Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/233d7373-f77f-3adc-9de7-7a559a971a22.roa
File:                     233d7373-f77f-3adc-9de7-7a559a971a22.roa (raw, json)
Hash identifier:          J+ZQ5XKCOFXJrUwBDFCJ551SiPFBVggjgUnPi5UqyMs=
Subject key identifier:   B2:91:34:F7:FB:23:D8:3A:30:F5:91:55:95:D1:BB:5E:4A:31:A4:46
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75849BE0B044F700B1891A
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/233d7373-f77f-3adc-9de7-7a559a971a22.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:84:9b:e0:b0:44:f7:00:b1:89:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=2d7c7533-27fe-4396-a818-b5d281b43164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:80:27:7a:d7:97:67:cf:f1:33:88:9c:a8:
                    56:e6:a0:d2:dc:59:aa:e0:36:5e:12:20:1a:e6:75:
                    16:1c:f6:95:bd:c6:29:21:f0:bb:d2:31:2d:09:cd:
                    e8:b2:2f:fa:bc:cc:30:8a:d2:e8:d6:97:fb:1c:f9:
                    23:31:8b:de:67:a0:1a:44:bb:36:d9:f6:41:3f:90:
                    6f:06:c2:60:f2:d6:62:7d:38:68:28:7e:df:38:fd:
                    49:25:3d:55:a5:63:b4:d3:28:7f:ed:82:b1:66:07:
                    0d:b5:83:56:73:05:a7:04:99:0c:61:74:4d:f9:d4:
                    bd:a2:47:ac:f4:67:2d:91:31:d3:45:4b:31:0d:8f:
                    0c:04:cc:e6:37:d9:e4:c4:f7:df:40:20:de:f5:23:
                    38:0d:30:4f:a3:3f:35:ff:01:14:35:a2:9d:02:7c:
                    ef:03:b2:d8:68:e6:b1:0e:1c:3e:b0:d6:78:6b:b7:
                    09:d3:13:74:94:9d:c6:27:bb:69:ee:8c:0a:00:35:
                    c8:c0:58:f0:e4:c8:fa:11:96:c4:f9:45:44:2e:88:
                    e3:8e:77:e8:98:f4:ef:fe:fc:6e:07:c0:c0:31:d7:
                    6d:27:2d:ac:23:f6:bf:88:d6:c7:53:6b:b1:88:cd:
                    e2:9f:83:9f:bf:52:36:e6:f6:dc:c2:18:d4:0f:cb:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:34:F7:FB:23:D8:3A:30:F5:91:55:95:D1:BB:5E:4A:31:A4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/233d7373-f77f-3adc-9de7-7a559a971a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:15:08:35:c6:64:4f:9a:5d:30:bd:8e:1c:08:10:eb:d5:
         86:dc:85:85:c0:be:30:0a:b6:1e:33:da:f1:ed:9d:8c:ab:6e:
         87:67:4a:1a:dc:57:25:c2:61:ac:b7:b7:2e:86:25:99:88:fd:
         be:ed:9d:c4:93:4c:61:f5:ed:4c:a5:d5:fb:3c:1e:47:3d:fd:
         83:82:5b:1a:bf:7a:bb:4c:2e:e6:3b:ff:10:f9:f7:21:70:79:
         ce:4a:ef:c8:3d:65:d9:ab:8d:af:b1:7b:13:80:52:b5:84:10:
         6e:b1:d9:e2:37:49:a8:10:d3:3d:fb:05:3b:0d:38:e3:2e:87:
         54:59:bf:d3:3f:fa:62:a6:c0:1d:60:89:1f:fe:1b:e0:b0:90:
         0e:bc:f4:3d:c1:ea:d3:e5:e3:ac:e8:2d:80:c5:3d:8a:16:4f:
         05:74:79:9a:c3:c9:46:55:4a:27:35:c9:2c:4a:8e:47:00:0e:
         00:b3:6b:c0:aa:ac:bc:18:5e:ef:8d:39:a2:06:79:fd:52:0f:
         b6:cc:21:57:0a:53:c4:3a:0e:d5:4b:5f:12:42:d1:3a:d7:fd:
         45:36:df:98:e5:e4:30:8e:30:c6:9e:54:67:4d:ba:fe:89:44:
         ca:b0:d8:36:27:9b:49:c8:03:ab:4b:f6:1e:d2:20:8c:32:f6:
         ae:8d:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----