Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b1cda03-a6d4-3dc7-aa06-2cffc7341d13.roa
File:                     8b1cda03-a6d4-3dc7-aa06-2cffc7341d13.roa (raw, json)
Hash identifier:          lvZybucPO7kYgpzZrq+Z28LdegpEkLZ8g5Fx3alFptU=
Subject key identifier:   9A:8E:73:80:B8:3F:10:43:74:A7:D0:E8:CB:61:F6:1E:A4:45:B3:91
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D4095757EC432BDF3FE710
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b1cda03-a6d4-3dc7-aa06-2cffc7341d13.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        142.181.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d4:09:57:57:ec:43:2b:df:3f:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=f50927eb-c145-4d7c-9389-9822821df467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:2a:92:6e:ca:be:14:0e:eb:7c:8c:74:f2:
                    3b:6a:c4:30:c7:c2:ec:b9:b4:a7:7c:06:f7:77:e2:
                    bd:3e:b8:2b:65:ad:de:44:c9:50:62:f3:59:ad:09:
                    c2:c2:85:24:f9:a9:63:3b:be:cf:2a:e7:fa:cd:8e:
                    43:74:28:c7:e2:90:9b:11:d7:18:86:28:34:fd:f6:
                    83:6d:83:f6:e3:d1:7d:24:a8:5d:fa:aa:81:d4:d6:
                    02:9c:b8:72:92:f9:2d:f3:88:70:5e:66:96:06:03:
                    c2:91:41:3f:04:bf:48:1b:61:4d:86:7a:f7:15:e8:
                    9a:f7:18:c9:6a:9f:76:08:8d:e7:7e:47:ae:a6:49:
                    e2:e3:c5:aa:ac:86:09:dd:d4:92:f6:0c:34:14:c2:
                    6e:2e:61:33:11:46:0e:1a:ef:be:63:90:dd:98:a7:
                    79:96:9c:9e:84:cc:8e:0a:fd:25:7e:15:98:31:d3:
                    12:a0:82:7e:59:24:92:fc:08:b3:41:b1:42:bd:3e:
                    f9:b7:78:fa:77:02:6f:9c:fe:4c:ea:75:da:b6:f8:
                    bf:44:f7:91:a3:29:43:85:9a:63:ec:e6:15:2b:cc:
                    8c:8f:b7:65:46:7b:a5:8e:39:a3:f2:fb:0e:0d:07:
                    79:0f:b7:2a:d0:6a:27:3e:8f:4f:11:7a:9d:a3:48:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8E:73:80:B8:3F:10:43:74:A7:D0:E8:CB:61:F6:1E:A4:45:B3:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b1cda03-a6d4-3dc7-aa06-2cffc7341d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:93:f1:31:f7:e8:ae:8f:2a:31:45:10:33:e7:40:07:f0:21:
         d2:35:88:83:67:b9:76:73:96:fa:54:54:7e:75:b2:f3:28:48:
         1e:76:08:c1:77:49:a2:24:79:01:8b:93:49:e4:c4:5b:60:53:
         05:ad:39:20:32:6c:c0:a5:3f:02:15:83:a9:cf:c2:3c:d4:25:
         c6:43:fa:f8:91:ca:f2:e3:87:37:65:1b:40:e6:72:82:12:e9:
         33:ec:eb:69:f5:c0:1a:93:ca:3d:43:20:cd:1f:94:63:54:68:
         f6:a3:80:0d:11:27:8c:65:ad:d9:54:e2:2b:f2:d2:e9:f5:ce:
         ee:19:56:7f:57:81:56:b8:bb:5d:ed:4a:68:dd:b6:55:94:0c:
         8b:59:58:f3:61:28:32:26:ad:e3:c7:e6:f1:50:b8:eb:c9:d5:
         5d:14:52:a0:d5:f6:65:30:58:5c:e7:4d:99:41:5f:38:fd:a1:
         ce:dc:06:77:bd:f9:c0:13:bf:8a:27:66:18:89:fa:81:51:54:
         83:ff:1a:3b:11:f4:69:21:23:f5:2b:a5:18:b1:0f:eb:be:28:
         0b:1a:d0:63:9a:78:e1:74:56:bc:b8:bc:a0:35:8e:a1:9d:42:
         77:e4:c8:b7:26:41:7f:2d:19:15:de:1e:f4:c5:26:7e:bc:79:
         5d:93:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----