Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3590144-883f-3305-bfa5-f35158fdf4bc.roa
File:                     d3590144-883f-3305-bfa5-f35158fdf4bc.roa (raw, json)
Hash identifier:          HgWAa1mVDrSq0CFm+zWuTKxSMYsIENAjQfuUO5bbEKU=
Subject key identifier:   79:BA:D9:BF:73:E9:2B:60:01:AD:75:2F:6F:B8:34:99:09:DD:4B:20
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75885A522037D18E331580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3590144-883f-3305-bfa5-f35158fdf4bc.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:88:5a:52:20:37:d1:8e:33:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=d1662e2a-a4e7-4e9a-a368-9004df1a54ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:d0:cb:b3:5a:01:38:ec:08:b2:a2:7e:98:
                    f9:0e:51:68:0b:34:3b:7b:54:1c:f5:9c:51:0d:8d:
                    b6:3c:9e:22:32:10:52:af:80:1a:e1:9f:1a:26:4f:
                    ae:3c:e4:40:94:38:e5:3f:6c:04:9d:ca:7c:df:fb:
                    4d:e6:43:61:ca:9f:bd:a7:1e:cf:c2:b7:f3:8c:2e:
                    c9:fb:d8:6c:34:09:1b:f0:67:4e:84:b5:d0:84:8c:
                    c8:a9:df:ce:6c:7f:d1:7d:80:2b:0a:97:37:ae:cc:
                    d5:48:02:d8:ec:08:e6:e2:2e:02:dc:cf:b7:4a:8a:
                    7a:fc:e1:1a:e8:b8:06:75:f1:38:cf:5c:c9:fd:89:
                    ec:e7:78:11:eb:ff:f2:20:02:81:4e:af:e8:b4:d6:
                    d2:e9:67:e4:fd:4a:e9:ea:72:32:15:23:5c:9f:9d:
                    7c:1b:24:b7:96:d1:ec:1e:0d:06:91:76:b7:37:74:
                    1c:af:7a:bf:2b:5c:a9:3f:5d:61:09:d6:96:c2:70:
                    11:0d:4a:36:53:b9:b6:f9:89:9f:47:db:61:ec:4b:
                    05:49:49:01:5b:4a:72:05:bb:14:23:6f:de:fa:fe:
                    cc:09:de:3a:a4:b0:e2:bc:03:97:7d:23:66:fd:cd:
                    c7:49:61:49:b9:d9:13:8a:87:37:37:4e:2b:14:05:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:D9:BF:73:E9:2B:60:01:AD:75:2F:6F:B8:34:99:09:DD:4B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3590144-883f-3305-bfa5-f35158fdf4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:63:d3:37:ab:39:ad:b5:d0:33:64:6b:4b:f5:45:91:ad:
         6d:a9:06:64:38:91:05:5a:00:54:6e:29:2d:c4:32:9b:2b:11:
         55:e6:e5:86:fc:29:52:1b:ba:66:c1:95:cc:4e:48:21:61:0b:
         04:42:ae:98:d7:b7:be:d9:f5:f4:fd:3d:84:f8:46:9b:35:c0:
         8b:f3:27:91:f9:74:ea:8a:09:e7:7e:4e:0b:17:14:be:f0:ec:
         6b:86:5b:31:f1:60:18:9b:45:c5:b0:1e:87:46:01:89:a8:da:
         c6:3e:37:fa:cc:2f:5e:8d:a2:d0:d7:46:47:cf:36:01:a6:2d:
         bc:6d:c0:83:58:33:d1:a3:2a:ce:09:d6:d6:43:f5:99:50:63:
         10:eb:33:f4:b2:ee:7b:9a:af:7a:4e:36:a9:9b:4e:0e:0e:86:
         60:78:55:c1:43:c5:61:e6:ce:ea:a5:f9:88:d8:78:bc:47:7b:
         ad:fc:61:f1:fd:e0:b1:7f:73:57:58:03:b8:5b:8f:8a:17:80:
         54:91:db:97:a8:e3:13:b6:43:d4:31:cf:31:92:08:d5:d4:09:
         fc:83:b2:d5:b3:f4:c0:f0:0d:a0:92:35:a5:7f:cd:59:66:9f:
         75:e3:59:1c:48:36:f3:b0:5d:99:b1:9b:6e:c7:1b:be:72:a3:
         3d:07:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----