Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54ad4773-0210-36e6-9e5a-5f0b5f3a667b.roa
File:                     54ad4773-0210-36e6-9e5a-5f0b5f3a667b.roa (raw, json)
Hash identifier:          XZEhV/EQv1lmayf9NQYgMaAbyZimBBQ9dbfARaI1BMA=
Subject key identifier:   5A:C1:04:09:84:AE:DD:59:B2:43:AB:24:4B:B1:B2:E5:4D:40:D5:35
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74FC5021595928A9F0F380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54ad4773-0210-36e6-9e5a-5f0b5f3a667b.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        69.158.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:fc:50:21:59:59:28:a9:f0:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=47e4853e-5251-45a9-9c89-f7734d8a5740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:85:0a:4d:30:52:88:b1:42:48:3e:fa:54:89:
                    83:b6:13:c7:a1:6f:76:84:b1:e6:15:70:38:37:53:
                    f8:d6:d1:fd:21:b3:a7:66:c1:9c:98:ef:86:ce:3f:
                    62:0b:69:b2:76:5b:ec:f7:7a:00:7c:66:11:b6:c1:
                    d4:85:18:4b:77:46:37:fb:ef:ae:b0:ea:dd:cf:81:
                    2a:50:98:6c:b4:ac:59:75:ca:6b:10:e0:60:ec:f9:
                    56:40:04:d3:41:7b:73:a2:c0:c0:13:be:57:cc:f4:
                    72:a3:c9:2e:2f:7e:76:9a:ba:42:3d:01:90:00:13:
                    72:6c:85:90:76:98:5c:c0:fa:20:a7:a2:2c:fa:af:
                    26:be:41:a2:5f:64:60:d3:b5:5f:d5:a0:87:98:b3:
                    42:1e:fe:7c:4b:30:cd:f1:29:45:64:ca:62:68:51:
                    73:95:7b:af:d9:34:bf:24:2c:ee:06:a4:39:07:f9:
                    f5:d3:e7:fa:f1:69:fe:ed:50:bf:4f:85:69:78:99:
                    d8:de:41:af:4f:d9:83:d6:38:14:c8:a6:9c:4c:26:
                    db:60:57:13:08:10:6e:f5:c2:85:73:6d:1e:c7:96:
                    aa:3b:a9:f6:ca:98:64:8c:2c:3d:ff:5c:f9:ef:fb:
                    26:28:2e:1b:38:ea:3a:bc:b1:d0:89:29:50:36:63:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:04:09:84:AE:DD:59:B2:43:AB:24:4B:B1:B2:E5:4D:40:D5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54ad4773-0210-36e6-9e5a-5f0b5f3a667b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:23:d7:39:d1:26:5f:a9:75:d9:66:04:19:1f:80:00:d1:af:
         68:f8:fd:9b:35:15:c0:3b:b9:db:e0:0b:5e:ae:71:5b:00:ff:
         57:02:0e:cd:b8:e8:11:ca:22:59:e0:36:ef:c4:bb:b1:c5:9e:
         07:3a:cc:bd:29:e7:75:78:9f:c9:6e:57:a0:84:43:3f:be:c0:
         b7:10:81:5d:fb:1d:47:40:e7:4e:7d:14:84:b9:6d:bb:18:7c:
         03:99:1d:fd:2c:c4:e3:a5:65:5a:10:fb:b4:3b:95:b6:28:7e:
         e1:10:12:bd:51:34:e6:54:01:dd:f9:7d:1e:61:4c:ab:93:8b:
         15:27:91:ed:7f:4b:e3:09:4a:e6:6d:0e:3b:e7:91:e5:16:29:
         9e:b3:61:83:48:99:e8:c7:b1:59:e7:4c:50:41:26:10:bd:3f:
         2a:ff:ab:16:d1:33:bf:d6:47:07:c4:37:44:c0:4e:23:55:ce:
         11:35:58:ee:8e:97:15:1e:27:ca:6d:0d:56:91:0f:fb:08:3e:
         fd:e5:09:3f:1c:4f:09:ea:4b:4f:a4:da:1a:cb:67:8e:e4:b7:
         14:b8:84:3b:01:d7:fd:33:a3:f4:4d:aa:89:63:85:00:25:21:
         de:ff:cf:8e:24:92:e3:ef:b8:38:1a:ae:2c:a9:35:47:df:62:
         13:8a:00:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdPxQIVlZKKnw84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDdlNDg1M2UtNTI1MS00NWE5LTljODktZjc3MzRkOGE1NzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYUKTTBSiLFCSD76VImDthPHoW92hLHmFXA4
N1P41tH9IbOnZsGcmO+Gzj9iC2mydlvs93oAfGYRtsHUhRhLd0Y3+++usOrdz4Eq
UJhstKxZdcprEOBg7PlWQATTQXtzosDAE75XzPRyo8kuL352mrpCPQGQABNybIWQ
dphcwPogp6Is+q8mvkGiX2Rg07Vf1aCHmLNCHv58SzDN8SlFZMpiaFFzlXuv2TS/
JCzuBqQ5B/n10+f68Wn+7VC/T4VpeJnY3kGvT9mD1jgUyKacTCbbYFcTCBBu9cKF
c20ex5aqO6n2yphkjCw9/1z57/smKC4bOOo6vLHQiSlQNmMSlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFrBBAmErt1ZskOrJEuxsuVNQNU1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTRhZDQ3NzMtMDIxMC0z
NmU2LTllNWEtNWYwYjVmM2E2NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARZ73MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEj1znRJl+pddlmBBkfgADRr2j4/Zs1FcA7udvgC16ucVsA/1cCDs24
6BHKIlngNu/Eu7HFngc6zL0p53V4n8luV6CEQz++wLcQgV37HUdA5059FIS5bbsY
fAOZHf0sxOOlZVoQ+7Q7lbYofuEQEr1RNOZUAd35fR5hTKuTixUnke1/S+MJSuZt
DjvnkeUWKZ6zYYNImejHsVnnTFBBJhC9Pyr/qxbRM7/WRwfEN0TATiNVzhE1WO6O
lxUeJ8ptDVaRD/sIPv3lCT8cTwnqS0+k2hrLZ47ktxS4hDsB1/0zo/RNqoljhQAl
Id7/z44kkuPvuDgariypNUffYhOKAMs=
-----END CERTIFICATE-----