Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f9aef3d7-8c63-3560-b084-7c0edecefda6.roa
File:                     f9aef3d7-8c63-3560-b084-7c0edecefda6.roa (raw, json)
Hash identifier:          Rp5jTCSNKwPqhlDp+5wCnBTC/pQwr1euVcW4BimsZoc=
Subject key identifier:   A6:73:DA:A0:BD:0C:45:91:CA:ED:6A:F1:B6:49:30:D4:E4:D8:B2:D1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11FBD6BA93A193FCADF4C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f9aef3d7-8c63-3560-b084-7c0edecefda6.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        174.90.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:fb:d6:ba:93:a1:93:fc:ad:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=0fb5cbfe-04de-46d7-ae6d-c8dd1f636f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:5e:26:d1:93:c8:0f:18:71:e0:ee:6b:13:
                    87:4f:2c:5a:64:b6:68:f2:a3:d8:08:dc:88:6d:98:
                    1d:bb:ef:9d:39:27:30:e5:0d:47:b7:cf:b9:e3:6d:
                    78:6b:bb:d3:4e:c4:4b:0d:ad:e9:5d:2d:40:3a:07:
                    30:a3:f3:6e:5b:cb:f2:3f:45:5c:74:7e:aa:88:5e:
                    e4:17:85:44:95:73:80:6d:9f:09:51:ef:b1:b3:19:
                    f2:7c:37:e6:b7:ff:14:c3:f2:9e:9e:da:c5:37:cb:
                    7b:4b:22:bc:19:2a:6f:e9:08:e4:38:f6:fc:1c:0f:
                    37:34:1e:c7:f0:0a:3a:b9:7d:22:60:d5:91:28:33:
                    0f:95:ee:22:50:e5:fd:d7:87:10:6a:c1:33:1d:ef:
                    73:b4:e8:ef:f9:67:7f:d1:22:33:f7:3a:87:21:29:
                    71:be:6e:1e:72:df:49:1d:8c:cf:61:b4:e5:54:65:
                    fc:ab:3a:5c:13:24:ce:f7:13:3f:81:44:ec:ac:92:
                    d3:72:76:61:03:b3:04:9e:65:16:49:a2:74:98:53:
                    87:d2:2d:29:59:21:d5:d9:9e:3a:b7:b8:57:36:92:
                    cb:82:94:51:e9:63:f7:6a:5b:be:b2:44:76:c1:b2:
                    76:af:b0:29:34:07:de:2f:c0:fc:bd:7d:f7:a8:37:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:73:DA:A0:BD:0C:45:91:CA:ED:6A:F1:B6:49:30:D4:E4:D8:B2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f9aef3d7-8c63-3560-b084-7c0edecefda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:98:fa:f8:ad:5b:f8:f3:3d:45:45:b7:cf:fe:a2:e7:b0:
         a4:11:af:68:a2:fa:fc:09:ba:f8:c8:14:2d:c3:97:71:06:25:
         37:22:e2:8e:1c:c2:78:a7:52:98:6b:8a:0e:83:d4:8d:ac:c5:
         bc:27:7d:7e:8c:e5:35:65:86:dd:0b:63:d3:5b:fa:ce:e2:e0:
         2f:58:06:cc:fc:32:f8:fb:5f:82:29:14:70:95:1a:45:11:6c:
         b0:83:1a:0b:a2:6e:92:fc:3d:68:50:03:8c:da:c6:cf:9f:73:
         fd:0d:ad:fe:d6:fa:c6:cf:0c:cd:51:4f:9b:2d:e6:1d:61:4f:
         32:07:d8:17:68:be:e2:56:4e:4a:35:f1:af:18:3e:db:e2:7e:
         56:ad:fb:e9:d6:7b:7f:a1:3a:d6:68:82:e2:82:35:7d:e2:af:
         69:d8:c2:66:03:30:01:07:bc:92:f9:81:1b:56:d6:f3:26:6d:
         d2:a5:2b:da:64:f2:c5:ff:31:9c:03:b1:2f:31:85:f4:38:8f:
         b9:48:6f:ff:98:7b:e4:b9:9f:a4:9d:98:eb:b4:9f:1a:40:8b:
         e7:77:0c:82:83:0f:05:66:12:52:44:91:d2:5a:d4:9d:8f:98:
         e4:25:1c:dc:bd:d3:39:91:31:1c:35:5f:3b:37:08:c2:85:6c:
         ad:4c:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----