Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72aac5aa-166c-3e8f-9c72-5fe45c8c223b.roa
File:                     72aac5aa-166c-3e8f-9c72-5fe45c8c223b.roa (raw, json)
Hash identifier:          fJzNojUzwgTQd0Oxh+vPQ3MbY8iVN6C2Fl5nANu403M=
Subject key identifier:   BC:44:31:C9:F3:64:AB:4D:2F:5D:98:D6:36:2B:A1:08:71:F1:E8:E9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11DB7826F75ED6C42E14D0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72aac5aa-166c-3e8f-9c72-5fe45c8c223b.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     855
IP address blocks:        142.163.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:db:78:26:f7:5e:d6:c4:2e:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=8eb27b25-e8a6-4086-b08a-3742c50d199b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:80:17:f1:53:56:fe:1d:ab:b6:8c:32:38:
                    cc:83:9c:24:d0:c7:11:25:69:67:e4:30:b3:0e:d4:
                    61:ea:a2:67:59:c1:27:e7:ef:2f:e6:ce:57:96:8c:
                    99:ae:6a:39:f8:10:fe:52:12:03:8a:a1:b7:d3:57:
                    7b:ac:f6:51:99:84:4e:a3:71:44:23:18:27:e4:5d:
                    f5:15:ea:a0:b0:7b:70:3c:91:88:85:ee:73:f0:65:
                    35:d1:2c:81:50:3a:75:92:1b:ac:69:59:c3:be:72:
                    51:2e:6f:ed:98:3c:54:35:47:12:9d:ce:e3:06:12:
                    fc:3a:dc:06:35:f0:c9:10:25:b0:16:8e:bb:16:68:
                    40:e8:b2:69:d9:7c:45:2b:08:3a:ae:93:5b:45:62:
                    4c:c2:11:6e:97:17:31:16:70:ed:a6:a1:68:2a:c0:
                    28:61:6c:ae:db:46:d9:a4:e2:93:82:d7:e4:39:03:
                    4d:f4:47:cb:4d:ed:18:2b:b4:82:17:3c:31:1a:91:
                    8d:cf:00:6d:e4:29:a5:c8:b7:e5:e9:a0:16:2e:88:
                    fa:5d:49:85:82:f2:c5:b6:8d:20:92:68:31:96:6b:
                    0d:85:78:41:1b:89:96:12:24:f3:f7:41:6f:a3:34:
                    59:d3:46:96:05:a9:54:9e:3a:46:6e:7f:69:0d:bc:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:44:31:C9:F3:64:AB:4D:2F:5D:98:D6:36:2B:A1:08:71:F1:E8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72aac5aa-166c-3e8f-9c72-5fe45c8c223b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:5b:fe:25:c5:dc:b8:e8:1e:a4:ac:7c:d3:54:f8:ee:6c:
         08:1c:42:0a:d8:56:e5:72:2d:3b:0f:0d:1c:04:f3:02:b1:23:
         5d:05:4d:c9:5b:4a:98:9c:6a:2e:28:e8:05:ee:23:8c:cf:c4:
         f4:0f:70:fc:38:44:14:0c:5e:f9:ff:6b:e0:bc:71:97:16:c7:
         4e:43:23:d9:8a:69:f9:ff:84:b2:21:35:f0:c7:94:99:37:06:
         37:d4:67:cd:a9:d8:5f:ca:d2:b9:f1:5a:9b:e8:9f:9e:76:84:
         54:64:0b:dc:fc:6e:41:d7:bd:b4:1e:0d:4e:77:51:81:f4:87:
         cd:2a:09:e8:a1:af:da:7e:36:09:48:6b:ce:8c:7b:2f:e8:71:
         79:f0:71:04:78:c4:bf:a6:63:4d:ff:28:9d:be:8b:88:3f:a7:
         ba:29:c5:6e:5c:9b:fa:5e:cd:44:5b:f3:4c:d7:8f:0b:f5:01:
         4b:f1:25:4b:1d:25:6d:81:ec:72:67:6e:52:fa:4b:aa:c7:4a:
         4c:4a:10:f8:04:bc:8f:d5:f7:da:45:6e:7b:c9:6f:e0:e3:32:
         2a:8f:33:56:71:2b:d9:ec:55:ed:53:ec:a3:a0:cc:4a:55:b5:
         fc:ac:81:d9:0a:e3:a5:55:f6:61:30:e3:df:e5:76:dd:94:6e:
         b3:38:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----