ed:62:87:48:83:
         70:b4:db:e0:bd:0a:de:45:28:bd:24:c2:11:65:4a:40:82:65:
         54:76:2d:72:a9:ff:40:89:4f:2c:a7:77:de:e2:4c:60:20:bb:
         8b:c1:3a:3b:12:b9:56:bb:44:10:5b:b1:73:5a:f4:12:d8:85:
         45:a6:bf:b1:d7:52:6d:83:cb:94:4c:a6:80:7a:b7:51:3d:df:
         3d:8c:39:4b:b3:86:1b:29:91:47:c7:0a:62:6f:c3:c5:f1:84:
         1e:ca:2c:00:08:34:a2:9c:f0:5e:e9:05:88:a4:2c:2d:6d:5f:
         fb:33:d9:35:75:97:16:a7:33:d8:9e:58:00:ea:41:78:95:7f:
         c5:53:35:49:4a:a5:f2:74:10:c3:c5:69:49:b0:d4:76:e1:6f:
         64:1b:55:1c:7c:df:d1:34:c6:4f:ae:95:8a:e8:35:b8:62:4a:
         04:1c:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----