Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb98dcc-775d-3324-a9b5-f7ccac9d2e43.roa
File:                     6eb98dcc-775d-3324-a9b5-f7ccac9d2e43.roa (raw, json)
Hash identifier:          UhaMNUOQKrnk8Tl+c9cMdJ8H5U48tNPhv7jUWBox56A=
Subject key identifier:   43:54:D6:B2:07:4A:14:6D:E3:5F:7C:17:11:1F:8C:E4:DD:8B:54:A2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2889E048E3402E05358BE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb98dcc-775d-3324-a9b5-f7ccac9d2e43.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        50.101.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:89:e0:48:e3:40:2e:05:35:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=481591fe-099f-4750-a87b-ad56bdcada15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:dc:d2:9c:3b:5a:63:60:64:ea:15:24:2b:
                    b8:4c:ef:bc:e5:c4:fa:93:1b:07:ef:b3:9b:ba:5a:
                    fa:ea:a3:8e:ff:3e:9c:5f:1c:06:86:30:42:95:af:
                    a8:f2:c9:e9:e2:91:56:e7:ba:7e:72:1f:c9:2a:fa:
                    23:5e:ed:cd:12:ae:70:3f:dd:c9:1e:8b:3f:73:bf:
                    9b:ec:79:e8:8a:f5:08:26:96:db:2b:61:85:29:e6:
                    6b:eb:51:b8:8f:7e:cc:e9:ec:71:de:43:d5:67:30:
                    cf:95:8c:6a:6d:84:4d:22:00:ee:77:b7:33:3c:75:
                    3f:cb:28:66:b2:da:d5:20:cc:48:fa:ad:8c:a2:c6:
                    be:64:78:d2:5f:91:57:79:af:3a:95:9b:1d:bb:e6:
                    21:77:56:13:e6:69:c8:42:fe:37:28:4c:a2:18:e1:
                    f3:53:2f:ea:be:06:85:e7:b6:6c:1c:72:1e:6c:63:
                    bb:3c:82:1f:df:01:40:eb:2f:73:21:e6:3c:3d:d1:
                    b1:71:09:24:74:f8:33:48:1f:44:71:44:d0:87:e8:
                    41:e5:a7:b3:a7:81:11:f0:5d:e9:e5:c3:72:9e:a0:
                    cb:f5:96:45:51:96:d4:c5:be:aa:5a:84:d4:cb:5f:
                    e7:db:15:27:7e:b8:8a:a0:5b:9e:16:3a:d6:36:3e:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:54:D6:B2:07:4A:14:6D:E3:5F:7C:17:11:1F:8C:E4:DD:8B:54:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6eb98dcc-775d-3324-a9b5-f7ccac9d2e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:be:fe:01:a7:8a:6c:24:1a:53:1e:66:59:c9:c5:46:1f:
         f1:63:93:5e:67:a0:19:a7:f5:fa:c0:14:6e:fb:d3:c5:be:42:
         8f:df:79:fb:db:6d:44:cf:d1:d1:27:d5:cc:e8:db:52:bd:90:
         4c:48:ce:53:1d:55:c8:89:ae:46:15:4d:40:0d:1f:d1:4c:fc:
         6f:2a:7d:1e:e9:88:2c:6e:c8:66:c7:4d:81:cd:6e:b8:ef:75:
         04:b8:a7:16:4f:c8:ee:32:75:ce:45:3a:1f:dc:f5:1d:dc:0d:
         42:39:c2:61:aa:52:92:86:82:82:e9:27:ef:2f:5d:9d:12:50:
         90:6a:18:f7:14:56:14:b5:ef:f5:d1:67:dc:b1:79:8e:4d:45:
         73:71:7c:0a:cf:42:e2:2a:78:f1:b9:14:52:e0:8f:20:d0:7c:
         a3:29:10:7d:40:98:40:61:7f:78:22:e0:eb:96:cf:74:2a:aa:
         cd:de:de:b7:fa:51:2a:d4:d5:d7:55:4f:5a:7b:94:2b:19:e7:
         4b:c4:8d:c6:4d:aa:1d:2b:08:f9:a5:30:43:65:19:45:e0:35:
         77:e2:b0:04:ee:fc:df:ea:99:31:97:34:ed:41:84:54:d2:6a:
         43:bc:19:76:e9:b0:0d:d9:1c:80:6f:2c:75:ca:01:a5:67:91:
         e6:52:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----