Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38b9eb2b-6d61-3786-961d-4f0ddaa8f3e5.roa
File:                     38b9eb2b-6d61-3786-961d-4f0ddaa8f3e5.roa (raw, json)
Hash identifier:          pohNROwlDsM32I9YkZDeA/pgSxK3KX6aPqQYrmOFV58=
Subject key identifier:   FD:D5:3E:CC:1F:DC:FA:17:A0:A0:99:05:EE:20:F9:57:8D:9C:8E:CB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313A56337C68CB63066DEC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38b9eb2b-6d61-3786-961d-4f0ddaa8f3e5.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        67.70.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:a5:63:37:c6:8c:b6:30:66:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=feb5f030-71d0-4795-970c-9c6ac060a2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:d1:57:28:d5:b3:59:a7:79:f1:c1:12:13:
                    bf:7c:ba:d8:4e:8f:57:11:95:4e:ad:bc:53:5c:09:
                    33:0c:57:79:7e:8d:06:da:a9:6f:4e:20:9f:95:7a:
                    c9:fd:c1:c5:95:3b:87:aa:cb:21:85:c6:97:6f:27:
                    83:b6:42:b5:4e:54:61:e2:0f:b4:8a:e9:b0:5d:0f:
                    d8:13:d9:b9:83:08:97:4d:35:18:88:45:21:46:5d:
                    6c:99:ee:ec:d6:22:ad:13:18:02:10:30:38:df:b7:
                    20:18:91:a1:ee:a3:ff:65:aa:dd:4a:18:e2:25:94:
                    22:cf:ba:c0:cc:a5:d8:12:82:8b:b3:93:b9:56:9a:
                    9b:26:b8:31:3a:e4:58:13:5b:84:f0:fe:e1:53:6a:
                    f9:c3:30:25:7e:80:a7:27:8e:bc:c5:20:f3:61:92:
                    10:b0:dd:ea:76:4d:a9:27:a1:a7:58:95:b5:28:31:
                    29:52:8a:57:a3:22:0c:97:6c:60:aa:c7:3f:d0:89:
                    02:49:38:f3:c9:45:a7:97:f5:a3:a8:5c:29:58:53:
                    7c:4e:34:3c:a4:6b:c7:c1:18:82:60:55:52:10:71:
                    8b:36:1d:56:42:1a:f7:cc:f4:36:9d:ed:1e:f9:62:
                    84:51:e3:2a:6c:9c:21:f8:b9:80:48:e3:0e:30:f1:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:3E:CC:1F:DC:FA:17:A0:A0:99:05:EE:20:F9:57:8D:9C:8E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38b9eb2b-6d61-3786-961d-4f0ddaa8f3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:a9:7b:d6:98:6f:fb:a1:1c:42:7f:51:2c:6d:e4:8a:bc:
         38:6d:6f:3c:9f:71:5c:63:3b:f5:57:a1:ae:f3:8f:50:88:6a:
         06:3e:39:f7:37:3b:06:36:73:dc:37:ff:67:9d:77:b7:4f:5b:
         dd:9a:33:f2:8c:8a:2b:e0:38:99:51:6c:7c:d7:f9:3d:ec:0c:
         34:5b:c7:ee:d0:ff:2a:90:0d:e7:47:45:85:de:aa:47:69:31:
         d2:b7:92:91:69:f3:d8:81:64:0c:70:01:d5:5b:97:18:15:05:
         97:fd:95:ea:3f:d9:17:95:2e:fb:85:2d:32:bc:78:fb:53:a6:
         24:21:96:93:25:a3:60:0a:5b:91:16:c7:9e:5f:1c:85:30:5e:
         96:69:53:97:40:b0:e9:7d:fd:6e:e9:c3:44:02:cc:dd:20:22:
         6b:f9:c6:a5:e3:45:66:fc:fd:41:45:b2:cd:e4:ce:e0:06:b9:
         9a:ac:40:fa:8b:02:20:fc:0a:c3:f9:dc:34:e9:55:e4:53:10:
         a1:30:44:ba:e8:e9:ba:8e:80:25:be:91:16:0b:44:63:4b:d1:
         e7:df:87:5b:e7:6a:7a:18:4b:dd:3f:de:14:11:4d:2e:07:46:
         da:be:d5:08:57:2c:0e:56:e5:6d:48:39:6c:8a:9b:18:19:12:
         aa:ae:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----