Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4460d2a7-5244-3f69-a130-cc85ae325c90.roa
File:                     4460d2a7-5244-3f69-a130-cc85ae325c90.roa (raw, json)
Hash identifier:          NYZ1THCWas6ns5lmlj1tbecijTMxcnZ6YivK0TT10yM=
Subject key identifier:   0F:8F:15:5C:19:C5:1F:9F:00:E7:D0:69:11:E9:C5:C3:D4:8F:1D:03
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74E57A1624EFB90C6961C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4460d2a7-5244-3f69-a130-cc85ae325c90.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:e5:7a:16:24:ef:b9:0c:69:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=508f8027-6646-42d6-b7a3-ef66b3099ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:76:8e:1d:d8:00:b6:46:40:0b:21:9a:6f:
                    16:11:6d:ed:d9:ab:dc:89:38:f1:ae:22:d7:0b:c9:
                    75:b3:36:91:8b:64:7e:99:d2:41:c6:ce:8d:30:8d:
                    76:d9:a1:8b:cc:27:c4:c8:16:f2:dc:31:2c:47:39:
                    c2:4e:a0:34:8b:2d:af:66:b2:de:17:a2:43:12:26:
                    00:26:c7:f2:6a:10:1f:18:1e:b7:cf:33:68:f5:58:
                    2e:df:b6:c1:b5:ea:af:3b:46:8f:93:04:11:d9:fc:
                    f6:a2:24:52:8a:8e:89:1c:32:6a:18:eb:cf:19:c7:
                    5a:32:45:f6:c2:1b:2d:f1:36:1d:ca:bc:ea:47:78:
                    ce:55:92:b5:0e:25:d4:75:db:75:d1:c5:92:ba:fe:
                    da:ba:76:99:12:4f:37:b5:d8:0d:4a:75:40:6c:ef:
                    5d:24:5a:0a:fc:08:34:d4:da:e0:71:8f:d7:23:cb:
                    f1:f5:e8:eb:11:ca:71:b5:c8:02:55:74:8b:a0:49:
                    30:04:d7:64:88:a5:91:02:a5:68:77:65:b4:98:58:
                    9e:d7:07:b8:16:b9:0c:cd:17:ed:da:34:06:8b:5d:
                    92:c2:a2:70:9f:04:16:fa:8d:43:69:3b:aa:37:18:
                    7f:81:bb:e6:eb:6f:db:13:d4:04:a3:3b:e1:8a:f7:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:15:5C:19:C5:1F:9F:00:E7:D0:69:11:E9:C5:C3:D4:8F:1D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4460d2a7-5244-3f69-a130-cc85ae325c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:12:b9:8d:94:c2:6b:7c:d2:f0:d9:7e:06:9b:44:ce:c3:
         67:a8:56:18:7d:29:5a:d7:bb:65:20:56:38:d7:71:60:68:19:
         bf:71:4a:cd:b3:f8:1a:55:4b:0a:a3:f5:a1:e6:71:71:af:7a:
         fd:ce:4d:40:f2:b1:21:64:79:b3:2b:63:cc:a6:b6:50:0b:b6:
         59:45:56:25:ec:68:74:07:61:01:b9:50:d1:0f:a8:1c:c5:fc:
         3f:0c:63:27:ce:92:67:4e:b6:b6:5d:2d:d7:96:10:76:6d:69:
         41:9a:88:59:af:32:4d:8c:b0:90:98:89:da:55:f3:01:c2:00:
         1a:af:52:c4:51:27:e1:bc:dc:ee:55:da:88:12:9c:4a:e0:97:
         47:0f:42:25:98:54:8f:b0:7d:f6:03:f2:01:45:d3:21:8b:42:
         3d:83:f8:b8:04:be:3c:bf:9f:07:6b:e1:90:ae:9f:5f:9e:cc:
         f5:89:61:d5:aa:e7:c0:6c:6b:b1:80:6a:8f:81:a7:91:a8:8e:
         b5:9e:9e:88:3b:7d:53:7c:b3:dd:a0:15:e1:bd:46:f9:34:82:
         e0:2e:a7:46:88:e1:51:51:c2:ed:61:9f:71:fd:10:17:ea:04:
         d9:0b:c8:c0:7d:fd:51:df:a1:8a:cc:36:67:05:3f:a5:b4:5d:
         7a:64:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org