Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9bf03fb-1b03-3a83-8a9a-788f4200e469.roa
File:                     a9bf03fb-1b03-3a83-8a9a-788f4200e469.roa (raw, json)
Hash identifier:          h4L0uCfdfKZPT6hP+9yivSSRn+tB1vbTVePJPUK7YxA=
Subject key identifier:   92:A8:D1:66:68:2A:A8:47:35:FD:04:DF:2C:8B:DD:EC:0D:2A:47:A7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7641080B4A740CB6C81DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9bf03fb-1b03-3a83-8a9a-788f4200e469.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:41:08:0b:4a:74:0c:b6:c8:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=c05cfbca-4bfe-432a-b593-f2e4d8d17056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:9d:0b:55:c8:79:d4:f3:cd:22:d7:c1:e9:
                    70:d6:dd:d3:b5:bf:1d:b1:18:fc:7a:a8:a5:4f:74:
                    a0:88:7d:64:d5:89:d3:6f:c4:7c:7b:a8:7d:8d:5c:
                    46:2e:aa:e9:60:da:d5:cd:49:8d:55:ba:c9:54:5c:
                    ad:ba:32:8b:08:7e:73:1a:54:31:3d:f7:45:a7:7b:
                    c3:39:82:cf:7f:79:da:7e:9c:4e:b3:96:44:8f:1f:
                    38:00:e5:d1:bf:07:70:05:3f:c2:de:92:08:43:53:
                    57:f8:5d:c3:c7:59:b7:dc:03:36:21:d5:4f:a0:fb:
                    7e:85:96:a4:5e:88:98:3f:29:fd:93:17:b1:7c:3f:
                    53:3c:1f:05:60:1e:69:0f:88:4b:e8:a9:b5:42:5f:
                    23:9a:44:87:f3:e1:08:72:e9:c4:a2:68:9f:d5:9f:
                    cc:05:d9:e5:7c:6a:f3:67:53:16:5d:6d:2b:32:c9:
                    27:1d:f6:2e:b3:ce:0d:1a:17:41:c8:eb:0b:33:b2:
                    d5:c5:04:f3:02:e5:76:0b:b3:6f:e7:06:35:16:a4:
                    51:55:90:fe:a8:16:52:84:2c:be:ad:33:be:5e:76:
                    87:d4:52:5c:2e:a9:f4:65:f9:26:1b:d2:b3:e0:30:
                    88:5f:72:9f:a0:34:1c:4d:fe:05:dc:e1:bc:58:52:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A8:D1:66:68:2A:A8:47:35:FD:04:DF:2C:8B:DD:EC:0D:2A:47:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9bf03fb-1b03-3a83-8a9a-788f4200e469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:96:65:8a:93:50:af:d4:05:96:c8:60:4e:92:04:eb:1d:f4:
         33:6e:92:15:bf:58:92:4d:52:38:08:f8:6a:57:d5:6a:18:0a:
         49:49:ea:68:b5:3d:89:29:25:02:5e:60:52:b9:0e:de:ef:14:
         54:06:fb:1e:48:07:75:a3:cd:03:a9:f0:b6:da:5a:37:d7:63:
         26:0f:a0:2c:b2:9e:f8:43:f1:ce:20:9c:57:1e:bc:2a:12:a9:
         04:5b:ca:3a:0e:21:3e:78:bd:fd:be:42:08:a3:cc:d0:e1:ff:
         b2:a6:65:32:3c:df:b0:a2:05:7e:be:b2:70:64:68:d3:ec:89:
         4d:0f:a8:c9:22:d1:0d:49:1d:f2:58:4f:b8:53:98:1e:a4:8c:
         5e:26:8f:f2:d4:a4:6b:e8:4b:58:0f:c5:02:d9:70:b9:36:dd:
         77:bf:f1:3a:43:3c:5e:77:a9:56:33:aa:55:0d:44:b2:fb:7e:
         43:11:2a:97:1e:e8:4c:eb:eb:e1:c1:7c:14:a3:c1:a7:e2:a4:
         25:e1:59:68:71:10:16:cf:9c:32:75:62:4e:53:a8:65:66:9e:
         39:c1:e5:5c:a8:3e:d4:6a:1c:08:5b:5f:c3:47:d5:a5:21:bd:
         b3:ca:28:04:84:4d:97:1b:e2:81:55:3f:23:1d:0c:bb:7e:37:
         b0:a0:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----