Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/000d1f5d-ffbc-39b7-987b-65cd646b6966.roa
File:                     000d1f5d-ffbc-39b7-987b-65cd646b6966.roa (raw, json)
Hash identifier:          YPxFmns4rAXYjae1lPI0FTz+iaRmNdepCJGCyti659A=
Subject key identifier:   0D:2C:86:CD:3B:C8:01:FF:02:6A:56:F9:AD:1B:92:1A:B5:DD:56:DA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315340B332582E58CA70F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/000d1f5d-ffbc-39b7-987b-65cd646b6966.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     394422
IP address blocks:        205.200.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:34:0b:33:25:82:e5:8c:a7:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=646ee10b-e127-4a22-a3b5-75b33c9187d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fd:28:2c:18:f4:77:7f:32:71:b2:a5:d6:34:
                    cd:f6:25:4e:b1:b0:3c:80:3a:64:9e:d9:bb:52:6c:
                    06:08:1a:43:f2:8e:9d:0c:aa:45:37:14:09:7b:59:
                    d9:71:a0:88:8a:94:c1:96:ef:30:68:ba:b1:7a:f1:
                    7d:57:a9:bf:c1:b9:c6:1b:51:64:8e:9c:27:7e:43:
                    7e:9e:4f:97:9b:0a:ea:c6:70:46:14:43:64:60:36:
                    f4:89:02:65:77:9e:7f:ae:d4:0d:3d:39:f7:e8:86:
                    b7:a8:49:26:16:fe:9f:ac:a5:0b:3f:7f:9e:68:a5:
                    6b:e6:5b:54:5b:b1:e7:3e:6d:e2:d7:f8:82:2c:86:
                    b6:47:a1:4d:19:5e:94:c8:8b:53:ac:a5:19:df:4b:
                    06:6c:d2:88:51:ff:cf:58:c5:74:98:fa:73:7f:31:
                    31:29:16:77:2e:73:14:fe:f7:8d:0d:d5:84:30:f7:
                    a2:57:18:2c:6d:94:b4:bd:46:05:0f:e7:42:e5:3f:
                    9c:0f:db:20:f1:9d:5c:67:50:83:7c:46:61:2e:54:
                    e8:29:14:ec:6f:cd:8e:de:ca:30:c6:f1:42:9f:d2:
                    2c:91:96:4f:42:eb:45:a3:7a:68:64:2b:d5:e2:5c:
                    35:96:8b:c0:66:4d:0c:ea:9e:51:11:0a:e7:06:59:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:86:CD:3B:C8:01:FF:02:6A:56:F9:AD:1B:92:1A:B5:DD:56:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/000d1f5d-ffbc-39b7-987b-65cd646b6966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:97:ee:75:c4:4c:b0:62:03:7f:f1:df:28:53:81:d8:7f:be:
         94:61:38:2a:77:b1:24:66:48:0f:26:d3:4b:60:54:63:f3:88:
         40:ad:04:f8:f8:93:62:c6:2a:79:45:91:0a:97:ed:65:bf:21:
         43:07:07:44:4a:ad:8b:d1:d4:24:36:98:d9:0e:a2:59:5f:c5:
         de:39:d4:ea:1c:29:1a:ed:1e:6c:60:ef:5d:44:28:dd:49:42:
         e0:c0:04:6e:fb:ab:32:7c:55:44:a0:84:64:56:82:24:72:65:
         6c:6e:ea:10:85:75:96:23:cf:ae:e9:d9:f5:70:a6:e8:32:19:
         30:be:bb:6a:b7:24:09:50:bb:0b:eb:c0:dc:63:2b:da:53:7a:
         24:2d:af:f5:2a:85:d7:f5:32:df:41:d0:62:85:e4:17:9c:b7:
         6a:85:6b:5f:ca:fc:79:36:6e:01:6b:7b:32:85:a7:1e:04:e9:
         3d:00:de:ef:0d:df:c4:51:3a:a6:14:50:7e:d8:a5:ea:a5:2e:
         17:4f:64:ab:d2:48:b9:f2:cb:64:9c:66:ad:19:3d:45:a4:14:
         0b:85:0f:a8:3e:fe:0f:82:66:59:59:dd:a2:27:6c:5e:c2:f8:
         42:9e:64:88:a3:96:17:0d:ae:75:d3:72:54:09:2e:3d:c4:4e:
         2f:35:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----