Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/088594e5-aaf0-3c79-8e29-aaa95d7b381e.roa
File:                     088594e5-aaf0-3c79-8e29-aaa95d7b381e.roa (raw, json)
Hash identifier:          BL9GvpfFKZpuiVAafLUSUY8+/VGh2v7AqoTDF7cjJ0E=
Subject key identifier:   78:92:2A:DF:DE:76:C3:18:F2:12:6E:57:C8:AD:2C:E4:8D:8D:71:C5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493136474C4BF1C77C12AA780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/088594e5-aaf0-3c79-8e29-aaa95d7b381e.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        50.100.16.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:64:74:c4:bf:1c:77:c1:2a:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=2778b222-b2cf-47a3-8465-797ad7a08725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:93:a9:dd:7f:8a:fa:fe:70:f5:a5:cc:c9:
                    cd:2b:04:69:18:00:9a:f5:d0:e6:a2:1a:60:d4:68:
                    25:76:14:27:11:92:f3:28:99:2a:76:85:3e:db:5c:
                    5d:f8:42:7c:10:48:b2:4e:9a:fb:6b:96:8d:11:73:
                    30:bd:f4:4b:2e:cc:59:05:1f:03:46:8c:a1:ef:4d:
                    a4:77:da:54:39:ea:83:cc:33:1f:c8:26:36:7c:a2:
                    3b:c3:e1:7b:04:7c:a0:6e:05:7c:99:0d:e3:26:ed:
                    df:55:15:e4:d0:1a:f2:c4:02:6f:85:fc:0a:97:1b:
                    0c:d3:8a:68:85:66:7b:50:1b:40:e8:50:e8:0a:c6:
                    f1:3d:5d:cc:c3:e9:78:fc:e9:e5:3b:83:62:ea:47:
                    84:04:b9:03:02:31:c1:23:26:59:33:1b:53:6a:a8:
                    d6:35:2e:4a:cf:1c:5c:ca:a5:5f:d6:72:13:f7:a7:
                    49:ec:1d:9a:fc:48:db:0e:32:a6:6c:9d:f2:c0:8f:
                    1e:7a:f5:b1:c6:c4:4d:1b:35:09:72:22:66:b3:da:
                    21:2a:b9:9e:59:f8:83:1f:16:06:b3:28:4e:3d:6f:
                    3e:29:8d:d4:97:0d:c3:20:97:04:c8:08:37:32:3e:
                    d3:7b:65:71:82:54:96:f1:91:91:32:2b:ea:ae:38:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:2A:DF:DE:76:C3:18:F2:12:6E:57:C8:AD:2C:E4:8D:8D:71:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/088594e5-aaf0-3c79-8e29-aaa95d7b381e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:ef:3d:ca:4f:c4:39:45:0b:a2:90:92:20:2e:17:c1:bc:
         ac:99:50:47:ca:17:f6:1d:2e:c9:83:f9:27:55:36:8a:47:72:
         a8:be:3d:b3:62:1a:72:26:2c:11:d5:d2:7d:af:5c:99:21:8d:
         be:a0:40:24:7e:34:e4:19:af:c0:8f:eb:0e:88:3d:ef:1a:d7:
         0c:47:c0:00:2c:b2:10:0c:1f:61:c9:dd:c4:eb:e9:ae:cc:07:
         0b:5a:1c:e7:b2:7b:cd:d6:a2:fa:6e:44:4a:b8:f2:1a:a6:4b:
         9a:b7:13:28:88:3a:e4:54:09:3a:d7:69:2a:6e:d4:ea:1a:93:
         02:37:90:79:21:98:ea:43:c6:54:37:92:61:cd:07:1f:00:3a:
         2b:fa:82:09:70:da:3b:00:14:cb:22:b5:07:68:56:ad:10:12:
         fd:73:92:f4:40:d6:87:12:cd:c3:b1:97:7d:21:44:c8:e0:10:
         2e:03:99:2c:3a:6e:6d:ac:e6:62:c6:b7:a3:d5:7a:d2:f3:be:
         d4:48:14:f5:6d:58:23:a2:3e:2f:4a:95:b8:c1:08:b9:be:9b:
         7a:c8:9e:30:ff:3a:c6:20:21:0f:af:b3:ed:85:d6:32:9c:0c:
         5a:39:cc:64:5b:53:05:d7:4f:85:f8:74:ad:82:18:0b:68:8e:
         de:1a:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----