Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a4ae482-29e3-3eef-9575-d18ce79ebce2.roa
File:                     6a4ae482-29e3-3eef-9575-d18ce79ebce2.roa (raw, json)
Hash identifier:          pqKVuPI/M1YSo7pJNhNWHOO1PCYbb9NmNZgVhcsxgKk=
Subject key identifier:   23:79:5F:F7:00:C2:47:7F:F3:E0:89:DF:AA:5C:F4:B0:AF:5F:C8:14
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE46633F731A64C463C5100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a4ae482-29e3-3eef-9575-d18ce79ebce2.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        72.28.64.0/21 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:66:33:f7:31:a6:4c:46:3c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=4b5e1710-7cde-4b53-b9a6-66da6fe70e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:0e:df:5c:3d:c6:55:2a:d1:32:c8:f1:06:
                    53:4e:a3:dd:6a:b7:30:06:86:37:4e:12:fe:5b:bd:
                    c7:5d:b8:27:9e:48:cd:ca:a3:0e:0c:ca:13:21:95:
                    9a:be:97:dc:57:26:b7:fe:ea:95:43:c5:38:54:98:
                    13:e3:29:b5:62:6a:c2:23:1f:e1:2c:17:d7:23:5a:
                    fd:82:26:a4:be:6f:9c:89:5a:5e:b0:4a:78:ed:98:
                    9e:92:38:02:13:29:c5:93:76:a0:63:74:48:5c:cb:
                    de:44:b8:3b:15:56:ed:63:6e:3e:f4:ae:c8:7a:54:
                    aa:94:e4:27:e4:af:26:52:de:a2:08:62:f5:ea:6f:
                    2b:4a:4e:f4:a0:01:e2:3f:4d:3e:ba:d0:d1:b9:ec:
                    d7:f8:b1:c0:f8:3b:cd:e1:b2:df:61:06:93:8d:ab:
                    50:8b:29:4c:2b:41:65:50:8d:7c:e4:a9:cd:eb:62:
                    d3:5b:87:88:b4:04:43:bb:b6:28:b0:49:49:8e:31:
                    37:09:22:39:9d:8c:16:cd:4e:27:1e:96:1c:d0:49:
                    b6:59:ac:9d:4f:22:40:b8:df:23:eb:56:12:03:83:
                    e0:b0:c8:f6:5b:e7:0f:d8:a9:05:ba:f0:8a:67:c2:
                    cb:b7:38:55:3f:bc:a6:f5:ce:9a:53:d3:95:25:f0:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:79:5F:F7:00:C2:47:7F:F3:E0:89:DF:AA:5C:F4:B0:AF:5F:C8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a4ae482-29e3-3eef-9575-d18ce79ebce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:f5:d6:60:bb:11:fa:0d:43:40:fd:77:e5:e5:c0:22:11:
         28:28:4e:78:50:5d:fc:5a:0f:b3:81:8e:0c:4d:1d:fb:b1:d9:
         59:4a:1f:57:52:a6:24:7d:12:5b:ce:c9:81:ff:e9:5c:c9:04:
         19:24:3b:d0:61:e3:d9:f8:66:e4:d0:85:75:9b:ce:f9:9b:86:
         f9:96:bf:34:f0:01:f1:83:ed:ad:12:95:7e:58:15:8a:65:15:
         84:32:d8:8f:ba:6f:1d:b3:3f:c5:4f:d7:8d:a6:2e:6a:ce:f2:
         a0:2f:c4:90:a4:55:a4:53:ac:5a:f9:04:e8:ce:6c:26:09:3d:
         bc:70:66:70:2f:f5:3d:d2:70:2e:5a:a0:23:77:c8:33:db:18:
         e7:25:7a:a7:08:2e:0b:c6:03:66:23:eb:3f:a3:a4:09:10:b2:
         e8:e8:d9:63:fa:3b:81:14:28:76:d6:d5:4c:91:00:3e:c4:55:
         b6:4d:87:43:a8:c3:6d:22:29:dc:40:b8:a5:75:02:4a:d2:9a:
         b6:56:6b:02:5e:57:b7:cc:9e:92:82:9d:12:55:b4:a8:e4:88:
         3b:bd:2b:c0:1d:c7:ea:e3:d2:11:fb:97:dd:5a:a1:c3:94:15:
         71:30:28:a5:0c:f2:22:3d:8f:89:c6:ea:2e:ab:e1:db:8f:b8:
         50:c6:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----