Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e30f8677-7525-3957-bb6a-c979db512573.roa
File:                     e30f8677-7525-3957-bb6a-c979db512573.roa (raw, json)
Hash identifier:          JveYsFZOROacS7wSmPY7It0xeleIiBywk/9OYxhotEQ=
Subject key identifier:   5E:C3:E8:C5:8D:F0:31:8C:12:2B:F0:F7:6E:EF:DD:C5:97:15:62:F4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D41633917E9FE35E87FB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e30f8677-7525-3957-bb6a-c979db512573.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        174.94.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d4:16:33:91:7e:9f:e3:5e:87:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=88c896a4-8384-420c-8ef5-221b13f88a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:a1:65:b4:60:1b:2c:55:ee:ef:e1:3d:50:
                    2b:ea:d5:72:3f:05:d9:23:10:5b:ef:97:9b:e0:9d:
                    ab:9b:d7:4e:38:4b:3a:cc:a3:2a:01:10:c8:04:3a:
                    21:2a:c2:57:7b:fa:08:f6:7c:2f:d0:08:d9:f4:00:
                    39:cd:03:29:0a:26:31:dc:2d:b6:dd:dc:53:d5:c6:
                    68:01:0f:3c:d9:21:20:95:93:0b:5c:55:8b:2a:ac:
                    0b:7f:18:cc:c1:b0:1e:6c:cf:94:59:45:cc:49:44:
                    79:bf:58:2f:84:c8:60:53:8b:c3:1b:84:d9:62:db:
                    1f:2a:95:cf:4c:9b:d9:53:ce:ee:2c:7c:f8:4c:0a:
                    a8:ae:0d:1e:1f:3a:76:de:2d:a9:bf:9f:96:2f:08:
                    e3:93:02:44:cc:30:70:e4:0d:9e:af:98:f1:42:00:
                    dc:0b:29:13:54:e0:3c:8d:3a:15:ba:78:a1:4b:72:
                    19:88:4a:8e:fd:36:97:6e:ee:b0:84:b1:62:94:25:
                    54:ad:cb:8d:19:79:6d:98:86:8b:b1:d4:91:95:a7:
                    86:db:df:6e:cb:d9:20:8d:2d:cd:59:5a:5b:ae:ef:
                    8d:bf:67:63:cd:dd:05:62:8d:64:91:82:c7:05:ec:
                    27:0f:1f:ec:e7:2c:26:c1:69:25:d4:ab:15:17:72:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C3:E8:C5:8D:F0:31:8C:12:2B:F0:F7:6E:EF:DD:C5:97:15:62:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e30f8677-7525-3957-bb6a-c979db512573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:21:dc:9d:b7:52:1c:02:4d:09:a3:9d:0c:58:b9:68:0a:d0:
         27:ed:53:55:48:c5:78:e4:40:20:9d:74:1d:c5:50:f2:41:5c:
         2a:85:fb:6b:bd:e5:d9:71:0b:f3:00:26:6b:8d:3f:06:d2:58:
         ae:dd:4c:3f:8f:2c:e0:fa:cd:c1:c3:4c:16:e6:a9:ae:18:df:
         1c:2c:9a:75:f7:12:6e:48:01:1d:a7:f9:4d:d7:85:7d:ce:7a:
         57:46:51:b2:7a:6e:c0:46:f1:30:d1:02:67:69:6a:82:d5:af:
         53:e6:a4:7f:4e:f6:1b:52:5c:41:26:35:b7:7a:2a:bc:d4:53:
         29:32:67:fb:56:16:2d:09:1a:b5:af:40:6f:0a:04:66:4b:bb:
         68:de:74:a4:75:1d:24:a1:7c:cb:5c:30:5c:6a:36:ca:4e:1f:
         b4:05:68:4a:74:bb:6b:f5:c6:51:b6:1b:93:86:9e:d5:ec:a7:
         b6:0f:31:25:d3:d1:4a:42:12:79:06:f1:88:b9:28:c4:a4:c9:
         7b:4c:30:f6:0c:54:a2:5e:90:a2:b4:d0:22:2c:fb:45:05:bf:
         36:16:ce:ac:52:2d:49:29:e7:27:b1:76:5d:3a:6d:4b:d2:3d:
         7f:37:ff:d2:7b:ea:2c:5c:9d:41:20:fa:95:6a:da:d5:6b:af:
         d0:d0:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----