Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32ec34c8-ed03-3fc4-bf05-ab7ee195a613.roa
File:                     32ec34c8-ed03-3fc4-bf05-ab7ee195a613.roa (raw, json)
Hash identifier:          M/rBoDqhupO6oMPJkY5DWdtykBsIExZx/SouLE6x9ck=
Subject key identifier:   89:15:11:AC:53:C7:EB:DD:23:A4:49:0B:DE:97:73:2B:8B:9A:B1:A1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7548A64F53D0CE3D73F300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32ec34c8-ed03-3fc4-bf05-ab7ee195a613.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        142.170.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:48:a6:4f:53:d0:ce:3d:73:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=6981a19e-db7f-441e-8ff5-37242e7b0f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:5a:e2:a8:95:b7:ec:d7:91:22:fc:9e:1c:
                    ed:86:49:3e:f4:57:f5:f3:e2:80:c1:fa:98:fc:3a:
                    05:24:52:d8:b6:f4:80:88:d1:1b:c8:31:4a:fc:28:
                    cd:c5:8a:97:c0:07:74:91:94:9b:c8:ac:ca:3e:61:
                    48:1a:c9:0c:36:91:e9:f4:7d:d9:44:f7:27:bc:09:
                    b8:bc:f1:26:ab:c7:7b:81:b9:ba:d2:f8:24:c3:25:
                    a5:3c:cf:a6:7b:28:36:67:ca:6b:d8:70:d4:5a:f7:
                    2b:f2:64:e4:b2:b2:cd:1a:f2:2e:f9:f1:ad:98:61:
                    6b:45:9e:49:71:df:70:ae:92:2e:81:8e:69:c3:9f:
                    87:25:d6:dc:ea:cd:ad:66:19:a1:38:86:4e:d5:0b:
                    c4:3a:97:54:d4:2b:b3:cd:9e:68:46:20:8d:7c:fd:
                    f0:bf:bc:1a:b6:2d:b4:58:71:84:ec:ec:dc:16:5f:
                    2f:fd:20:3d:e1:0e:ab:6c:40:35:50:fa:6e:82:e2:
                    a8:bd:f4:14:e6:e6:1c:c2:62:6f:63:db:e2:0f:f0:
                    07:5e:87:16:6e:af:bb:9d:8a:d9:2f:70:b2:b6:b2:
                    6a:cf:01:61:3c:9e:5d:7e:6d:1d:31:fe:02:dc:45:
                    0c:f0:67:44:55:b7:c9:d8:2e:04:b6:da:47:cf:cf:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:15:11:AC:53:C7:EB:DD:23:A4:49:0B:DE:97:73:2B:8B:9A:B1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32ec34c8-ed03-3fc4-bf05-ab7ee195a613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:82:cc:21:a4:8d:31:84:65:f8:58:90:da:e9:cc:63:b4:
         75:15:ea:2d:fa:ff:a3:b8:ee:53:70:2f:10:51:5f:c5:ea:fe:
         71:8e:87:4c:0a:3a:f5:51:f0:d1:3c:18:50:98:45:89:72:39:
         29:37:a1:0e:10:e9:09:dd:6b:76:ce:19:22:a0:30:5a:1a:fc:
         75:dd:93:dc:9d:13:59:21:e4:b1:ab:35:2c:4e:10:a0:e7:d5:
         f6:58:a5:1e:7f:70:31:de:20:09:80:9c:99:4d:0b:9f:3d:6c:
         f9:bc:eb:a7:e6:32:6b:b3:e4:16:97:85:d8:d5:04:e9:d9:f5:
         13:43:4d:18:db:12:4a:58:1e:c6:27:a0:3a:90:8f:c0:44:ab:
         17:63:9a:ba:f1:f5:13:6b:1b:c8:af:27:4a:df:95:3c:ff:ea:
         23:4a:10:30:f3:cd:5a:85:b2:da:46:d8:dd:e9:bb:ca:b0:dd:
         fc:9a:a2:09:17:a5:b6:8a:1f:5e:db:c8:5f:db:cd:6d:f7:69:
         d5:36:87:53:ee:d5:7a:98:82:bf:5b:b1:22:11:a8:9d:6c:dc:
         1a:12:38:c1:55:4f:dd:63:43:18:2f:1c:7a:81:c0:53:fd:53:
         ac:68:b7:45:30:29:bb:a9:4d:36:ff:9a:51:20:5e:51:be:89:
         fa:98:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----