Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b0860d2-7cdd-3a44-a776-177a9de7b515.roa
File:                     7b0860d2-7cdd-3a44-a776-177a9de7b515.roa (raw, json)
Hash identifier:          kfLQY01VAOBTA8TM92WaIK3pHLKyQq+Vl6Z76BvYAnc=
Subject key identifier:   E9:67:D7:EE:BE:AE:85:EC:B7:0C:05:98:11:30:02:9D:F5:4A:EC:8E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314620A765197CC7228B100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b0860d2-7cdd-3a44-a776-177a9de7b515.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        174.94.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:62:0a:76:51:97:cc:72:28:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=5f16be5f-5fc0-4ee5-83ce-dcfe820838e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:0d:34:e3:39:aa:f3:87:83:c3:79:b1:d3:
                    67:26:72:54:ac:cf:b7:de:1b:37:cf:d9:e1:16:d7:
                    8c:9a:2b:3d:08:2a:b9:0d:1a:6a:0c:0c:7e:97:cf:
                    ca:2c:14:6f:d3:53:f8:26:0b:fd:ae:71:f1:e9:22:
                    75:fa:cd:8a:0d:34:7b:60:e4:f4:da:39:04:d4:d6:
                    36:c3:b7:53:f3:b2:42:8f:ef:3e:5a:85:2a:09:99:
                    ac:b8:a5:64:9d:f9:ad:5a:a9:78:5e:a3:da:eb:5c:
                    af:dc:84:83:da:d6:d8:1b:31:9c:f9:54:55:fe:49:
                    36:46:2f:29:29:5e:c7:99:b5:5e:9c:71:c1:33:de:
                    80:b1:0b:a9:c7:a2:40:09:2a:e7:f7:55:49:6f:26:
                    b4:25:bc:a3:45:21:43:71:04:d3:a0:24:0b:c3:dd:
                    d6:17:70:c6:33:aa:1d:66:75:21:b8:2e:94:01:0a:
                    92:b5:97:30:dd:86:6a:db:f6:d5:5c:db:d7:21:36:
                    05:13:1e:20:92:c2:59:c7:4e:51:0f:d1:82:98:81:
                    af:45:86:e5:ed:03:ab:78:28:3d:58:a1:b1:29:dd:
                    0f:84:5b:9b:cf:28:86:a3:3f:3b:a8:a5:ef:5c:a9:
                    e1:f2:3b:27:1f:fe:81:96:5a:94:0f:fe:98:1a:e1:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:67:D7:EE:BE:AE:85:EC:B7:0C:05:98:11:30:02:9D:F5:4A:EC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b0860d2-7cdd-3a44-a776-177a9de7b515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:a4:e2:f6:dc:1f:a0:8b:7f:37:68:71:19:65:55:5c:fd:
         37:89:69:e4:4d:54:dd:a8:ce:01:40:90:9a:dc:aa:62:27:18:
         17:94:7a:22:b6:b7:cb:3d:e1:33:e4:9d:05:dc:33:e0:23:be:
         50:d0:ab:72:03:0b:e3:3a:ce:74:57:b1:26:de:49:48:74:be:
         11:0c:f3:68:0b:a6:c7:5f:9c:a8:82:b9:aa:14:46:c6:a8:e6:
         bc:29:e4:15:a8:3d:42:f4:68:ff:d0:6b:90:a5:ee:ee:3f:58:
         c0:ad:76:62:04:ec:f5:30:08:3e:ba:1c:fa:23:a3:6b:63:79:
         86:65:fb:14:25:c6:13:6a:29:eb:db:a8:f7:73:81:65:2e:34:
         e8:8f:e8:cb:be:de:06:60:dc:dd:3d:82:c7:50:86:7e:b7:08:
         71:f2:c8:2f:a9:3c:6c:c1:fb:25:a4:4c:4c:11:58:77:c7:33:
         a6:33:3b:ca:11:d8:a9:89:ae:2c:16:af:ad:65:45:1e:14:77:
         e7:31:b9:01:63:57:05:1e:90:16:5d:fc:51:b0:f5:68:56:bb:
         fe:86:fe:63:9a:1c:a1:f4:f8:44:a4:a7:e3:bf:e6:bf:77:76:
         b8:ce:50:9e:69:99:16:f4:ec:d2:31:71:f5:31:0b:ce:c2:12:
         6b:0e:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----