Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec2b4068-0e15-3546-8900-f47b132c67b7.roa
File:                     ec2b4068-0e15-3546-8900-f47b132c67b7.roa (raw, json)
Hash identifier:          QvSg/kKLXzlcnPGhWVEtgn9IsyXCDTGY3a7gme0TGc0=
Subject key identifier:   6F:93:0E:FB:12:66:FC:B3:22:ED:D6:EF:42:D0:D8:9E:9B:3E:03:AF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FEA74F519AD1EAB3814D4BE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec2b4068-0e15-3546-8900-f47b132c67b7.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:1828::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:74:f5:19:ad:1e:ab:38:14:d4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=06cdb806-e295-4efa-9f59-535c77a7f4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:73:91:2d:8b:38:1a:e9:de:9b:a8:34:eb:
                    6e:45:3c:fb:ac:13:ca:54:e0:d1:38:41:9e:97:f3:
                    57:0f:ab:4e:f0:d3:58:39:c8:0d:32:2d:34:a7:aa:
                    d7:9f:20:8e:9c:87:0f:6b:38:69:15:6f:0f:b5:a3:
                    49:e8:f2:51:c5:ad:19:65:ae:47:78:53:d3:42:14:
                    36:56:c2:cd:19:32:69:00:63:b1:3d:81:ed:e9:62:
                    87:36:80:f3:a2:7f:d2:06:68:9d:6c:c6:0c:3e:d6:
                    bc:72:86:cb:99:f8:b6:97:64:ac:bd:e0:d7:2c:f8:
                    b5:d0:99:68:9d:5f:c3:96:a8:34:b2:8f:a7:8b:00:
                    39:22:0e:88:5e:39:4a:ec:64:17:b6:be:a0:f2:d5:
                    1f:64:5a:07:3f:3a:c2:52:46:76:0c:a7:e4:04:09:
                    22:ec:c2:58:3d:72:00:51:13:da:27:b9:71:fe:7a:
                    9d:9d:13:0e:ba:19:cf:02:1f:7d:ac:a7:31:75:d1:
                    9d:ae:25:fa:85:08:3d:f8:03:af:4f:04:43:93:e9:
                    87:b1:6e:04:03:7c:80:7e:be:1e:a5:fd:7b:04:63:
                    31:ad:74:63:62:32:61:5b:e0:65:4a:5f:8f:41:d3:
                    9e:b0:11:59:1b:7c:1b:4e:76:26:1f:a4:89:e0:36:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:93:0E:FB:12:66:FC:B3:22:ED:D6:EF:42:D0:D8:9E:9B:3E:03:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec2b4068-0e15-3546-8900-f47b132c67b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1828::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:02:f3:50:9e:c9:5e:6f:50:29:34:75:54:e1:5b:39:1b:
         bc:80:f4:ac:e9:5c:ca:c9:8c:66:db:60:c4:32:4a:3d:35:7d:
         19:71:52:ef:f2:da:d8:45:2b:4b:e5:49:80:df:73:9b:8d:ef:
         0c:b8:cc:73:a2:76:5f:48:07:08:5d:14:f1:4f:25:a0:b8:88:
         bb:2e:ed:f0:52:d0:94:d0:20:3e:0f:2e:84:85:f8:bf:05:3a:
         7b:b2:39:9f:6f:af:d0:67:3d:2f:84:85:db:c9:47:7d:25:44:
         bd:cc:f6:5d:80:e8:35:b3:65:f2:72:a7:ec:e7:aa:c4:4d:61:
         67:ae:c3:1f:fb:8c:ac:b7:a2:8d:b3:ee:4b:2f:a5:fc:34:fc:
         b6:ab:85:8c:5c:f1:8c:fd:a0:c9:49:98:a6:ca:5c:f8:01:61:
         c9:75:50:0f:66:d5:0c:64:ac:59:41:9b:bb:56:03:81:66:61:
         81:60:69:f9:b3:38:26:6b:ce:e1:fd:ab:5b:4e:99:e1:c1:48:
         39:31:a3:a6:a3:01:df:fe:27:57:5e:5e:ca:90:87:80:d5:1e:
         3b:3f:73:f1:34:05:ce:49:62:dd:9b:ce:03:e1:3f:dc:77:cc:
         80:40:22:36:68:38:f0:25:54:b6:e5:23:0f:22:a5:d4:70:3d:
         1c:f6:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----