Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a47e5d-61fc-37e5-9342-53926e6424e0.roa
File:                     36a47e5d-61fc-37e5-9342-53926e6424e0.roa (raw, json)
Hash identifier:          nBvLyPSDtCf4aLNZ7ao/cOSJsXvCJ4b09v2cUovqc+s=
Subject key identifier:   4F:DB:3F:16:A7:DA:D4:FA:36:A7:5A:E9:04:2E:87:40:25:F7:AE:0D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3E9934E415734A2C4A9C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a47e5d-61fc-37e5-9342-53926e6424e0.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        67.71.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:e9:93:4e:41:57:34:a2:c4:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=f3acc974-5310-4634-8b52-4ebc28f9704a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:bc:49:c0:eb:2d:d6:8c:32:36:dc:b6:cf:
                    db:69:0b:fa:c1:91:a2:4b:3c:19:fe:03:fa:78:f5:
                    9d:3e:36:c9:70:95:16:2c:2e:3f:92:10:e2:9c:01:
                    7e:51:af:73:5d:61:fd:d0:ef:30:cf:46:65:53:69:
                    3c:4b:f3:f3:23:89:6f:52:ea:a8:49:20:6e:63:f9:
                    10:35:3c:54:39:9b:5f:2f:37:a7:2b:7c:52:f1:81:
                    ec:c4:98:68:d5:80:16:60:ad:b8:40:37:eb:63:10:
                    a0:ea:69:fa:ac:12:a3:95:e2:01:eb:84:8a:2e:84:
                    83:57:97:17:96:f5:c3:f4:9f:4d:73:d1:23:23:32:
                    c1:bf:b2:eb:19:7b:a9:9c:3b:23:a6:29:03:ab:43:
                    d5:af:8f:47:7c:ba:8c:62:a7:46:dc:46:70:a7:bd:
                    26:98:a5:57:98:0d:4f:a7:eb:0a:3a:60:01:e8:17:
                    e1:76:5e:5c:ae:c4:85:87:22:91:fd:0f:e1:3a:56:
                    79:75:c5:ff:fd:98:6c:04:99:68:cb:1d:38:34:76:
                    81:e3:41:ca:03:d0:06:f9:47:91:d5:41:7e:7f:d4:
                    b7:16:2c:70:9f:52:b2:25:fb:81:94:76:30:9a:ff:
                    19:db:2b:c6:e6:a5:4b:b3:b7:2d:7c:9c:05:28:19:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:3F:16:A7:DA:D4:FA:36:A7:5A:E9:04:2E:87:40:25:F7:AE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a47e5d-61fc-37e5-9342-53926e6424e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:65:f0:4c:79:ba:3d:c1:eb:16:80:40:b8:ff:58:f6:88:
         76:fe:cf:fd:97:ef:95:69:23:1e:f9:cd:c9:86:ce:c0:d2:47:
         57:5c:a5:02:d5:8f:88:76:59:b0:13:20:14:f9:c9:2b:c7:47:
         f7:59:5e:cf:df:8b:a7:11:aa:e1:a0:39:4e:64:c0:61:d1:df:
         dc:67:8b:81:68:8b:a7:32:f2:99:ec:72:03:db:b8:e4:aa:51:
         2a:59:bc:dc:2a:66:f8:40:aa:ca:b1:e3:b1:59:d6:bd:d8:43:
         ab:00:fe:82:67:ea:5b:9d:b9:d4:82:06:5a:0f:4c:1c:b4:55:
         b9:29:52:a0:a1:7c:03:b0:81:8a:33:15:29:36:e3:33:41:19:
         cd:b5:78:55:66:af:4b:c5:a9:b7:80:13:60:4f:e8:e4:39:96:
         85:39:27:9a:e4:51:b8:21:73:e8:2e:cd:97:39:32:ab:09:83:
         72:a8:fa:b7:89:22:3c:55:b8:83:77:2e:dc:21:92:2c:32:c3:
         41:ec:55:e8:ed:61:8e:d9:68:d1:97:48:ab:af:df:ba:24:44:
         f7:b7:75:b4:a4:00:e4:ed:ca:37:94:ea:71:79:d3:aa:7a:17:
         17:cd:39:c4:3d:68:0c:06:4f:f8:90:62:62:1d:c2:14:a8:07:
         6d:d4:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----