Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7550ec17-9bbe-3b35-b2ae-b1d82d51251f.roa
File:                     7550ec17-9bbe-3b35-b2ae-b1d82d51251f.roa (raw, json)
Hash identifier:          xZw2UIH04AKBxFA/9h1DMBIG4cBFjRVW0kznhbVrbd0=
Subject key identifier:   F6:F9:57:B1:9B:41:FF:25:C5:1E:70:48:B9:CE:A9:9C:4B:48:59:7B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493153704448173818E2BDC40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7550ec17-9bbe-3b35-b2ae-b1d82d51251f.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     7122
IP address blocks:        206.45.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:37:04:44:81:73:81:8e:2b:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=129586be-800a-4a7a-a687-32eae6a50219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:f2:a7:60:30:ab:1f:75:61:f7:43:55:37:
                    e1:56:ad:ff:b1:2d:5f:3f:65:9e:1a:d0:d4:2e:41:
                    53:9e:ea:b6:ab:d6:84:84:1d:1b:39:37:d7:88:71:
                    b1:cd:d8:0c:0f:2b:e8:8f:e2:2a:e9:b9:f1:54:bf:
                    e5:ca:89:71:f5:05:c3:09:4e:2f:b3:66:6b:98:04:
                    d5:85:35:9f:3f:37:a7:11:3b:13:19:a3:30:b1:2d:
                    a7:cf:b7:2b:f0:27:a2:3c:04:2d:4b:36:7b:13:0a:
                    ec:88:12:14:47:72:08:75:d9:d8:10:14:c6:87:75:
                    c7:7c:c2:75:86:df:22:70:e0:78:06:63:28:4d:2a:
                    e7:b9:41:8c:50:8f:9c:af:c9:39:2b:66:85:64:bb:
                    d4:15:7f:df:4b:92:2b:67:52:80:c3:ba:b9:6b:14:
                    1f:dc:50:ee:02:28:6b:d2:c0:e2:5b:eb:36:62:5c:
                    8c:f4:7b:b9:fe:fe:1e:76:0c:93:85:72:d2:c8:3e:
                    ec:53:56:c4:ad:30:01:1e:d9:f1:f7:a7:d6:12:62:
                    9b:8e:4e:f5:31:8c:eb:15:8e:35:4f:6a:31:f7:08:
                    a8:a5:b0:96:c7:db:0a:e1:1d:f5:9e:a6:c8:04:4b:
                    30:ce:a6:87:7a:70:31:bb:7c:cf:3d:f0:ad:e9:4e:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:57:B1:9B:41:FF:25:C5:1E:70:48:B9:CE:A9:9C:4B:48:59:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7550ec17-9bbe-3b35-b2ae-b1d82d51251f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:bc:ea:75:67:b5:5a:08:b8:7b:38:f9:cf:5a:e4:2d:34:
         20:bd:c5:8c:07:33:9d:75:41:fd:e2:e4:cb:61:fd:b8:d8:fc:
         47:d3:7b:98:eb:4d:94:eb:65:5b:62:ba:14:ed:38:cf:bb:0b:
         40:76:54:8a:e6:e3:99:d3:a0:f9:6e:28:c0:35:d7:0d:b5:cf:
         38:18:4d:ea:fb:6f:17:c9:a3:f3:6d:a8:65:40:2b:75:6a:70:
         ff:80:6b:89:6d:c7:69:48:0a:b6:ec:67:17:c3:f7:17:87:1f:
         f0:10:89:7e:dc:50:77:0c:64:2a:36:43:95:67:22:33:5f:1e:
         55:28:f7:e2:29:bc:8d:4b:b3:65:4a:61:fb:89:9f:da:d4:e7:
         3d:0c:19:85:a9:e5:d8:76:95:33:6b:49:b1:bd:ae:c2:50:d2:
         20:25:fb:5c:99:a3:f9:07:78:a7:4b:29:15:44:58:cc:12:11:
         1f:4c:e1:a5:9f:b9:af:36:e6:fd:66:a5:19:30:91:ee:7c:d9:
         14:c1:2e:37:a1:63:8d:11:ba:15:6a:22:18:08:d3:82:f0:e2:
         bd:ba:57:01:6e:a0:c7:8e:03:a2:bf:f2:1c:de:42:a9:a3:d6:
         e1:ea:76:31:53:4a:83:e6:49:7b:4a:19:6f:6e:0e:79:01:00:
         01:ed:6f:03
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWESTFTcERIFzgY4r3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTI5NTg2YmUtODAwYS00YTdhLWE2ODctMzJlYWU2YTUwMjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLvyp2Awqx91YfdDVTfhVq3/sS1fP2WeGtDU
LkFTnuq2q9aEhB0bOTfXiHGxzdgMDyvoj+Iq6bnxVL/lyolx9QXDCU4vs2ZrmATV
hTWfPzenETsTGaMwsS2nz7cr8CeiPAQtSzZ7EwrsiBIUR3IIddnYEBTGh3XHfMJ1
ht8icOB4BmMoTSrnuUGMUI+cr8k5K2aFZLvUFX/fS5IrZ1KAw7q5axQf3FDuAihr
0sDiW+s2YlyM9Hu5/v4edgyThXLSyD7sU1bErTABHtnx96fWEmKbjk71MYzrFY41
T2ox9wiopbCWx9sK4R31nqbIBEswzqaHenAxu3zPPfCt6U5yFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPb5V7GbQf8lxR5wSLnOqZxLSFl7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNzU1MGVjMTctOWJiZS0z
YjM1LWIyYWUtYjFkODJkNTEyNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzi0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGrG86nVntVoIuHs4+c9a5C00IL3FjAcznXVB/eLky2H9uNj8R9N7mOtN
lOtlW2K6FO04z7sLQHZUiubjmdOg+W4owDXXDbXPOBhN6vtvF8mj822oZUArdWpw
/4BriW3HaUgKtuxnF8P3F4cf8BCJftxQdwxkKjZDlWciM18eVSj34im8jUuzZUph
+4mf2tTnPQwZhanl2HaVM2tJsb2uwlDSICX7XJmj+Qd4p0spFURYzBIRH0zhpZ+5
rzbm/WalGTCR7nzZFMEuN6FjjRG6FWoiGAjTgvDivbpXAW6gx44Dor/yHN5CqaPW
4ep2MVNKg+ZJe0oZb24OeQEAAe1vAw==
-----END CERTIFICATE-----