Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85419167-a2f7-3b5a-a9af-0441e6f56a44.roa
File:                     85419167-a2f7-3b5a-a9af-0441e6f56a44.roa (raw, json)
Hash identifier:          1JtFOQX2Nk8N4PAcbsrp+4QuGKmu6CYry1inmzCZ4uc=
Subject key identifier:   4D:1E:B6:AF:01:17:EB:8F:8A:B7:C6:4C:7E:5A:F9:69:8F:27:36:2B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493159390D352CA1834E73780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85419167-a2f7-3b5a-a9af-0441e6f56a44.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        207.35.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:93:90:d3:52:ca:18:34:e7:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=544febff-7b37-4af3-a916-f8eccd99d98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:c1:f7:81:ba:bc:06:f2:0c:95:25:53:2f:
                    17:27:0f:cb:41:86:6f:38:ad:49:54:73:38:a7:d5:
                    6c:d7:51:fe:0b:a1:ed:f7:10:a6:62:b8:da:a8:25:
                    02:1a:e0:82:0e:a2:dc:c6:54:d6:f4:83:c1:70:f4:
                    57:68:94:33:3d:bb:0e:e3:3d:8d:a8:51:d2:5b:3f:
                    44:13:60:d4:4b:a6:79:f8:c6:82:1a:7b:95:be:77:
                    c3:2c:c6:d9:f2:b5:3c:bc:f4:b3:38:32:c1:b3:01:
                    11:5d:75:f8:70:86:5b:c4:10:be:3e:36:ab:95:98:
                    c5:e2:9d:b0:0a:7b:18:e8:26:09:44:14:8c:0c:fa:
                    0d:0d:f0:16:9f:29:4f:41:31:4e:88:88:2a:c6:56:
                    e5:e2:80:7c:78:3b:25:ab:74:a4:15:73:6c:fc:09:
                    20:c8:cc:f2:09:68:69:4a:81:bf:27:2d:50:0a:f2:
                    31:8e:12:12:c4:6c:9c:43:85:f7:10:54:01:46:01:
                    50:7a:3d:c9:64:86:d9:10:b3:a9:47:0f:e4:72:cb:
                    80:05:f6:e6:ef:20:0f:00:38:99:4c:84:f0:e5:84:
                    4e:ec:78:54:6c:38:2b:49:29:73:9f:0a:99:20:a2:
                    d9:d2:df:93:68:8a:4b:10:ff:f1:6e:f2:aa:34:02:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:B6:AF:01:17:EB:8F:8A:B7:C6:4C:7E:5A:F9:69:8F:27:36:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85419167-a2f7-3b5a-a9af-0441e6f56a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:ad:1d:c1:b1:bb:9a:e9:3b:6c:1a:30:df:32:c2:de:46:
         5f:07:07:df:4c:2a:a6:e3:9a:a7:df:3f:e0:dd:bf:b6:7a:fb:
         4a:46:26:d6:d0:f1:12:1d:78:bc:89:fa:23:39:21:da:e4:fe:
         0f:1a:2c:1f:68:3e:51:04:24:45:de:03:37:69:e8:5f:22:ce:
         4d:4a:7c:a3:75:2a:79:c7:df:09:f5:60:ef:bc:80:00:83:98:
         20:92:4f:16:d4:0d:b9:ae:6c:6b:ae:6b:bd:a9:45:85:b7:8b:
         05:a3:21:81:2e:2c:53:73:8f:e6:f3:c3:86:e9:c8:a4:4b:1f:
         7c:be:fd:f0:49:3b:95:42:55:3b:b9:73:7c:1b:9c:5b:09:ab:
         6d:41:59:b0:b8:7a:ba:4e:16:82:56:4f:d1:ca:ff:04:e2:67:
         de:12:38:91:a0:1f:3c:53:94:7f:92:91:4d:ba:d5:40:a5:54:
         04:12:46:b4:bc:a6:b6:38:3a:a8:87:9b:70:0a:30:63:e6:61:
         6d:69:28:74:9b:c8:77:7f:3f:16:00:d4:1f:02:3c:d9:71:4b:
         95:26:af:66:f8:a4:c8:39:4b:21:fb:bf:67:b5:6d:89:93:4f:
         87:c6:cd:34:e8:e6:3f:26:7e:32:9a:5e:b9:eb:8c:53:94:dc:
         ed:f2:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----