Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b081fa49-f6d6-3b4f-b340-0014e3c286fb.roa
File:                     b081fa49-f6d6-3b4f-b340-0014e3c286fb.roa (raw, json)
Hash identifier:          ez041SWu3WV2vnzU6e+vw9FwoBfo9ew3Q3WjQNlwig0=
Subject key identifier:   71:63:95:6F:8E:1E:A8:82:E6:84:F9:24:F8:26:09:41:79:F4:58:E8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313C4EE57F3C40392C08540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b081fa49-f6d6-3b4f-b340-0014e3c286fb.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.28.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:c4:ee:57:f3:c4:03:92:c0:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=0c83cbb0-0357-43f2-8e0e-796f64f8accb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:49:d1:51:3a:ad:3d:37:c9:95:68:aa:23:
                    c3:49:be:c2:88:a0:b2:8a:73:f3:11:0c:38:30:18:
                    52:b4:7c:f4:04:f1:68:28:59:1e:d1:83:e0:f7:fe:
                    a3:94:1e:3e:83:c4:95:93:4d:b7:a7:9b:45:c4:45:
                    bb:74:c6:0e:5a:03:8b:19:7d:df:88:c2:9f:78:0f:
                    a8:23:83:fc:93:bf:92:11:a4:f6:96:b1:42:3b:55:
                    6a:7d:a7:8f:c5:28:cb:14:c8:4f:99:94:d3:9a:7a:
                    5a:70:be:7f:2e:f6:f0:71:c2:4b:70:30:e5:38:df:
                    f2:90:af:d9:40:4d:e2:38:d8:ea:59:cb:23:50:0c:
                    2a:46:65:7c:c0:5e:98:b1:6b:86:35:0f:0e:9b:42:
                    57:ec:d5:31:3d:17:5f:bc:ab:cb:26:63:09:28:df:
                    bd:5a:df:57:05:46:a2:1e:86:29:f1:6f:61:fd:10:
                    11:ed:68:63:9e:e4:d4:a5:de:4b:f3:88:64:fe:f3:
                    87:06:6f:42:9c:42:b8:cd:9e:b8:0f:d0:07:dd:b7:
                    c4:ff:7c:97:21:f2:dc:79:ba:24:e3:39:6f:5b:63:
                    86:be:cd:5f:fa:14:c2:f8:92:6e:ae:53:bb:cd:f5:
                    de:44:d1:2b:0f:c5:8a:28:94:0a:66:1c:c5:1b:e9:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:95:6F:8E:1E:A8:82:E6:84:F9:24:F8:26:09:41:79:F4:58:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b081fa49-f6d6-3b4f-b340-0014e3c286fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8e:7f:f0:7f:33:06:ef:90:50:d2:f8:76:80:d3:f8:bd:40:
         80:1f:49:9d:b5:91:9d:79:99:98:33:fb:76:8e:09:1f:26:e7:
         e5:5a:0b:0c:70:04:b0:71:a2:a1:57:96:f7:bb:9d:61:79:06:
         4e:bd:79:4e:76:d4:41:56:09:d3:b0:ca:3a:61:03:9b:d6:69:
         50:a6:b5:01:f3:7b:15:1a:0e:33:99:92:15:09:c1:c4:58:75:
         c8:ee:07:41:c1:44:97:53:db:64:e2:87:0c:6b:a0:eb:6d:c1:
         db:27:5d:e1:14:76:5b:a4:16:cf:84:a2:3b:ae:eb:64:22:c9:
         3a:93:47:bb:f2:56:0f:0e:6d:59:73:28:fb:f5:98:77:c3:58:
         bf:30:f4:67:d5:07:69:45:24:95:da:80:2d:d7:38:fb:6c:d5:
         00:66:71:97:0f:40:6a:21:6a:db:dd:8e:ca:4a:53:54:2b:1b:
         0d:c6:4e:82:97:48:86:44:20:af:12:e9:84:a6:1e:6e:05:da:
         f9:4a:26:2d:13:9d:e5:b1:2a:07:2a:a7:3b:c4:48:c0:47:43:
         89:c8:39:71:e9:a9:b8:c2:bb:c3:d0:d2:7f:1d:0d:67:48:f8:
         e8:34:08:db:b2:0a:4d:e0:54:2b:2d:76:c1:b0:9d:85:fa:23:
         e1:36:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----