Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4cf5e7ac-1070-3d2b-9d7f-86ac7bffb9fd.roa
File:                     4cf5e7ac-1070-3d2b-9d7f-86ac7bffb9fd.roa (raw, json)
Hash identifier:          l5sLuftXmaWqjr/0SFsI7IjpSSFJW1YfGcBcRbiuvfw=
Subject key identifier:   36:B7:E7:B3:1E:45:74:EE:2A:B2:FC:80:94:3C:FB:3E:7B:8C:64:F8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75CE667D84D978B8702640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4cf5e7ac-1070-3d2b-9d7f-86ac7bffb9fd.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        209.17.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:ce:66:7d:84:d9:78:b8:70:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=8d83bea8-1b69-4ce4-b978-bd228d14ae9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:45:13:d2:36:0a:86:9d:48:00:11:76:e0:
                    ad:dc:ec:fd:e4:49:38:0e:61:93:d8:4c:9f:a2:0f:
                    09:5e:3d:4b:51:bb:4b:77:af:42:4b:06:3d:34:88:
                    63:0b:b2:a4:8f:08:21:2c:b4:d7:2d:dd:81:1b:94:
                    4d:74:33:6f:e1:75:8c:ca:5b:3f:44:e6:b4:b4:74:
                    8a:bf:e4:d7:9c:70:71:cb:27:bf:dc:cf:55:ee:07:
                    de:2b:f2:47:24:67:e3:6e:a1:09:73:a3:60:2a:3c:
                    d2:68:9c:0f:4c:f9:4e:de:18:19:82:a5:7d:46:42:
                    1c:45:4f:19:a5:22:bd:52:50:1c:72:b3:c6:96:25:
                    49:ec:78:bf:93:0f:98:33:be:43:dd:be:ca:e1:6a:
                    ce:68:2f:23:6c:a4:47:18:4b:3c:93:3e:7c:ad:38:
                    c3:46:15:54:52:a9:c2:20:ac:9e:f9:4c:b7:94:74:
                    22:1b:29:8f:43:6f:90:e4:40:a3:dc:09:dc:ee:12:
                    ad:c9:ed:62:7c:9c:5e:9b:14:ef:3d:c5:cd:88:03:
                    b5:fe:94:97:cc:cb:27:11:f2:56:a6:99:23:56:95:
                    7e:0f:18:d8:c8:91:90:8c:e3:eb:c5:73:2d:54:1f:
                    75:54:67:bd:b7:00:f4:78:cb:1e:bc:51:15:d7:85:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:E7:B3:1E:45:74:EE:2A:B2:FC:80:94:3C:FB:3E:7B:8C:64:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4cf5e7ac-1070-3d2b-9d7f-86ac7bffb9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:ef:d8:f8:f6:b4:d2:86:3c:8f:ca:44:28:36:69:31:09:
         e8:b7:0b:91:a8:b6:8b:ce:a4:39:75:25:84:23:02:d2:c1:55:
         fd:b3:1e:d1:75:6c:51:b7:a1:5d:3b:2f:ef:95:06:f2:26:b0:
         a7:1a:54:7d:3d:23:7f:e8:3c:d9:d3:b2:59:4a:1d:32:98:ff:
         2e:19:0a:7f:a4:41:90:95:6f:86:52:d7:6f:6a:10:86:c1:31:
         56:4e:61:f9:12:cd:92:29:0f:eb:38:d5:eb:5b:17:40:76:b1:
         f7:fe:79:b8:da:35:aa:32:9c:43:71:39:59:1e:bc:75:9b:f3:
         53:d1:d5:42:04:aa:ee:6b:b0:a6:c7:3a:60:c2:33:8c:45:7e:
         dc:73:57:1a:f7:79:ac:5a:8e:f9:f3:16:a5:cd:97:ca:d1:21:
         83:da:d1:97:b9:cd:7d:ae:36:bf:05:02:f7:3a:ad:3c:f6:70:
         e5:34:6b:a0:f2:ee:3e:74:b9:9a:86:ef:3a:37:45:29:78:f0:
         ea:6c:3f:2b:1b:57:4d:df:04:d3:96:01:5a:dc:ff:44:7d:40:
         c9:b1:4a:95:a8:a5:22:59:c4:3f:77:e4:bd:75:a4:b7:8b:bf:
         9e:12:f7:21:26:98:1f:92:26:57:6a:a6:a6:ef:39:de:ab:c1:
         24:5a:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----