Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9fcb04e-fad4-3bae-9c3c-23bc02611315.roa
File:                     a9fcb04e-fad4-3bae-9c3c-23bc02611315.roa (raw, json)
Hash identifier:          FCs9o6ciC4/yJe0lsriE/1pBxuMuMwN9mR0wipOCx68=
Subject key identifier:   E7:72:64:71:35:BF:DA:9D:44:A9:D1:19:6C:BA:6C:84:61:D7:E2:B1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA113482C6F9B4596CC67100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9fcb04e-fad4-3bae-9c3c-23bc02611315.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        66.201.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:34:82:c6:f9:b4:59:6c:c6:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=b8fd1f73-b0fd-4228-9f40-4854aedeb640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:c7:0a:2a:6c:1d:ea:22:d8:2e:f1:55:b7:
                    ba:bd:14:3b:72:c0:bb:0e:bd:81:2c:97:ed:17:26:
                    35:74:1d:d3:57:c1:f8:cf:28:3f:72:15:30:59:91:
                    c6:46:26:fd:c6:8b:bc:74:75:0c:d5:99:03:b2:28:
                    66:46:d5:05:bc:9b:2d:dc:58:ca:f8:b5:86:12:df:
                    5c:c1:d4:15:e6:0e:e1:c8:aa:1f:0d:f4:96:94:d0:
                    6b:27:bd:b8:6b:1d:4e:1d:5d:bc:27:aa:c7:38:e9:
                    18:ab:ed:b1:74:f3:35:de:5c:c3:80:a4:c7:9d:a4:
                    f1:13:b2:89:77:f5:50:9b:b2:f6:15:36:40:c2:45:
                    e4:c6:8c:ee:10:a8:e8:89:fd:97:e5:0b:25:ee:44:
                    b3:7c:01:b4:02:d6:b9:18:96:4b:dc:94:35:19:44:
                    ac:0a:8c:53:1e:b2:a4:63:7f:03:f4:41:90:d5:a3:
                    cb:3e:4d:a8:a5:e6:f9:3b:36:d3:57:69:d5:7d:c6:
                    d0:92:fe:69:b0:a0:86:a8:e5:ad:57:cb:71:9f:4b:
                    be:85:40:6c:88:b9:9d:80:d8:0b:81:fc:61:2f:a3:
                    a3:e0:92:42:c3:17:d4:52:77:1e:99:15:c4:74:30:
                    f8:2b:0d:b5:79:7e:aa:3c:2b:7b:c6:96:48:52:b5:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:72:64:71:35:BF:DA:9D:44:A9:D1:19:6C:BA:6C:84:61:D7:E2:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9fcb04e-fad4-3bae-9c3c-23bc02611315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.201.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:73:b9:43:7e:dd:6a:b7:d4:98:f7:69:1e:1e:60:87:2b:
         8a:49:43:91:70:2c:b7:7f:a1:e3:2e:2d:23:a5:e0:eb:74:bf:
         c5:a8:b6:a7:2c:eb:cb:b9:16:17:c0:3b:40:7e:34:69:fa:3a:
         56:11:9b:e5:91:8a:dd:c4:74:16:71:47:f3:22:ea:c3:1d:19:
         ea:e7:0d:f4:6d:21:4d:30:c2:86:a0:15:81:75:a2:df:b3:bb:
         60:b9:21:2e:a0:aa:94:ad:47:9c:09:32:dc:1f:2e:29:74:c5:
         82:4b:da:14:61:5a:f5:68:40:70:d2:10:a8:b1:d9:fd:42:99:
         9e:63:e9:d4:29:80:17:57:8e:ee:70:f0:55:81:02:bd:c8:11:
         cf:dd:97:8e:17:f0:1d:fb:ca:2b:33:03:13:df:f8:3d:c3:1b:
         ae:bf:46:11:f2:9e:c1:8a:ac:b4:3a:a6:6e:04:2c:20:ff:2b:
         8c:67:eb:89:1c:5a:78:66:df:c6:1b:60:cc:cb:64:c3:67:cf:
         22:53:9a:18:60:a6:4d:57:d6:55:f5:73:a2:91:9a:ba:6c:d2:
         79:0c:b6:de:79:da:9d:76:8e:20:bf:02:57:d7:c5:83:2e:56:
         ad:a9:6a:95:b3:92:ef:7f:e4:73:eb:e0:75:1c:b4:d3:f5:51:
         1d:7f:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----