Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dd33d7c-9950-325b-949b-78e9d10bb545.roa
File:                     3dd33d7c-9950-325b-949b-78e9d10bb545.roa (raw, json)
Hash identifier:          o3TXCgCZZnmffOaRut+oH+DaecMjNo9SvojMJrMrWA0=
Subject key identifier:   10:06:1D:83:E9:B9:59:ED:4E:1D:DC:7E:63:77:4F:33:22:3D:1A:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3E98763C226F427D4CC80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dd33d7c-9950-325b-949b-78e9d10bb545.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     12132
IP address blocks:        67.70.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:e9:87:63:c2:26:f4:27:d4:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=6ed42480-07fe-4073-b21d-7b6145e6f34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:91:b4:c7:25:85:2e:bb:0a:d8:09:84:44:de:
                    31:15:1b:26:b4:21:d4:4d:8e:7b:94:3b:d4:84:f2:
                    17:c6:a9:5f:ec:9a:a0:65:1d:b1:bc:6b:09:b1:83:
                    a1:91:c0:21:cb:5b:03:fd:99:31:5c:3a:29:ef:cf:
                    64:d4:a0:0f:a5:12:69:5f:da:55:62:92:0b:41:d3:
                    14:0c:25:f9:78:4d:c5:2d:b4:cd:37:41:05:ac:7d:
                    8d:39:a6:ec:98:32:31:49:65:6f:e1:0f:48:e2:b9:
                    02:b9:c5:d2:47:d3:e1:d3:6b:6e:b6:8b:d2:02:a5:
                    69:09:85:4a:5d:8f:71:ff:f5:ef:d4:3a:aa:03:6f:
                    9d:59:46:b5:0e:40:fc:ca:b5:ee:8e:63:7d:78:e5:
                    25:4a:4b:61:0c:11:3c:a6:ad:f3:4c:b8:c2:0c:b4:
                    71:8a:2e:d6:50:77:e3:66:57:f9:35:e2:eb:a9:b5:
                    ab:68:31:44:62:4b:09:89:46:31:8d:00:b6:0e:9e:
                    b5:0d:53:28:de:25:73:07:42:49:61:84:c3:d6:7a:
                    3c:f7:b3:2a:55:12:bc:59:b4:93:ba:d6:ef:26:43:
                    23:94:88:be:55:f7:ad:9e:c0:e4:20:f0:b3:e2:1d:
                    de:d6:43:81:b6:75:ab:00:c7:27:08:8a:f8:ab:5d:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:06:1D:83:E9:B9:59:ED:4E:1D:DC:7E:63:77:4F:33:22:3D:1A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dd33d7c-9950-325b-949b-78e9d10bb545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:c1:3e:8b:04:ca:53:b5:56:21:83:d4:c8:a1:4a:d9:5b:
         26:ca:bc:c1:ff:98:a1:d1:ed:b6:0c:68:a0:fc:5e:9c:0c:e9:
         03:bb:96:69:bb:95:3c:b8:7a:c1:23:c3:25:f8:29:5b:a8:bc:
         bd:c7:ce:b4:3e:51:9a:a1:4a:4d:34:23:61:8d:e8:82:3d:1a:
         28:ab:96:b4:ae:2d:36:7b:fd:cd:be:39:17:a8:f5:b4:2a:cd:
         54:5b:b9:76:f9:24:12:04:d5:2f:9e:3b:fa:e4:69:6f:e8:3b:
         a8:2a:eb:5e:f4:22:e9:04:30:29:cf:bb:1b:0b:2c:a4:98:0f:
         c2:2b:33:bc:24:fa:05:b0:0a:f5:c9:9b:42:92:f4:32:b5:a4:
         09:19:91:aa:82:68:42:a6:b2:b7:02:c0:7b:1b:0c:60:7a:17:
         d7:a1:12:80:8a:93:84:08:d3:2f:b5:0f:de:36:c9:a0:a2:eb:
         3e:ef:45:21:0b:10:f2:92:49:8d:80:5b:5f:88:d5:b4:86:91:
         fe:f4:aa:76:e3:2e:ce:59:a8:7e:2c:27:7f:b6:33:7b:a6:96:
         46:9e:36:45:48:56:1f:9f:93:74:23:1f:c1:f6:1a:c7:7f:9d:
         70:ec:b0:15:35:57:ab:4e:a0:d2:c9:5e:89:72:5d:2d:13:e8:
         29:58:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----