Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb5c7c9-6a0b-316c-a1cb-f8dd09c8e40f.roa
File:                     6eb5c7c9-6a0b-316c-a1cb-f8dd09c8e40f.roa (raw, json)
Hash identifier:          sk9ANkGBMAP30SGwx5J1sFtNuiXCxmlhSFSCEq7RcA8=
Subject key identifier:   E0:39:06:49:3A:7F:1C:A0:88:3A:0D:70:E1:DC:9D:17:F0:7B:6D:E8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4E72FE2608C0EDD7B1640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb5c7c9-6a0b-316c-a1cb-f8dd09c8e40f.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        174.90.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:e7:2f:e2:60:8c:0e:dd:7b:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=dd2e59dd-d611-4ca9-825a-ac48fe0ed247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:e4:71:30:e3:b9:3c:1e:47:35:24:19:56:
                    c2:cc:b6:8a:5e:d9:2c:4e:12:85:ef:84:97:db:29:
                    bb:78:1e:81:40:54:df:8d:ff:bd:ab:00:96:23:08:
                    3a:1a:5c:7b:20:e6:f1:bf:a1:e7:30:34:57:ed:8b:
                    44:77:26:8f:18:27:5b:ea:7c:a0:7b:1b:3e:bd:3e:
                    e8:19:7b:d2:61:13:a0:28:fd:a3:0f:d5:73:80:a7:
                    de:f9:62:52:26:0c:d4:b0:89:37:ce:3c:c2:2c:cb:
                    0a:39:93:7f:99:e4:3a:fe:05:35:bf:eb:27:c9:b0:
                    8b:99:6f:f1:1c:49:eb:4e:74:07:1f:4c:dc:f9:2a:
                    5c:51:6a:1e:c1:f0:63:ec:e4:c8:3a:39:48:12:70:
                    ba:8b:90:ed:97:7b:52:f9:fa:94:02:10:6f:65:f2:
                    0a:21:c0:6d:75:63:78:a9:c5:ae:48:65:b7:9b:0c:
                    ea:5c:53:ce:97:d0:3c:b0:b2:c7:f1:a9:c7:55:f5:
                    95:8a:40:17:8d:be:dc:20:05:95:c5:9d:c3:c1:bb:
                    75:4d:4b:2b:d5:01:11:86:0d:bb:0d:86:07:c6:93:
                    43:56:5a:a0:a4:64:84:c1:3b:7b:3b:af:20:f5:3a:
                    8e:94:1f:df:6e:50:0a:e8:95:c2:03:26:14:02:f8:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:06:49:3A:7F:1C:A0:88:3A:0D:70:E1:DC:9D:17:F0:7B:6D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb5c7c9-6a0b-316c-a1cb-f8dd09c8e40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:f4:4c:e6:84:9c:22:2a:3f:20:fe:25:7d:ff:54:61:ed:
         af:08:5f:46:79:5f:d4:a8:49:11:7d:f9:dc:e3:06:46:a9:d3:
         b7:3e:b6:e4:ca:8f:d7:8b:60:4d:3a:70:db:e7:b9:07:cb:9f:
         4c:2a:60:0e:77:cc:57:bf:12:4b:df:14:77:d1:b4:4a:97:e6:
         c7:37:d5:4b:13:e5:30:42:46:f8:bd:b5:56:e9:d2:fe:7a:45:
         ae:07:b2:f4:34:d9:ad:1d:17:b4:94:2a:1b:03:fd:5d:96:45:
         f8:51:96:f3:78:ab:ab:8c:ec:64:ee:ce:0f:86:70:cd:df:ad:
         2f:0c:71:08:8d:fc:11:9f:42:76:cf:69:ee:e1:23:6c:c1:ca:
         0f:74:e1:94:29:33:51:c0:a8:50:e9:44:7a:da:fe:72:4a:95:
         70:da:00:23:53:66:f0:0d:11:cc:0a:75:61:61:3d:57:7c:39:
         09:09:53:a3:3e:eb:cf:47:fe:5c:08:a2:df:e8:94:e3:26:42:
         d9:d8:e4:04:c7:6f:45:35:3a:e7:6d:0f:04:d5:28:f7:c5:93:
         66:5a:62:75:bb:f7:46:50:1c:34:64:5f:9b:0d:c1:11:e0:f5:
         fd:69:2a:a9:3e:dd:fe:01:a2:f2:29:51:41:81:4d:43:a8:f7:
         07:b2:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----