Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7db41359-343d-32ab-a635-da23c62f339e.roa
File:                     7db41359-343d-32ab-a635-da23c62f339e.roa (raw, json)
Hash identifier:          bz/cgdceRvr3po7a19G9fOZnX1WgfocZ6nNHMariLxo=
Subject key identifier:   49:30:2F:68:8C:B8:96:75:FE:F0:A0:A3:BF:B7:6D:E7:6C:A5:AF:B1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75C456F752F2B1509E84A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7db41359-343d-32ab-a635-da23c62f339e.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     17170
IP address blocks:        207.179.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:c4:56:f7:52:f2:b1:50:9e:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=464abce7-c40f-4533-a50b-ea5872864da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:68:f5:fb:6d:cc:d9:8a:87:07:9f:28:9e:9c:
                    e4:77:94:88:61:eb:e6:36:b5:6f:cd:11:90:f8:19:
                    65:64:c4:7a:ab:65:35:a0:7c:6d:31:d6:c3:57:bd:
                    86:67:4d:2d:3c:b9:0d:a3:43:ed:60:25:16:3a:3c:
                    88:6f:c8:24:35:bc:cc:b8:e6:e7:df:4f:4c:15:62:
                    41:d1:48:fa:66:0e:a0:97:c3:9e:f6:9c:ec:fb:11:
                    0a:15:f3:fc:16:31:b7:33:ab:7c:73:76:9b:b7:86:
                    99:15:a6:c5:11:31:84:00:39:25:ad:7b:e7:88:11:
                    7d:f3:67:41:16:c3:59:c0:da:38:c9:8a:46:87:6d:
                    70:d7:5d:b0:fc:43:b6:e3:92:4a:9c:18:56:69:b6:
                    9c:2c:37:ea:a5:89:20:9c:18:c2:fd:58:ff:d0:20:
                    36:3c:64:2d:1f:ab:4f:6d:88:ea:11:e3:cc:8f:a8:
                    4d:d5:10:fe:58:f2:11:74:31:8f:5a:e8:26:bd:f9:
                    73:c8:78:a4:a3:e4:ce:82:12:6d:f2:41:2f:b9:54:
                    01:06:ea:d3:00:bf:34:89:0e:03:8a:a8:f4:f9:e8:
                    f8:f7:59:54:60:1b:5f:75:8c:cd:94:07:4d:44:13:
                    63:51:f8:a6:33:44:9f:c3:a5:d2:ef:0b:7f:cc:3e:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:2F:68:8C:B8:96:75:FE:F0:A0:A3:BF:B7:6D:E7:6C:A5:AF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7db41359-343d-32ab-a635-da23c62f339e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:d9:a0:6e:56:9f:ba:80:61:61:db:37:78:09:12:73:82:
         70:2d:d8:69:3e:cc:67:ff:39:ac:af:b3:d5:18:df:6b:fd:b8:
         3e:c4:9b:4d:ab:30:19:d7:4a:d6:48:e0:f8:6d:22:59:a6:25:
         2c:16:65:ae:8f:69:a2:bc:a3:83:2c:ca:90:13:c8:b9:5a:96:
         5c:8b:45:b0:69:30:49:ce:f7:9e:5b:e2:3a:a8:f1:c1:29:2f:
         0b:7f:c1:33:81:cc:c1:e6:20:b2:33:40:73:e8:e0:17:0a:cc:
         05:3d:43:b9:e2:32:3d:a5:f2:5c:1e:61:ec:66:63:40:8c:ad:
         0c:cc:6f:68:9b:68:16:64:b7:1f:55:a1:79:0e:8a:da:f8:e8:
         02:15:0b:02:30:dc:70:23:b3:ac:f6:52:e9:21:06:88:c9:34:
         19:5d:84:0c:5e:7e:3c:c5:b0:d9:32:19:ef:f8:4b:35:24:1b:
         e4:89:02:41:3b:cc:bd:33:fc:cb:62:8a:c0:52:5e:72:00:9a:
         dd:8a:13:ff:46:b6:68:83:ec:09:81:dd:26:45:0d:e0:a0:26:
         cb:d6:5d:23:58:72:c5:ea:43:d7:5a:7e:da:b6:f0:fa:78:a3:
         0f:50:a2:25:b9:b5:4d:2b:20:10:11:e5:82:90:1e:91:e6:98:
         33:99:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----