Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5fa62d6d-123d-3d8e-b692-b8ee1b7568e4.roa
File:                     5fa62d6d-123d-3d8e-b692-b8ee1b7568e4.roa (raw, json)
Hash identifier:          3cIB4RnDtjyvQuvsgGtQYTL5H2jjvVchdj6vhxzUSIs=
Subject key identifier:   99:C5:47:88:64:95:40:4A:41:B5:A7:9B:58:62:69:B7:FB:97:A9:45
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B30A093DE4C752F39E3800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5fa62d6d-123d-3d8e-b692-b8ee1b7568e4.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        67.68.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:0a:09:3d:e4:c7:52:f3:9e:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=089c9a48-47ce-43cf-9cbc-69b092ff7f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:62:76:cc:89:e4:30:9c:f9:b9:2b:34:dd:
                    b5:5c:80:dc:88:bb:b7:c9:3e:1d:00:01:ff:3e:f8:
                    5e:30:1c:39:37:bb:f9:cb:5d:e0:6d:9a:eb:db:7b:
                    ce:2e:ea:62:65:57:a3:40:4a:61:57:b8:51:9e:bc:
                    86:9c:0c:1f:bf:22:b5:88:f4:b4:1f:6b:41:6d:d7:
                    8e:84:be:c7:61:23:17:4d:e3:7a:79:91:86:b0:28:
                    a2:af:08:67:11:2b:5c:66:ca:31:bf:1c:7b:a2:dd:
                    34:22:4c:f7:58:f7:03:f4:95:61:e4:a2:3f:3c:06:
                    04:91:a7:0b:4f:19:fb:a7:98:22:23:99:c6:1b:54:
                    b9:51:a2:ad:ac:7f:cb:7b:2c:27:8f:15:b5:2c:72:
                    fa:fc:75:53:fe:33:a5:45:68:43:66:b8:bb:cd:3e:
                    1f:d5:e7:c5:8e:bf:74:1c:0c:d6:bf:d0:7b:5e:83:
                    6f:51:1b:38:0d:7f:a8:a3:3f:dd:2c:2d:84:40:1b:
                    5a:a8:db:27:c3:7f:1a:d5:1d:60:be:d0:27:6e:b4:
                    cf:e8:8f:c1:ef:be:36:94:29:a3:07:e2:5f:32:34:
                    3e:40:ff:e1:9e:e3:4a:cc:22:7f:48:37:ac:7d:8a:
                    8c:ea:60:94:19:7a:63:55:16:35:2d:6b:28:d5:18:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:47:88:64:95:40:4A:41:B5:A7:9B:58:62:69:B7:FB:97:A9:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5fa62d6d-123d-3d8e-b692-b8ee1b7568e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:7b:f3:85:2c:4f:c9:bf:d4:a4:d6:7b:75:eb:5c:b4:82:
         5f:0b:0e:5d:e9:de:bc:df:d4:39:16:66:ea:8e:93:f9:d9:4e:
         55:e2:06:c2:a9:2f:81:8b:6c:b4:d4:ca:d0:b5:18:9c:47:08:
         e9:af:63:2b:f1:37:61:d1:84:75:07:af:cd:6b:ff:c4:21:c0:
         67:88:8f:b6:98:69:75:fe:a5:67:51:bc:0d:9e:e4:7b:23:3b:
         ce:85:e6:12:3a:8b:24:81:19:69:2a:2a:59:d9:08:3d:56:b2:
         ff:54:f0:4e:80:cf:cd:70:57:04:80:11:ae:3c:7d:1a:e2:f7:
         fc:b5:61:cd:84:0e:60:78:ac:fe:89:2e:5f:3e:64:9f:39:fe:
         a2:96:ae:04:d0:9c:f4:eb:9e:34:42:13:ce:72:ee:74:b4:aa:
         56:30:8b:99:41:f5:95:fb:d4:d0:d8:b3:b7:94:fc:2b:65:42:
         ce:1d:48:62:4d:3a:47:3f:23:95:96:49:e5:a1:b7:97:df:c4:
         ca:7e:e9:97:b2:2c:e7:c6:a4:b3:64:ae:9f:eb:a3:92:4d:cd:
         6e:a6:b1:a2:0e:6b:d4:57:bb:a2:33:6d:5d:a1:36:99:f2:ce:
         91:cc:93:14:2d:af:20:a7:f4:ed:8c:b3:a7:60:9d:d6:1b:e4:
         de:5e:89:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----