Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7dd4338-aa11-3d1f-890e-8367c0591ae5.roa
File:                     b7dd4338-aa11-3d1f-890e-8367c0591ae5.roa (raw, json)
Hash identifier:          zdXYsTScnNYLIscyv2m6bIsI+Q5gW8t8YLrvUKwZ+4U=
Subject key identifier:   8D:F3:C1:BD:06:2E:FF:3F:B2:CD:AD:D9:B0:76:0F:EC:5E:89:C2:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449316C9F3CE70D16ACC6D3D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7dd4338-aa11-3d1f-890e-8367c0591ae5.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:6000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:c9:f3:ce:70:d1:6a:cc:6d:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=57ade49a-bd16-47df-89cf-72754a699695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:10:4c:cb:af:d5:3c:0b:07:2c:c0:6b:09:
                    78:e2:66:6e:4c:08:35:96:0a:3d:1a:18:ac:e7:5b:
                    c8:87:a4:50:41:9d:76:22:2a:50:40:31:74:19:67:
                    91:1d:fd:56:d3:e6:d4:0e:c7:62:6d:e5:1b:e3:1a:
                    3d:c9:03:e7:e4:78:82:c2:26:74:d2:95:c6:0e:1c:
                    94:90:db:38:cc:27:dd:95:d6:02:e6:40:ec:05:b8:
                    99:e8:0b:66:1a:ea:1d:58:2a:ca:d7:63:18:76:66:
                    c1:3c:73:d6:6c:9b:9e:02:39:11:df:41:f8:b9:c1:
                    1f:67:ac:46:61:7e:b0:56:bb:54:3d:79:d1:42:41:
                    42:3d:2e:4a:ba:95:54:5c:64:7b:97:a5:c1:24:28:
                    8c:27:47:65:1d:9e:21:ed:5e:e0:ca:3c:ec:b2:9a:
                    69:c3:76:d5:b5:79:1c:b1:5f:2b:33:dc:7b:9a:c8:
                    4d:da:a2:99:4e:7c:19:56:21:7d:08:20:46:72:e8:
                    6b:69:86:60:c4:5e:66:3f:d8:dc:9c:e1:75:99:7a:
                    4a:ba:05:fe:a0:45:f4:a0:e6:04:ce:42:e2:1a:a8:
                    76:f2:5b:e0:75:95:36:1c:1e:95:86:d5:66:98:88:
                    f6:7b:b7:a4:6e:a9:3e:8f:f8:87:9a:82:4a:90:cb:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F3:C1:BD:06:2E:FF:3F:B2:CD:AD:D9:B0:76:0F:EC:5E:89:C2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7dd4338-aa11-3d1f-890e-8367c0591ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:d5:ed:86:92:c4:95:f8:0a:2b:e2:2a:3c:7d:fc:3b:b3:
         60:3d:a6:08:34:de:ad:4d:b3:c8:bd:57:a8:b5:40:fd:c2:77:
         76:0f:89:18:ab:ae:2f:8a:a3:e2:0c:d4:2f:8e:f0:82:82:ee:
         1a:b3:60:2c:cb:2e:db:9f:8f:7d:bb:41:c6:91:5e:98:e7:94:
         17:d3:12:a7:3c:1d:11:ef:2e:61:01:de:24:e3:d0:25:b0:af:
         1f:74:e3:6f:5b:3e:fa:0b:6d:5d:bd:5b:c7:aa:c4:29:4c:cc:
         31:44:14:43:70:85:9a:ba:4b:99:31:29:ca:89:71:97:8f:0d:
         0e:fa:e4:12:92:6d:98:6f:70:e7:10:38:13:09:15:af:a5:f1:
         41:d8:e4:bb:5e:61:59:fb:75:fd:0b:87:97:81:ee:04:8e:d2:
         c4:64:ff:bd:20:b7:c5:fc:2b:1e:c0:8f:9d:ce:47:cc:72:c5:
         b8:65:7c:75:46:eb:d3:76:ca:48:92:00:40:91:d7:fd:91:4c:
         5f:25:3e:14:4d:a6:29:e1:8a:3a:cf:42:b5:19:72:60:e7:f1:
         a6:19:cf:1a:6b:59:65:2c:b6:04:d2:44:7b:38:01:a5:e5:fe:
         78:41:24:7b:cd:14:60:ca:50:2e:f7:34:11:21:fb:ac:7c:28:
         94:2d:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----