Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20294d89-1af2-3ecb-ae39-ba57c13eb45a.roa
File:                     20294d89-1af2-3ecb-ae39-ba57c13eb45a.roa (raw, json)
Hash identifier:          8tO5n24W9IBH8SC/xVsKpsOXAeYNgJ3vUff/Dvn9NsE=
Subject key identifier:   DB:51:83:F8:C4:F9:8A:81:E7:6B:C7:FC:3D:88:E6:24:99:55:E9:95
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313BD5297467153BF9B7400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20294d89-1af2-3ecb-ae39-ba57c13eb45a.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.25.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:bd:52:97:46:71:53:bf:9b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=fb2b55bf-9ee1-4b65-ad3f-83a0676cf9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:68:39:33:78:d4:f6:d9:d9:6c:e5:61:eb:
                    e6:75:45:a1:ce:b1:86:a3:fb:71:36:dd:60:61:59:
                    96:ca:bb:49:bd:27:88:2d:be:29:c0:b6:0d:50:8e:
                    ff:2c:ab:ac:dc:79:9b:34:96:99:10:5c:c6:e4:f3:
                    61:96:f3:b1:6b:66:25:a8:da:29:a4:93:28:d0:25:
                    cf:ef:f3:6d:f5:c2:8c:af:fd:42:66:f0:d5:7b:c1:
                    cf:9f:ad:a6:45:d0:bd:ae:c1:4f:b9:10:81:37:9f:
                    5f:e6:eb:f2:66:8c:39:11:6b:eb:62:4a:f7:10:f0:
                    15:4b:8f:74:47:37:89:34:13:6c:58:8e:55:af:45:
                    51:5f:6b:94:ed:50:bd:3f:cc:e2:47:e3:ab:45:e7:
                    01:b3:9a:7e:8f:62:e1:84:2a:da:3f:7e:b5:f3:f3:
                    c1:a5:3b:1c:79:ad:50:b6:b8:42:8a:b4:57:85:34:
                    ef:c4:52:db:e5:b0:5e:c8:0a:ef:3d:a6:5f:3e:90:
                    bc:81:d0:24:76:a2:0e:94:01:68:b1:e9:9b:79:bd:
                    b9:92:80:e9:d7:0d:b7:96:c9:26:7e:5a:06:d0:a3:
                    32:d5:a6:2f:5e:7b:67:43:cf:1f:5a:99:11:13:2e:
                    8c:b4:25:b3:bd:72:b1:13:6d:88:b0:ae:ae:df:6f:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:51:83:F8:C4:F9:8A:81:E7:6B:C7:FC:3D:88:E6:24:99:55:E9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20294d89-1af2-3ecb-ae39-ba57c13eb45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:8c:0e:11:7b:f6:d1:2a:67:cd:e5:c8:d5:85:fa:ed:b1:
         2e:93:e1:2d:52:25:7d:34:d3:0f:a1:46:8e:8e:f2:ec:62:09:
         6f:42:58:86:07:95:3f:49:86:9b:e9:ed:5d:3f:98:8f:ec:6c:
         6e:d9:42:46:b6:0e:e7:eb:9c:60:6c:73:87:ff:36:66:c8:4c:
         e0:db:71:c3:a8:23:7a:d6:37:df:ca:bf:33:d1:6a:ed:97:81:
         9e:8f:1f:d3:d3:cc:91:04:15:eb:02:37:ae:ff:9f:74:40:85:
         b8:48:a8:61:6b:48:af:51:cc:14:31:59:f9:11:99:06:be:d7:
         20:95:21:5d:81:dd:8e:95:0e:29:8c:28:b2:d1:e7:2a:7e:5e:
         93:52:cf:b5:a3:ff:93:41:a5:23:23:0b:a9:02:90:45:b2:cd:
         7e:8c:7d:1d:31:76:28:16:9a:5f:a0:01:26:30:fb:98:86:c0:
         39:b9:e3:c6:d7:98:e6:19:2e:ac:66:7c:31:5f:29:d5:d8:e2:
         f0:45:bf:63:4f:1a:26:fa:f1:d2:ee:f5:9d:14:f1:a1:ac:1a:
         6f:36:2b:d6:d8:b1:b7:9c:ae:c0:9c:2f:1f:85:63:ea:51:7d:
         74:96:cb:f0:ec:b5:ee:35:e3:31:21:4a:7d:ae:6f:0f:4e:39:
         b6:2c:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----