Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cac42dd4-12d0-32b5-b4e5-b2416fe85510.roa
File:                     cac42dd4-12d0-32b5-b4e5-b2416fe85510.roa (raw, json)
Hash identifier:          8h7fAwLtiLeNL6rTI85cKSAf1LkBLDQ0C5ANguNemTk=
Subject key identifier:   74:F4:B3:FA:41:AD:70:0F:D2:E1:89:D5:98:49:C2:F4:F3:4A:B2:F9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D288E2645E9CB1A676D7D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cac42dd4-12d0-32b5-b4e5-b2416fe85510.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.42.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:8e:26:45:e9:cb:1a:67:6d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=a3fd3bd6-aa17-42ad-8a17-3bb02e64703a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:67:4c:cb:47:10:c8:a5:7d:61:b8:8f:e0:
                    7f:f0:5e:6b:01:c1:08:5e:db:bf:0f:8c:11:53:38:
                    30:66:6e:10:1c:92:78:e4:f3:c7:2c:70:f6:55:5a:
                    e4:ba:e7:3c:39:71:48:ee:04:8f:9d:5b:5b:ff:da:
                    e6:b0:11:b7:e2:7a:95:c1:17:39:a2:20:fa:04:d6:
                    db:a1:3e:5c:7b:02:71:50:26:08:ff:02:c4:76:31:
                    7e:f9:a6:32:f4:87:7c:a1:50:26:3b:68:26:a1:88:
                    30:e6:4d:24:bb:57:f7:5e:ba:f3:98:2f:d2:9c:5a:
                    ef:33:9c:fd:c0:2f:f2:41:71:e8:61:52:b9:e5:39:
                    68:0e:e2:25:fc:c5:14:4f:d5:1d:bf:3c:b3:49:73:
                    05:d4:c5:43:5b:89:ac:45:ec:8a:e5:51:2c:d0:43:
                    e6:f2:e2:b3:3c:2d:3d:cd:42:68:d6:bd:b9:53:df:
                    be:64:73:be:8d:ee:a5:03:4d:c4:d6:74:df:f3:6b:
                    88:6d:7c:cb:1d:12:f0:01:50:f6:1c:01:f6:da:ce:
                    35:c9:e0:be:a1:41:7a:48:99:a4:ce:f7:33:ce:97:
                    6e:78:a3:07:1a:10:cb:33:79:9f:0a:ff:84:fc:98:
                    d7:2c:ab:cd:cf:1f:98:a8:53:73:eb:f4:a6:ae:01:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:B3:FA:41:AD:70:0F:D2:E1:89:D5:98:49:C2:F4:F3:4A:B2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cac42dd4-12d0-32b5-b4e5-b2416fe85510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:15:11:a5:f5:24:dc:b0:47:e4:66:82:b6:23:38:a7:f0:
         7e:9a:af:50:b6:aa:08:88:84:ac:b1:07:50:4c:83:fd:df:e2:
         52:26:47:0d:7e:5f:62:9c:e6:ec:82:87:9e:43:21:94:17:0b:
         10:fa:a1:eb:3c:da:8b:0b:f9:ac:a9:60:48:a8:52:ed:13:cb:
         d2:54:1e:ac:34:cd:c8:22:78:43:ff:5a:27:2c:6b:de:47:81:
         9d:47:1c:39:f8:47:35:6d:1f:f0:d2:3c:ed:1f:3a:84:e3:93:
         21:da:23:45:f9:92:5e:61:7e:4b:b6:51:a9:d3:59:da:c0:72:
         9f:13:0a:0e:a6:3d:03:c3:c7:20:08:a6:0b:31:d9:b8:15:95:
         cd:66:93:63:c9:db:be:34:65:fd:13:97:e0:fb:35:57:7e:b1:
         c3:e7:aa:31:b1:af:07:28:41:6d:df:4b:6f:e1:fa:0a:37:7c:
         60:eb:fa:05:2c:fe:87:5e:35:25:c9:73:37:e9:2d:54:b4:00:
         b5:b0:5a:fb:45:4f:f9:fc:1a:34:2c:69:51:be:94:44:cb:0d:
         c2:b3:79:a2:7c:d2:31:52:b7:6b:c3:17:9f:ad:b0:62:70:72:
         39:f0:65:dc:5a:6a:5b:7a:e2:ee:2c:47:f1:cb:3f:6e:cd:30:
         c5:e6:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----