Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52b53b62-acf0-38db-b131-9595cc88156b.roa
File:                     52b53b62-acf0-38db-b131-9595cc88156b.roa (raw, json)
Hash identifier:          xdzj+Or7Foaxj/vpMR+/P24yoeDc2iJLsra4dm8CFzc=
Subject key identifier:   21:09:38:08:06:D2:5D:3F:42:3C:54:D4:4C:2E:F2:32:7B:38:6B:61
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493152988B5E8D4BE40407800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52b53b62-acf0-38db-b131-9595cc88156b.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     46872
IP address blocks:        204.101.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:29:88:b5:e8:d4:be:40:40:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=710dc999-07d0-4470-b509-303b54a47a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ff:97:67:27:19:9c:7b:b9:f3:f1:12:30:2b:
                    fc:f3:e5:71:a5:e2:d1:b2:47:72:f2:dc:58:75:99:
                    87:45:03:35:6f:8b:32:d7:eb:9d:7b:04:ee:4f:1a:
                    21:30:b4:71:a5:21:8d:90:10:4a:03:a4:26:f0:12:
                    14:07:ec:f4:f0:1f:01:5d:b2:af:8f:cc:02:ce:5f:
                    d8:40:32:af:c7:54:84:a5:87:43:7f:a7:ea:e7:af:
                    ac:56:d3:d8:06:3c:b0:14:85:7e:f1:90:e1:27:19:
                    bd:b0:f1:aa:25:75:6d:b9:eb:d9:06:80:19:69:7a:
                    76:67:0f:1a:d9:d6:df:0f:6e:fe:78:f9:dd:3c:5a:
                    c8:e4:5e:dc:92:99:0d:b2:f9:a9:b7:32:38:4d:50:
                    cc:4a:0c:2e:2e:bc:d4:9d:54:09:9f:a0:cb:b3:ce:
                    18:9f:33:64:e0:44:9d:51:63:ce:71:5a:9e:58:15:
                    7c:14:b3:97:08:b5:df:4a:4e:d5:5a:dc:92:a0:31:
                    f7:7e:de:ed:f8:2e:71:a2:4b:21:85:8d:29:80:8c:
                    aa:99:99:2a:21:c2:9d:ed:b5:15:22:2a:6a:c5:54:
                    98:b0:19:d9:6a:1b:21:45:83:b7:df:df:da:2a:85:
                    c3:df:ec:64:59:04:8d:58:ca:76:98:bb:d2:9b:be:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:09:38:08:06:D2:5D:3F:42:3C:54:D4:4C:2E:F2:32:7B:38:6B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52b53b62-acf0-38db-b131-9595cc88156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:d3:34:d4:65:f4:f3:d1:ed:46:77:1d:ac:f9:7f:2d:01:
         0c:d6:f8:56:38:85:88:3a:7f:77:b2:92:68:a9:8b:63:d9:31:
         cc:65:63:e2:53:06:8f:61:01:5e:7b:00:98:06:16:25:aa:89:
         52:2a:1e:04:c7:10:d4:6b:dc:12:f4:46:2e:da:b7:a5:ee:04:
         a9:ee:36:89:d6:fa:c6:0e:9f:25:2d:84:fd:89:4c:62:63:6a:
         51:a4:95:d3:da:0d:dd:5a:99:6d:b4:07:ef:1b:c2:21:02:5c:
         3b:c9:28:1a:ab:8a:56:88:2d:59:a8:0b:e1:b9:f4:34:6b:a7:
         e1:9d:5d:de:15:00:1e:97:e4:d6:01:66:3b:08:69:5c:76:00:
         dc:cf:28:f6:04:d9:08:19:2e:ab:46:1d:48:50:c9:ee:8c:af:
         90:cc:93:c9:fb:fc:19:22:47:f4:0e:77:88:c5:e9:35:79:7a:
         7c:5d:b9:c4:d8:09:5d:d4:f0:76:c5:26:6e:c4:76:d4:fd:7e:
         1a:44:94:ab:a7:22:f3:0b:84:d1:54:48:5a:d2:43:5d:16:ff:
         92:2e:72:d6:2a:08:6d:12:d0:a7:03:20:fe:73:00:96:7d:4f:
         f1:9f:3f:47:52:2a:4a:3e:a3:c2:07:f3:6e:d1:4a:83:30:d9:
         67:bf:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----