Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9cad238-9f47-3d6f-a885-b5f1bd442a49.roa
File:                     d9cad238-9f47-3d6f-a885-b5f1bd442a49.roa (raw, json)
Hash identifier:          wHlSHZX3g/F/tPyHSMy06R8ySsOrsdKQXWmfSCXj5yg=
Subject key identifier:   84:75:21:C8:0A:00:07:D7:52:6D:03:8F:72:22:21:B7:33:4C:0F:7C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314115078F6C8F990DF0D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9cad238-9f47-3d6f-a885-b5f1bd442a49.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.116.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:11:50:78:f6:c8:f9:90:df:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=3902c0fd-e9d4-4095-ba06-9a36a86c6949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:11:b8:33:18:52:e8:8b:6d:40:60:79:4e:
                    be:43:e4:f8:09:97:80:88:da:20:a9:c0:a5:18:45:
                    93:b8:02:6f:96:3b:7d:bb:58:5c:52:62:54:e7:79:
                    02:f1:b6:8a:8d:4b:bf:b6:88:e5:b3:75:9f:38:12:
                    91:40:36:cd:f5:dd:b4:52:3f:84:fe:cf:82:4a:f4:
                    0a:74:3c:9f:b9:60:da:1e:64:22:16:bd:9d:b8:37:
                    fe:06:1e:eb:d1:11:5f:ce:9f:aa:99:84:07:32:19:
                    40:6d:90:11:89:66:2a:d5:92:9e:48:75:24:2a:06:
                    63:bb:23:97:31:4e:3e:cc:df:ec:7c:8c:e0:be:78:
                    c1:f4:5b:cb:5a:c2:4c:80:71:fe:1d:dc:aa:56:42:
                    d4:52:56:fc:f7:8a:3b:f7:10:88:6c:13:fd:23:44:
                    0e:4c:06:e5:9a:f4:11:2d:4f:20:9c:1b:79:d6:61:
                    b8:87:2a:30:96:cd:3a:15:44:06:47:a9:29:ff:d6:
                    94:cd:c8:97:8a:9c:46:a5:9d:62:dd:13:0e:d1:51:
                    de:3c:93:d0:6d:d2:17:22:79:e5:de:b3:5c:37:25:
                    5b:9a:a7:17:ca:99:ab:a4:cb:3d:f9:20:35:75:78:
                    15:16:4a:9d:c7:bf:a4:a0:c7:f6:e3:3b:45:b6:4e:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:75:21:C8:0A:00:07:D7:52:6D:03:8F:72:22:21:B7:33:4C:0F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9cad238-9f47-3d6f-a885-b5f1bd442a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:a4:7a:0d:c5:07:49:50:82:a2:32:12:80:e1:50:3b:3c:
         ef:44:02:b5:ba:a2:4c:24:fc:0e:d4:af:76:15:8b:78:ee:a2:
         e4:f7:a0:ab:c8:4a:35:7c:33:6b:4e:42:66:52:4b:6d:7c:b6:
         a7:60:33:34:a3:65:9f:c3:42:60:a0:8b:b2:a1:27:37:19:f5:
         d3:f7:62:94:61:6e:7c:c2:20:5b:98:ac:2e:b1:26:84:d9:8d:
         cc:1c:69:a9:ff:58:09:7a:27:4d:2b:45:33:df:c8:87:2f:0a:
         2e:0f:d1:01:30:d5:a8:22:3a:53:e1:85:07:ed:2e:be:d4:12:
         b4:e7:a7:99:29:c0:b1:de:cb:9d:11:51:10:60:41:34:dc:69:
         88:1c:bb:f3:46:96:18:d3:2a:a7:8d:80:1b:25:49:4c:da:a5:
         b1:e2:bd:f1:c5:b1:bf:7a:40:69:78:f9:66:80:ec:37:01:f9:
         64:92:e7:e0:28:e4:2d:ba:75:75:22:2d:00:0e:8d:4a:0b:9b:
         60:cb:d0:34:5e:b5:4f:34:70:69:01:6d:d4:3b:97:78:e6:43:
         d7:43:b4:ea:96:5f:33:33:74:df:08:2f:4b:ee:03:3b:18:b8:
         25:d0:32:20:8b:80:90:91:ea:c7:22:a5:c9:d1:50:57:1b:af:
         d2:8d:71:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----