Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/280155ba-bad4-3fc0-af37-9ca892a78270.roa
File:                     280155ba-bad4-3fc0-af37-9ca892a78270.roa (raw, json)
Hash identifier:          rpQlfWScInyQuJHAP9rivtK0xA2VEvcDeZhV2Tejtl8=
Subject key identifier:   97:AA:D8:F9:B6:3A:27:16:AE:0E:3A:81:C9:02:82:08:1F:10:FA:7E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314BD6A262FF4B80908E800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/280155ba-bad4-3fc0-af37-9ca892a78270.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        198.235.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:bd:6a:26:2f:f4:b8:09:08:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=faabea05-709c-485e-8230-32e4c0ac65a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:1b:48:a7:74:c6:ee:49:f7:01:ee:0f:4c:
                    f5:15:22:72:95:00:54:82:74:45:fa:3b:31:28:9a:
                    c2:5c:36:3f:87:ab:ec:22:63:01:25:73:21:07:b8:
                    12:03:99:2b:68:0a:fb:c9:cd:ef:98:b4:fb:ca:7e:
                    52:4c:55:99:ef:29:82:55:5f:ff:24:df:34:a2:de:
                    4e:63:e0:e8:3f:c8:ca:04:9f:95:52:9c:e1:cb:d3:
                    ce:cb:a6:6e:b6:af:df:a0:c5:f0:2b:c4:5a:25:e3:
                    75:44:c8:4f:47:31:35:f0:63:43:9a:fa:fa:e9:d3:
                    b8:19:79:af:a3:e6:83:be:e4:fd:b6:b6:39:db:19:
                    ec:c6:c7:e0:ff:2d:f8:08:1f:64:a8:12:e7:f7:c0:
                    14:07:1d:42:af:99:3e:44:be:bd:1e:37:a9:b6:12:
                    7d:4e:f9:d1:2a:64:cf:39:81:e7:65:7b:fa:7b:b3:
                    7c:e4:b5:cd:ce:9b:1b:db:6d:d8:fb:fc:8d:c8:43:
                    62:94:9b:2e:c0:1e:2a:38:a1:8a:21:b9:dd:45:3f:
                    e3:bf:2e:41:35:bb:ba:ef:17:e6:8d:52:6d:1d:5d:
                    e0:5c:f4:fa:03:97:8d:d3:c0:6e:10:5b:5b:04:26:
                    d6:8d:e9:f6:fd:f6:92:f0:35:dd:36:d0:71:89:10:
                    e1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AA:D8:F9:B6:3A:27:16:AE:0E:3A:81:C9:02:82:08:1F:10:FA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/280155ba-bad4-3fc0-af37-9ca892a78270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:7d:7b:7a:fb:42:d8:fb:93:db:dc:e1:8f:65:ad:48:63:
         a8:9e:74:ab:4e:7c:cb:da:e8:35:4a:28:ac:11:d7:e2:75:23:
         ef:a8:d0:82:33:06:42:79:ee:27:a1:b0:e5:2e:31:3c:c2:a2:
         99:7a:e6:4b:9d:ff:32:70:c6:c4:c6:04:7b:0b:64:5b:6b:cd:
         a4:56:a8:39:04:b7:03:e0:e9:d3:9e:75:ff:f6:1e:d3:29:db:
         33:4e:a8:1a:de:72:28:bb:4d:29:68:54:92:68:e1:f4:7a:86:
         2a:df:67:9c:13:d5:27:2e:44:1a:39:0e:d4:54:07:3f:17:d4:
         9f:0a:c3:be:31:19:7e:d8:db:c1:31:4c:da:96:34:b9:8e:87:
         5d:1c:4d:b3:b7:73:97:b4:e8:51:44:b7:a3:64:b0:8c:fe:37:
         12:c9:25:f5:09:a7:f7:4a:1a:53:a6:38:ac:50:d4:e8:bd:df:
         54:63:cf:84:a6:c5:4c:55:ee:5f:c8:29:dd:a9:b1:0d:0f:b4:
         c6:1b:b1:62:62:25:c9:e4:dc:5a:8c:89:45:16:65:f8:ce:d5:
         67:4b:85:81:1f:a8:0a:a9:3e:83:a7:ce:fe:eb:f2:12:be:42:
         f4:2c:0d:97:08:9a:f9:6a:29:3b:7e:4c:52:20:06:3e:df:17:
         c3:7f:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----