Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57234f73-2983-3af9-97d8-7e52f70c280e.roa
File:                     57234f73-2983-3af9-97d8-7e52f70c280e.roa (raw, json)
Hash identifier:          zrviUseBJlonuCNGRrQ6tkPtv11x1RUbXCKjm+/MPnw=
Subject key identifier:   40:39:DA:03:6B:D6:68:5D:D4:D2:C3:D7:E6:0F:03:6B:F9:F5:84:83
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74C4F6233A1CAEA11E4380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57234f73-2983-3af9-97d8-7e52f70c280e.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        50.100.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:c4:f6:23:3a:1c:ae:a1:1e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=060389e4-0354-4dbe-9958-3fd799c7f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:c2:d6:0e:6e:c8:d1:c4:05:d8:ac:22:bb:
                    2b:7d:f7:a9:db:f2:e0:39:54:90:67:aa:10:41:33:
                    a3:22:c1:69:e1:85:fe:b5:12:4c:7e:59:29:6f:0f:
                    94:84:76:ff:85:19:a8:e3:8a:83:c9:12:b7:0d:70:
                    6f:2a:47:08:3d:53:77:4e:f3:9d:45:21:e2:1b:ec:
                    29:92:c3:17:c2:4a:17:d9:f6:6b:47:2c:84:80:1e:
                    e8:a3:78:9f:56:94:92:97:07:d5:8a:c6:64:7d:e7:
                    76:ea:97:0b:41:0b:7e:1e:a3:cb:56:96:99:b0:7a:
                    8c:5c:af:05:04:f3:0e:44:75:3c:cd:92:c1:dc:87:
                    46:0a:c9:1b:04:36:bd:55:46:45:b8:ee:85:d7:f3:
                    39:e7:af:0d:29:4c:c1:6e:c2:44:51:86:5e:b3:d5:
                    b5:3b:24:ed:11:23:0c:60:4f:b8:67:ef:f6:77:13:
                    86:61:45:57:5f:6f:5b:f8:83:20:f8:f0:e2:76:55:
                    94:10:c4:77:ee:fc:c1:29:89:90:d9:e4:7b:89:65:
                    0b:99:8a:78:8b:89:38:80:bd:40:14:d3:04:b6:4e:
                    dd:4f:f5:93:f4:9e:98:69:21:9b:99:4d:4f:8c:50:
                    51:b8:be:b5:92:7a:27:7f:b1:39:c2:85:61:29:01:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:DA:03:6B:D6:68:5D:D4:D2:C3:D7:E6:0F:03:6B:F9:F5:84:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57234f73-2983-3af9-97d8-7e52f70c280e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:85:bb:b6:73:c6:45:e7:4b:24:d5:3e:48:3e:cd:46:65:85:
         2c:7f:ab:b6:a3:a6:5f:42:e1:48:d7:f9:9e:8d:a0:40:76:7a:
         34:dd:31:77:65:ec:74:69:a5:9c:e8:5f:f0:68:bc:8c:4f:13:
         36:1e:5c:93:b3:fe:b8:ff:54:ec:7e:ac:f3:7f:cc:3e:ba:6b:
         17:56:38:60:48:08:ed:a6:73:70:6d:ec:25:d2:11:ca:f5:73:
         3d:ec:d0:49:c7:b3:b4:a1:56:54:79:a0:e2:a2:c2:f6:a0:d4:
         95:df:42:86:0b:f4:51:3a:2e:db:70:7f:51:05:ce:b5:e6:dc:
         11:cd:07:6e:26:6a:2e:de:7a:97:13:0c:c3:04:84:c4:7d:cf:
         79:8f:0b:6e:ab:fb:6e:d3:81:ea:aa:e3:fe:db:04:80:52:cf:
         99:3f:68:ff:4c:8e:3a:a1:0a:da:fc:b0:8b:f2:d8:ec:f4:a7:
         8a:a6:4b:06:cb:21:ef:2a:eb:dd:c8:b6:6b:63:fb:d7:d4:6a:
         56:30:d9:85:32:e3:8d:42:9b:6b:43:13:8c:54:d7:c1:8e:31:
         6e:ce:4c:cb:e0:77:75:92:5b:eb:a7:2b:d6:e4:0b:c2:94:7a:
         30:e5:2b:1f:1a:d0:38:15:8a:9f:ed:eb:dd:da:1e:cd:ef:f0:
         02:be:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org