Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cec84195-962b-3c98-8153-71da9b60b160.roa
File:                     cec84195-962b-3c98-8153-71da9b60b160.roa (raw, json)
Hash identifier:          EAd5j5jtDoNEeh93T2P5ZLd3hIOm21XK/VtyQK1BhyU=
Subject key identifier:   43:DB:63:39:69:0B:03:A0:00:5A:9E:21:DE:2C:8C:B0:A0:98:C1:5B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4B74537FB1A8407AC3080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cec84195-962b-3c98-8153-71da9b60b160.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.176.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:b7:45:37:fb:1a:84:07:ac:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=14d89634-b67e-4ce3-9e14-ad76e3c05a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:af:24:90:99:78:42:a3:5c:b8:d3:bb:f6:
                    8a:5a:60:81:7e:47:ca:19:25:18:db:e2:20:89:6e:
                    13:03:87:b0:65:92:ef:df:c2:5f:6a:a5:88:82:62:
                    0d:41:f1:af:73:9e:e3:2a:04:28:0d:68:8a:35:9b:
                    32:6d:97:f3:dd:9f:5e:33:e8:d8:9a:74:63:46:5a:
                    17:dc:ac:fc:40:53:d5:84:ab:92:ca:91:19:e8:9e:
                    5a:21:eb:1c:56:9f:6a:5d:73:43:af:e1:20:4f:ff:
                    52:c5:37:21:20:f9:20:53:09:fc:58:62:3f:78:d5:
                    6e:be:eb:a5:97:d8:94:24:9b:a5:4a:36:fb:ce:53:
                    5d:31:c4:c1:7e:d3:d3:a2:c6:45:39:d4:05:53:3a:
                    0c:01:5d:09:91:06:7d:bb:4a:6f:ff:1d:42:29:a8:
                    fc:50:cc:3d:d7:71:bd:68:47:63:97:28:14:01:47:
                    28:aa:60:8c:b3:f9:95:96:3d:fd:e6:f5:cb:9b:c6:
                    c6:b1:a5:dc:36:13:14:85:30:bd:1c:05:d1:ba:3f:
                    f3:46:ac:3f:b1:44:2d:2c:2f:a5:93:1d:09:d7:0d:
                    3a:03:6e:37:38:ba:ac:f2:2a:42:06:2f:dc:67:62:
                    e7:c6:a7:64:43:5b:8e:ed:31:53:80:29:29:83:bf:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:63:39:69:0B:03:A0:00:5A:9E:21:DE:2C:8C:B0:A0:98:C1:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cec84195-962b-3c98-8153-71da9b60b160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:8d:36:c9:57:18:54:87:8e:f4:e8:8a:85:05:6d:3b:42:
         cf:9c:5d:90:67:94:09:fe:ec:94:69:b4:85:c2:85:9e:d4:14:
         d8:7e:2d:30:7b:d2:4f:3b:df:a9:57:68:5c:03:83:f1:d8:83:
         85:d3:d1:8f:bc:2d:3b:aa:7e:f8:ca:2b:c8:a0:c9:14:37:05:
         bf:12:c1:9b:68:7d:f3:54:a8:77:f4:29:ef:f7:e0:34:96:86:
         9b:a1:d8:b6:7e:c1:25:3e:8c:3e:c9:38:be:38:50:f7:61:e6:
         a2:4d:67:da:8a:2f:18:a9:7f:09:da:20:9f:e1:6f:5b:34:06:
         d8:e9:5c:08:cd:28:40:f5:85:63:c6:0c:3b:83:15:18:6e:d8:
         ce:db:94:3d:a5:47:9d:ea:df:17:51:31:9e:fd:98:0d:c5:0f:
         4a:43:97:43:3b:cf:eb:e8:7e:94:16:8a:7c:31:d9:c7:80:ef:
         be:46:6c:f3:9d:cd:4a:62:cc:66:97:37:53:9e:a8:3b:1b:20:
         97:cb:7a:67:6b:e5:c4:46:2a:89:f7:f9:1f:12:46:e5:73:af:
         1e:c1:0f:b5:2f:45:54:0d:bd:1e:8d:73:14:3e:c3:ad:12:5e:
         2c:f6:ea:26:c6:73:42:70:6b:c4:c0:f2:f5:8d:e2:d4:39:15:
         c3:32:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----