Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c44b937-33cf-30ea-a492-05ea9fdc276b.roa
File:                     0c44b937-33cf-30ea-a492-05ea9fdc276b.roa (raw, json)
Hash identifier:          GECHvojSY/J4tg8mBGafdV3V+6lHM1ZuC2ggbA8q7PQ=
Subject key identifier:   EE:54:38:51:81:C3:F4:78:41:A0:8B:CE:7F:EE:60:59:71:0A:E1:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF753586148AE79BB1C52D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c44b937-33cf-30ea-a492-05ea9fdc276b.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        139.142.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:35:86:14:8a:e7:9b:b1:c5:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=505fc2b1-5e7a-46d8-8888-a7f7ca57ad24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:cc:a3:d6:51:4f:41:4e:b9:93:8d:c4:38:
                    43:c4:0c:f5:a7:1b:5c:2a:a8:31:29:d8:d5:1f:18:
                    8b:7c:32:5b:a9:ce:d1:76:a4:c9:7c:5d:08:c8:f4:
                    ae:75:2d:cb:6b:60:bf:36:e9:77:6f:49:b4:c4:1a:
                    a0:21:39:24:b0:0e:26:8c:d5:f4:99:67:18:ad:33:
                    3b:71:34:7f:cd:ca:c4:d3:2d:5c:c8:54:eb:c6:0e:
                    d5:b5:57:88:85:cd:b5:db:03:f1:f1:0f:cd:88:fe:
                    c5:8c:1e:9c:54:0b:c5:eb:6a:46:2c:c4:b0:31:a0:
                    f7:d3:47:b1:3a:81:20:bb:16:0a:53:5f:c5:b7:fb:
                    91:59:72:99:2f:8f:3a:c4:27:07:37:7c:5d:35:8b:
                    f0:31:d4:7f:dd:95:ed:4a:15:09:a1:20:27:bb:29:
                    97:91:1e:be:3e:49:98:20:37:39:4f:6d:58:39:f5:
                    15:bc:6a:1b:a3:93:a8:ce:c1:da:32:f3:13:fd:2d:
                    68:b4:54:34:44:9e:4e:93:75:91:ad:90:a9:d7:bd:
                    99:07:4c:5f:d3:04:2c:a9:bb:e2:31:7b:6f:59:6d:
                    89:a9:46:0e:0e:5d:40:3c:b6:b7:5d:36:60:f5:c6:
                    78:77:c7:83:e1:67:48:74:d8:05:86:5c:d9:a9:7a:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:54:38:51:81:C3:F4:78:41:A0:8B:CE:7F:EE:60:59:71:0A:E1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c44b937-33cf-30ea-a492-05ea9fdc276b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:b1:59:8f:5e:ca:ad:f7:ab:7d:d8:de:91:86:64:fe:59:
         77:31:b3:cf:e3:27:bf:94:52:2d:6e:42:e4:03:a9:7a:13:0d:
         88:71:fe:8a:ce:3d:b7:19:69:b9:70:8a:6a:ad:dd:78:6c:12:
         8f:40:ad:35:1a:4e:81:01:6a:28:29:0f:f8:b9:ed:9e:79:1e:
         af:7e:6c:13:81:4d:a5:cd:04:78:d9:b1:b2:85:6e:55:89:cd:
         b3:af:29:bd:f6:bf:7b:b9:c8:cd:be:cb:d2:0b:94:10:ff:55:
         e2:ab:1b:92:48:92:4c:2d:20:cd:2e:30:bc:59:53:a6:46:ee:
         41:4b:f1:ff:58:29:e7:be:b5:2a:73:3e:51:80:e7:28:d1:39:
         8f:dc:1f:11:c0:22:e6:ae:3d:e3:ba:0a:06:ef:03:62:45:a8:
         3f:b4:f5:3e:40:c3:2d:65:01:51:72:87:63:5b:84:36:b8:04:
         0b:3d:dd:2d:58:6a:1d:c7:0a:9c:4e:8f:1a:d9:0d:8d:cd:f6:
         c0:7c:90:8b:ea:eb:62:47:74:fc:7f:55:a8:31:ed:30:6f:fc:
         41:b9:57:32:11:3e:6b:9c:f7:68:eb:04:90:e9:63:47:da:82:
         f8:26:b4:de:39:90:ba:33:32:1a:28:71:9c:bb:f3:db:b6:8e:
         76:0c:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----