Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e77229f7-4175-32f6-a240-e26977f4391e.roa
File:                     e77229f7-4175-32f6-a240-e26977f4391e.roa (raw, json)
Hash identifier:          X0T60Y8TVDvNJ7qOOxe2gS7Xh/5anSwSE1mgEIw6GkM=
Subject key identifier:   B4:A0:74:E0:AD:DB:9F:22:1C:49:B9:76:3C:1C:10:E2:13:3D:59:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF760A8891CA44C8D923A080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e77229f7-4175-32f6-a240-e26977f4391e.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     30381
IP address blocks:        216.6.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:0a:88:91:ca:44:c8:d9:23:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=df529eb7-775f-45b7-81ca-b5fb2968202a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:c7:71:4c:68:fc:a3:9c:e5:a9:97:87:43:
                    12:22:f4:cc:fc:e5:5f:5f:f4:24:b2:9f:47:10:a0:
                    fa:65:e8:a4:25:c9:f5:99:14:3b:23:e9:6c:67:64:
                    5a:97:3c:a1:9c:98:94:93:fb:a0:ab:79:ef:dd:f6:
                    fa:ff:12:df:78:68:3b:49:ac:43:c0:88:08:d6:7a:
                    7a:39:74:b2:a0:45:75:d2:24:80:bc:5f:25:7d:63:
                    c1:c0:ba:c3:57:fe:4d:4f:86:68:20:8a:d3:4a:2e:
                    b7:cb:32:b0:4a:46:21:46:e6:c4:55:13:c9:19:23:
                    39:ae:57:3f:bf:f6:2e:d5:d7:fb:13:58:b4:92:8d:
                    ae:f2:64:7c:f4:69:82:b3:82:40:b5:c1:47:7a:51:
                    40:9d:d6:86:c0:97:d1:ee:96:ac:88:20:38:62:f4:
                    ae:d3:19:df:3f:79:c0:1b:75:a2:ce:6e:27:f3:21:
                    a6:4c:93:9c:69:e7:d2:44:4e:05:e7:b8:31:c8:42:
                    2f:14:ff:86:df:cb:5b:d8:0f:7c:77:bc:f4:f8:c2:
                    7a:f5:5a:eb:a1:b3:59:4e:3a:41:fd:58:73:81:d7:
                    d9:19:bf:7d:85:4f:b8:b2:37:64:e7:bc:a5:a7:3a:
                    11:af:c5:95:68:4e:05:c4:7c:7e:f0:4d:f4:0f:a5:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:74:E0:AD:DB:9F:22:1C:49:B9:76:3C:1C:10:E2:13:3D:59:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e77229f7-4175-32f6-a240-e26977f4391e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4f:f7:75:76:de:e2:ac:89:44:dc:53:82:a4:2b:a1:ad:53:
         5f:35:0c:9a:9a:6b:2c:b7:34:c5:88:9d:8b:48:c7:31:e1:fa:
         ec:9f:5e:db:a0:48:9f:94:fb:a5:a8:de:27:32:a9:b3:4d:cb:
         61:68:64:ca:00:0c:97:10:c5:68:98:91:c2:23:7e:4e:e0:70:
         3b:e6:b5:54:ab:e8:b2:76:db:33:7f:e0:d8:49:dd:6c:89:a4:
         91:8c:e2:f0:ca:74:f6:d1:13:6a:9f:52:cc:db:e0:9d:49:80:
         15:c4:6a:09:fb:8a:d1:28:c8:33:8c:98:62:af:18:80:41:2b:
         e1:de:7a:13:27:6f:e3:81:5c:ce:90:8d:f0:3b:58:bc:d3:99:
         c8:f4:01:10:31:75:eb:ee:df:99:ec:d9:33:74:81:ec:03:24:
         72:0b:16:75:37:a4:db:fa:c2:de:52:70:55:5a:f7:5b:04:e3:
         64:3b:f4:91:54:d8:77:bd:4e:28:1d:5e:6f:95:01:a5:0a:76:
         60:ae:21:8e:a1:4a:c5:8d:92:26:9a:9f:4b:a0:80:f5:7c:92:
         b5:0d:50:a5:03:1c:a0:5d:c1:e6:45:42:d6:d0:78:9a:0d:ca:
         a3:d5:98:7a:f8:d1:66:3a:69:8a:b6:c0:e1:4f:7c:25:fb:e2:
         87:32:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----