Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0e18a32-35b3-3fea-bf03-25cb202a45df.roa
File:                     b0e18a32-35b3-3fea-bf03-25cb202a45df.roa (raw, json)
Hash identifier:          eCJxu/m9dt7NJcMJ0a1ID5i6+KCFUgTI75ePHuGA/Ng=
Subject key identifier:   4A:76:86:73:49:1F:54:DB:CC:3B:E5:89:B9:08:95:B1:D1:7B:BF:A9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74C997ADA057667530F9DA
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0e18a32-35b3-3fea-bf03-25cb202a45df.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     10965
IP address blocks:        64.4.90.208/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:c9:97:ad:a0:57:66:75:30:f9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=ea285ca1-c31a-4e35-883e-aaef88232b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:cb:23:c0:a9:00:02:c1:44:08:1f:6f:88:
                    6d:6c:3b:36:0d:d4:49:d6:fe:55:c9:fc:0d:72:ee:
                    c0:07:21:4b:8a:6d:05:ba:d5:d3:70:95:a9:3c:ee:
                    04:22:21:b5:b6:0f:ed:da:03:55:89:9a:cf:27:c7:
                    fb:42:27:03:25:dc:45:55:98:e3:1b:2f:c9:b3:ee:
                    9d:68:57:02:e5:03:a1:ec:34:41:f8:e7:95:2a:8c:
                    ab:0c:fe:87:7c:eb:b1:63:9e:1a:00:71:77:da:77:
                    02:6b:ef:1a:9d:9d:d5:9f:c8:5e:93:28:f3:90:b6:
                    1a:66:aa:f6:2d:3f:22:c0:16:73:f4:9b:35:8e:e2:
                    b9:0a:e0:1f:33:a1:cc:9a:d4:86:72:ce:9f:88:73:
                    57:33:a1:be:35:65:54:9c:74:6e:22:9e:92:6a:50:
                    c3:65:24:a7:fc:9a:c3:08:c3:09:5a:c7:41:72:ff:
                    4c:ae:27:32:46:ef:2b:d9:43:1a:d9:21:06:57:e8:
                    13:f3:89:c9:2b:46:14:15:24:bb:6a:d2:85:64:d5:
                    2c:db:45:ea:2b:af:60:bf:2b:d4:96:7e:c0:e7:05:
                    52:ed:49:01:df:ff:b3:84:0e:4e:95:b2:90:78:1f:
                    2a:0d:28:da:39:22:5f:bb:bd:00:95:6d:10:72:95:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:86:73:49:1F:54:DB:CC:3B:E5:89:B9:08:95:B1:D1:7B:BF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0e18a32-35b3-3fea-bf03-25cb202a45df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.90.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:92:fd:35:6f:07:ad:5d:80:16:30:4f:67:71:24:15:03:4d:
         03:00:c9:8d:6d:7e:45:42:48:df:4b:a6:8e:82:1a:f6:f5:59:
         bd:04:fc:e2:95:56:3f:ae:83:2a:25:03:e0:24:79:84:2e:50:
         a7:74:89:8d:3f:91:78:b1:71:0f:ce:4f:cd:8e:3b:e4:9f:65:
         52:78:b4:b0:20:ee:f1:b3:33:4a:79:fd:6c:83:8e:4d:ab:bf:
         e4:b2:29:33:82:27:c2:24:dc:3c:54:47:b6:5b:6c:d3:53:f7:
         f3:62:c3:64:aa:95:0c:9b:76:99:bb:b9:3c:2a:1e:28:f5:e2:
         ca:c1:82:29:c5:47:7a:fb:20:cc:4f:3b:de:bc:0c:e1:be:48:
         69:44:b5:77:57:95:57:f4:d1:b5:41:08:18:63:1b:b6:14:c8:
         19:9d:35:d8:39:8b:1c:d7:50:07:05:e1:43:ab:ef:2f:ca:2c:
         a3:d8:54:5d:d2:dc:08:0c:7a:ca:5b:b7:d9:52:8f:15:58:ec:
         c2:e1:b1:f6:f2:fa:77:4f:b6:5f:49:a0:6b:aa:e0:ad:ba:d4:
         d2:6f:3b:06:29:8c:1f:b1:a1:de:0f:c1:6b:3c:e9:cb:13:95:
         21:7b:17:3f:3b:9a:c5:89:fc:2a:64:2a:70:a1:4a:99:27:a7:
         c0:27:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----