Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e2406cb-c5b7-348a-8491-2d1703b03f21.roa
File:                     3e2406cb-c5b7-348a-8491-2d1703b03f21.roa (raw, json)
Hash identifier:          F1JUmABOo4GaTJDeLTjfNnt5tngbvU0Ajfu28m9zrSI=
Subject key identifier:   BB:62:9F:14:F8:D9:13:92:17:B3:E7:FB:C4:B4:D7:1D:90:52:25:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74E2E54654EC463E7AC580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e2406cb-c5b7-348a-8491-2d1703b03f21.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:e2:e5:46:54:ec:46:3e:7a:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=b2e2207c-37e7-4d4b-b94b-a8a999175f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:09:ab:a9:b3:ce:68:7b:71:bf:a9:50:df:
                    39:19:39:55:7f:52:3d:40:72:80:5e:28:c4:82:06:
                    96:1a:37:36:bc:87:de:03:67:b7:19:d1:81:46:54:
                    6f:ff:70:ec:b5:03:89:64:36:9b:71:8e:1c:c7:c0:
                    2c:a5:97:2e:4f:9b:73:2a:69:95:dc:7f:ec:f5:99:
                    b9:af:7d:8b:9c:98:75:40:ba:cd:aa:1d:5c:a7:b7:
                    49:61:33:b5:e5:83:9d:d0:1e:61:61:4d:ff:ce:90:
                    35:7f:98:b4:77:81:96:86:2d:94:a5:da:e4:3d:a6:
                    84:8c:89:a3:a2:d8:59:d1:43:43:1c:21:ce:3d:05:
                    65:ce:ca:c9:b2:c8:8e:dc:86:5d:fd:14:4e:d4:28:
                    3a:56:f0:9e:9b:6e:e0:53:7f:4e:86:73:94:00:80:
                    ee:ca:72:34:9a:da:f1:bf:ba:f0:2a:ca:f6:cd:89:
                    86:38:7c:1f:ab:56:2c:4f:f4:f9:be:68:3b:05:b6:
                    10:57:1b:95:34:02:fd:d4:17:d7:c7:5c:02:28:ad:
                    e4:ce:c0:63:d0:2d:d2:c4:1b:ff:bf:f6:d3:31:25:
                    c6:b9:60:ec:fb:63:58:4d:49:4c:a8:c3:5b:9d:f1:
                    b6:25:89:7e:82:83:c7:d1:52:7f:18:fe:e2:f4:14:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:62:9F:14:F8:D9:13:92:17:B3:E7:FB:C4:B4:D7:1D:90:52:25:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e2406cb-c5b7-348a-8491-2d1703b03f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:a8:f3:9c:13:47:ff:50:52:13:2f:8a:08:b3:d7:69:33:
         90:ea:4a:09:e9:a8:14:40:dd:13:b8:29:fb:55:df:31:74:75:
         db:bb:0c:f1:d2:af:b4:0e:08:04:24:da:92:c2:d1:87:65:d9:
         68:78:81:52:ea:db:8e:c0:2e:4b:d1:16:40:e7:b1:72:b8:5c:
         af:d4:e8:3c:de:ff:c1:b2:ed:0f:3e:44:7c:f8:4e:ec:d8:7c:
         66:ea:7c:61:42:e2:b0:05:4e:27:4e:54:cf:5a:3e:e1:57:c7:
         0e:a7:c9:3a:47:a5:82:ff:48:27:95:07:f5:a5:63:ec:87:04:
         04:1b:20:44:f9:5c:93:1e:cd:08:df:cb:89:1a:de:a4:06:4f:
         0a:d0:25:74:19:f4:d4:fd:35:7d:1d:fb:05:00:ee:57:36:e4:
         18:74:82:58:ed:a7:dc:17:c7:1c:28:d4:0b:43:f1:22:5f:9c:
         b8:00:fc:c8:45:fe:90:56:a6:ba:2d:1d:50:d9:37:e2:df:36:
         b5:dc:54:da:f9:95:26:06:11:ca:92:5b:39:44:49:18:01:4a:
         2b:de:e0:00:28:4a:52:c9:90:32:d5:1a:16:03:bf:62:30:25:
         d3:74:9e:ae:65:21:42:6a:53:2d:e6:50:01:29:e9:7c:05:fd:
         78:97:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----