Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/356cdabf-41a8-3169-891a-ed6c550000bf.roa
File:                     356cdabf-41a8-3169-891a-ed6c550000bf.roa (raw, json)
Hash identifier:          6hxxP3MBovFGdFoo1EojdqkqdmqYxpBIZG+YhFWRYmI=
Subject key identifier:   88:BC:C9:A3:F7:4D:9C:15:BB:E2:66:83:0B:54:78:10:7F:40:8B:B4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28973675DBBC57716E1280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/356cdabf-41a8-3169-891a-ed6c550000bf.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        65.95.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:97:36:75:db:bc:57:71:6e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=2361546d-5528-42f0-8aa5-2c663f0b2d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:f1:ec:87:95:a0:fa:fa:e1:a5:68:93:ad:
                    99:1a:77:f3:73:3a:4e:fb:c3:57:1c:95:da:c0:44:
                    64:90:64:78:be:25:09:9b:00:d3:7b:cf:76:ca:a6:
                    67:46:4c:4f:e5:0b:af:07:62:01:1c:ee:9a:c3:d3:
                    38:77:1e:83:95:b1:54:a6:63:19:25:52:9c:de:99:
                    1b:cd:9d:5d:1b:9f:68:88:ec:4a:ea:38:82:a2:c8:
                    bd:c0:7a:c7:6d:fc:f6:35:eb:92:db:55:46:81:45:
                    25:98:24:fd:65:13:51:b8:33:07:b5:5f:4b:e9:4c:
                    d0:88:da:a5:da:b6:59:b0:30:53:30:63:8b:94:23:
                    49:5f:1f:1d:62:06:25:f6:b3:a0:07:af:ce:a2:a1:
                    1b:e4:6b:c4:fd:c4:78:90:a7:f0:7a:0a:9b:3c:a1:
                    ae:ec:b0:4a:e8:40:fe:cc:6b:5e:9c:4a:0c:72:20:
                    79:b0:ae:6c:00:dd:63:d9:f2:3c:7b:11:36:df:a6:
                    6a:ec:78:35:4f:35:8b:5a:42:19:d2:f1:04:4e:f3:
                    3c:6c:aa:8b:50:cb:88:6f:d8:e9:de:57:aa:3e:3c:
                    e6:74:2a:2e:e7:b8:54:86:9d:c2:37:f2:db:2d:87:
                    26:d6:4d:3b:7f:7c:2a:d9:10:71:f6:3e:86:90:df:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:C9:A3:F7:4D:9C:15:BB:E2:66:83:0B:54:78:10:7F:40:8B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/356cdabf-41a8-3169-891a-ed6c550000bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:43:ae:a3:12:23:1f:06:6b:d0:05:4c:90:a4:c4:22:f2:
         f2:85:60:50:0f:6b:2c:32:a4:74:ce:49:48:99:fe:9e:07:13:
         b8:75:7a:4d:27:00:f7:5e:81:aa:7e:e0:ae:12:d8:32:3b:49:
         b3:6a:ed:cd:45:03:1c:d6:d9:66:77:a3:75:84:84:02:a2:6b:
         c5:72:5b:e6:7b:28:8b:df:da:b0:0f:18:f8:48:1f:56:53:91:
         a1:37:5e:ea:d7:f6:79:d1:83:a6:5f:ce:82:08:01:b9:fc:be:
         98:7f:c4:6a:47:3f:fe:9a:04:bd:fa:3f:f9:cb:b1:dd:14:46:
         f8:b5:08:78:78:75:07:bf:5c:dd:cf:99:d2:5a:18:b5:66:92:
         be:a2:7f:54:3d:f1:59:3e:1b:12:dd:e0:e2:ad:d4:8d:fb:b9:
         88:17:1e:94:58:e6:6a:49:58:87:90:0b:ab:54:ec:a8:17:ed:
         d2:67:82:84:e3:7f:83:8f:ac:31:c0:cb:f2:9c:59:25:41:53:
         95:33:d9:ae:b0:9a:77:1b:0b:e7:be:b8:99:3d:5a:5f:ca:cd:
         aa:56:99:69:cb:e6:8a:5b:cf:ac:dc:25:86:52:a9:df:37:ae:
         df:26:2b:c8:1e:99:06:9a:10:58:d3:60:16:c1:de:14:e7:11:
         6c:df:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----