Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b62d8ff-72bc-3ce2-8cd9-3dc0bbb5d9a7.roa
File:                     8b62d8ff-72bc-3ce2-8cd9-3dc0bbb5d9a7.roa (raw, json)
Hash identifier:          cc9mzy6Qo+8tTzujgLssq2UbVCBs24DbKiQ3OuJx0Hw=
Subject key identifier:   1C:BA:1D:5E:A6:82:5C:C9:01:DD:B6:0B:93:74:68:F9:6C:BC:A8:FD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE51093424E91313C058C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b62d8ff-72bc-3ce2-8cd9-3dc0bbb5d9a7.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.150.214.0/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:10:93:42:4e:91:31:3c:05:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=5cdfde15-2e7c-4689-b100-2743655882b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:2b:8b:a6:67:71:59:de:c5:69:d1:72:07:
                    42:c4:a8:d9:a0:06:65:7f:67:d3:90:9b:39:b4:4e:
                    6e:50:f4:08:28:c9:30:81:89:18:5f:d3:e2:8c:6f:
                    81:17:5a:bb:58:48:cc:7c:fd:cb:1c:5e:50:a2:ba:
                    bc:ef:08:02:7f:03:dc:23:fd:35:21:1c:c7:cf:0f:
                    32:4f:91:65:f4:d4:01:7f:01:ed:11:4f:a4:4f:bc:
                    ef:ce:6f:3c:e6:1b:9d:eb:fc:33:37:e4:79:46:07:
                    99:da:01:1e:a1:d6:da:53:54:cd:a5:e4:ef:d5:43:
                    a5:e3:fd:17:dd:3b:80:8a:c6:8b:5c:0b:73:80:28:
                    fd:83:60:c0:ce:8e:07:1d:c3:78:42:86:11:eb:fa:
                    32:d5:df:82:85:b8:d7:e4:c3:66:da:38:b2:6a:3a:
                    47:a2:19:eb:ac:97:30:8d:d6:79:bc:93:eb:3d:2b:
                    13:b6:1c:0a:84:cb:6b:19:12:07:8d:c5:6e:4d:3f:
                    58:8a:cc:d8:17:32:86:67:3b:02:74:6c:58:27:8a:
                    1c:ad:3c:99:0d:57:73:e1:8d:5a:59:ef:c8:8f:6c:
                    6a:9a:87:4e:c8:56:15:63:0e:91:d1:51:c3:18:68:
                    a8:b9:9c:be:f2:7a:e4:5a:9a:e9:33:42:57:c2:15:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BA:1D:5E:A6:82:5C:C9:01:DD:B6:0B:93:74:68:F9:6C:BC:A8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b62d8ff-72bc-3ce2-8cd9-3dc0bbb5d9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.214.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:36:3f:f3:88:c5:a2:ce:2c:ab:34:32:d8:fd:e9:1f:95:
         bd:fa:fb:ca:05:b3:5d:79:af:ec:f0:14:79:f4:cd:96:d4:88:
         6a:41:cc:ec:bf:1c:6c:e6:66:3b:75:9b:bc:b2:33:f0:38:76:
         52:ca:f7:98:4f:c5:5e:4c:0e:f0:8b:b1:75:d3:e0:b2:d0:97:
         32:ac:fc:e0:bd:d8:10:57:ca:14:cd:24:1a:21:79:ec:6c:62:
         5f:05:76:19:e8:fa:83:96:7a:d6:f1:a4:06:01:e5:8f:c4:78:
         47:b8:dc:e3:4d:38:b1:00:c1:8e:e9:bd:a3:18:0b:55:ea:1f:
         b6:ed:25:ac:9e:a7:ad:e1:b2:c2:7b:3b:c0:92:cb:22:ab:6d:
         35:61:63:61:d6:ba:c0:89:14:1e:f9:12:7b:48:86:e7:55:5f:
         da:4a:e6:c0:e1:a9:e7:f5:4c:c8:cc:43:e6:04:08:c0:4b:39:
         c4:7c:ad:9a:ee:f5:3d:3f:bc:72:0b:0d:4d:fa:c8:d1:fa:76:
         74:84:5a:f0:96:94:bf:4d:d4:15:ad:3f:46:6e:e1:0f:8c:0a:
         d6:84:95:8a:24:49:61:73:91:64:b3:09:71:7f:b0:40:84:4a:
         c0:59:8b:cf:32:2b:3d:6d:dd:97:29:5b:bc:fd:90:b4:f8:00:
         b5:40:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----