Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e227698e-920b-3d3e-8e25-24507ba91710.roa
File:                     e227698e-920b-3d3e-8e25-24507ba91710.roa (raw, json)
Hash identifier:          J5d2pPbJiJQ5Nh/F6nPwsfp5j+DlyK+vKlmxX6hhthY=
Subject key identifier:   18:6B:D8:C0:71:9D:E1:37:95:2F:4A:E8:AE:82:87:5E:12:A8:B5:35
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7647696872982B281B9040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e227698e-920b-3d3e-8e25-24507ba91710.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:732::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:47:69:68:72:98:2b:28:1b:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=cce858d2-4cae-4378-b9ee-87e3b73538e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:5b:71:77:65:c5:dd:bb:c6:08:1d:3b:cc:
                    84:52:8c:c4:fa:94:54:61:4b:bc:cb:ed:b8:48:fd:
                    33:50:4a:14:de:b1:61:9b:76:a7:38:52:04:d0:bf:
                    ea:b9:7c:05:18:e5:29:06:d8:cd:db:d8:e0:27:03:
                    3e:b2:1e:c7:21:84:22:98:20:e8:c1:72:76:fd:d7:
                    7f:43:a7:13:05:59:c7:e9:25:af:8e:4a:5b:55:20:
                    34:7a:2c:85:28:b5:05:5e:25:c2:f5:56:62:17:86:
                    b4:4b:69:68:b9:fe:45:ad:c4:b1:23:59:2d:56:00:
                    1e:a6:67:56:63:1f:0c:23:7b:47:73:2a:00:3c:cc:
                    53:1a:d5:e7:3b:a6:95:06:d2:1f:e2:1b:c9:a8:1a:
                    b1:6f:37:4f:a3:bf:c9:ad:3e:0f:8d:26:6c:89:b0:
                    72:6a:17:2a:4f:2e:44:dc:fb:a5:e1:50:12:3f:6d:
                    38:c2:b4:1e:39:1f:98:94:d9:60:8d:62:36:86:34:
                    7c:2f:db:0e:e1:8d:b3:e6:a4:53:9c:0e:77:3b:22:
                    0a:ca:76:fe:0b:54:78:2b:0d:a0:40:54:bc:ef:6e:
                    49:8a:d7:3c:63:87:9c:fe:58:d3:45:0f:67:02:aa:
                    c8:dc:96:09:bc:31:be:d5:86:bf:61:46:a4:fa:10:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6B:D8:C0:71:9D:E1:37:95:2F:4A:E8:AE:82:87:5E:12:A8:B5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e227698e-920b-3d3e-8e25-24507ba91710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:732::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:72:60:27:64:d5:ed:c2:ec:4b:59:e4:b5:65:92:55:c2:d7:
         44:db:1d:12:a9:03:81:62:61:ab:67:e6:a3:de:c6:88:92:43:
         93:14:5b:d7:8f:2c:90:5d:d7:a5:1e:11:5e:58:89:27:6d:1e:
         4b:aa:22:6c:34:71:f7:a3:dd:b0:fb:50:09:f1:d7:b2:84:2b:
         4f:66:03:c3:63:b4:f8:fa:66:56:dc:74:81:ac:8d:67:7d:2f:
         a1:3f:26:92:9b:cc:4e:25:86:ea:ad:d6:bd:5e:e1:f8:12:ea:
         d1:23:d4:42:dc:fd:d2:e0:7f:e0:b0:04:20:f3:7b:90:d3:d9:
         1e:36:38:b4:e4:e4:93:f8:51:3d:12:35:15:f8:32:92:6a:ec:
         2f:78:e9:82:11:6e:be:b2:83:c7:5d:57:1a:98:53:01:52:4f:
         09:89:b8:be:bc:b0:82:d1:d0:95:38:34:db:17:c1:89:78:c8:
         ef:b7:ce:a6:a7:25:21:5a:f8:33:10:84:58:84:fb:d4:5e:70:
         98:6f:47:c9:1a:e2:b0:f7:b8:35:44:7b:f4:33:92:96:2d:50:
         4b:f1:42:2d:4a:3e:74:07:c3:dd:9a:68:0d:72:af:98:08:8c:
         de:ef:0f:1f:0e:36:cd:19:ba:e8:d6:7f:6e:79:13:81:fe:ac:
         dc:e5:97:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEGvdkdpaHKYKygbkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2NlODU4ZDItNGNhZS00Mzc4LWI5ZWUtODdlM2I3MzUzOGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYxbcXdlxd27xggdO8yEUozE+pRUYUu8y+24
SP0zUEoU3rFhm3anOFIE0L/quXwFGOUpBtjN29jgJwM+sh7HIYQimCDowXJ2/dd/
Q6cTBVnH6SWvjkpbVSA0eiyFKLUFXiXC9VZiF4a0S2louf5FrcSxI1ktVgAepmdW
Yx8MI3tHcyoAPMxTGtXnO6aVBtIf4hvJqBqxbzdPo7/JrT4PjSZsibByahcqTy5E
3Pul4VASP204wrQeOR+YlNlgjWI2hjR8L9sO4Y2z5qRTnA53OyIKynb+C1R4Kw2g
QFS8725Jitc8Y4ec/ljTRQ9nAqrI3JYJvDG+1Ya/YUak+hAUpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBhr2MBxneE3lS9K6K6Ch14SqLU1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTIyNzY5OGUtOTIwYi0z
ZDNlLThlMjUtMjQ1MDdiYTkxNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJWAcy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtyYCdk1e3C7EtZ5LVlklXC10TbHRKpA4FiYatn5qPexoiSQ5MU
W9ePLJBd16UeEV5YiSdtHkuqImw0cfej3bD7UAnx17KEK09mA8NjtPj6ZlbcdIGs
jWd9L6E/JpKbzE4lhuqt1r1e4fgS6tEj1ELc/dLgf+CwBCDze5DT2R42OLTk5JP4
UT0SNRX4MpJq7C946YIRbr6yg8ddVxqYUwFSTwmJuL68sILR0JU4NNsXwYl4yO+3
zqanJSFa+DMQhFiE+9RecJhvR8ka4rD3uDVEe/QzkpYtUEvxQi1KPnQHw92aaA1y
r5gIjN7vDx8ONs0ZuujWf255E4H+rNzll/E=
-----END CERTIFICATE-----