Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8eb87add-149e-3e2b-a9de-4046c9fcbf7a.roa
File:                     8eb87add-149e-3e2b-a9de-4046c9fcbf7a.roa (raw, json)
Hash identifier:          LPU/iyWznA/Dp52om9nfw6/E50n8RYdaFFJHqVO6lLM=
Subject key identifier:   C6:F2:E2:DA:A2:C3:D4:39:4B:BC:95:4F:CD:BC:F1:4D:78:29:CD:65
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF753826D3CF778324260180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8eb87add-149e-3e2b-a9de-4046c9fcbf7a.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        142.134.176.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:38:26:d3:cf:77:83:24:26:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=6fcafc28-2d6c-4703-ba75-5f0ed3e82087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:32:e7:b0:fb:46:a7:25:52:a2:f4:bc:f1:
                    bb:2c:3c:62:d7:38:47:08:5d:71:72:e7:a0:f3:15:
                    25:ec:08:bb:7e:67:05:4c:f0:e0:8a:fa:74:22:29:
                    9a:b6:02:ea:1a:59:89:b0:e5:bb:27:d6:5e:ee:eb:
                    ee:2f:fc:81:91:00:93:ad:56:9e:2e:7e:1f:b9:c7:
                    95:24:78:d8:38:60:60:ca:4d:a6:4c:f2:ae:57:49:
                    ff:8e:cb:13:6e:c3:1f:67:10:6c:60:1e:10:ba:aa:
                    85:31:92:8e:c4:3e:50:85:64:e1:34:ef:3b:bc:e4:
                    01:df:0d:5d:b0:d5:85:74:f2:2c:53:d9:c2:41:fa:
                    43:08:00:11:ab:a0:8a:fc:7a:7a:07:50:e4:59:cc:
                    f5:80:33:4d:cd:eb:02:e7:16:a6:ba:39:7e:5e:09:
                    7f:db:c9:15:71:76:b9:9b:2b:71:e8:53:6d:a3:04:
                    fd:f7:76:0a:60:5d:50:18:11:68:97:72:0a:c0:c7:
                    ae:45:09:8b:89:15:c3:5e:4f:0c:f3:d8:b1:00:06:
                    2b:5e:d5:6d:7a:bf:ee:a7:4e:31:0d:47:5b:c3:64:
                    af:1e:fa:f6:35:be:63:5c:8d:d3:50:ce:33:50:77:
                    76:dc:99:e3:46:c3:8b:ca:14:c1:de:de:07:36:b2:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:E2:DA:A2:C3:D4:39:4B:BC:95:4F:CD:BC:F1:4D:78:29:CD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8eb87add-149e-3e2b-a9de-4046c9fcbf7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:45:7f:d3:c9:12:7c:99:90:95:03:e5:3f:9e:64:df:03:d8:
         05:56:94:50:b6:6e:a7:4d:1a:39:03:d7:26:df:19:dd:5c:cc:
         bd:02:54:98:51:df:39:7b:ec:af:0c:f8:8a:4b:0f:52:2a:96:
         d6:c4:72:e0:79:ed:00:dc:e3:8b:e9:7f:75:85:73:f5:36:ea:
         c0:c2:52:c6:7f:7b:d8:d3:9c:fc:1e:c7:60:05:3d:0f:4f:ea:
         38:17:fb:d8:3f:07:19:a9:3f:8a:4b:80:4c:0d:a2:8d:d1:c9:
         de:d8:34:51:3d:7e:a3:fa:9f:13:60:9a:f6:fe:9d:9f:ff:89:
         f9:33:c9:11:af:01:53:d6:8c:6d:0f:3d:01:32:42:a6:81:f2:
         ad:ab:74:c9:47:a1:ff:45:86:d1:c5:84:30:4a:c9:59:93:e5:
         59:a9:10:41:6e:91:2a:5c:1d:3d:68:e8:30:31:ab:6d:e0:04:
         3f:d1:82:bc:31:44:24:d6:5f:f3:d2:f2:75:50:76:04:ab:bd:
         a7:39:69:44:ec:cf:d2:18:d3:e6:de:c8:f2:f3:92:e7:5e:69:
         5e:95:12:93:a5:6e:5c:14:03:85:a6:9a:69:84:38:51:d7:bf:
         8d:f1:9d:2f:36:ca:22:c4:c0:d2:81:ce:da:6c:74:f2:2a:52:
         1c:a6:54:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdTgm0893gyQmAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NmZjYWZjMjgtMmQ2Yy00NzAzLWJhNzUtNWYwZWQzZTgyMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl08y57D7RqclUqL0vPG7LDxi1zhHCF1xcueg
8xUl7Ai7fmcFTPDgivp0IimatgLqGlmJsOW7J9Ze7uvuL/yBkQCTrVaeLn4fuceV
JHjYOGBgyk2mTPKuV0n/jssTbsMfZxBsYB4QuqqFMZKOxD5QhWThNO87vOQB3w1d
sNWFdPIsU9nCQfpDCAARq6CK/Hp6B1DkWcz1gDNNzesC5xamujl+Xgl/28kVcXa5
mytx6FNtowT993YKYF1QGBFol3IKwMeuRQmLiRXDXk8M89ixAAYrXtVter/up04x
DUdbw2SvHvr2Nb5jXI3TUM4zUHd23JnjRsOLyhTB3t4HNrL/UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMby4tqiw9Q5S7yVT8288U14Kc1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGViODdhZGQtMTQ5ZS0z
ZTJiLWE5ZGUtNDA0NmM5ZmNiZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjoawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxFf9PJEnyZkJUD5T+eZN8D2AVWlFC2bqdNGjkD1ybfGd1czL0CVJhR
3zl77K8M+IpLD1IqltbEcuB57QDc44vpf3WFc/U26sDCUsZ/e9jTnPwex2AFPQ9P
6jgX+9g/BxmpP4pLgEwNoo3Ryd7YNFE9fqP6nxNgmvb+nZ//ifkzyRGvAVPWjG0P
PQEyQqaB8q2rdMlHof9FhtHFhDBKyVmT5VmpEEFukSpcHT1o6DAxq23gBD/Rgrwx
RCTWX/PS8nVQdgSrvac5aUTsz9IY0+beyPLzkudeaV6VEpOlblwUA4WmmmmEOFHX
v43xnS82yiLEwNKBztpsdPIqUhymVN4=
-----END CERTIFICATE-----