Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee99a997-2f13-35bb-a904-b9c58820ba7f.roa
File:                     ee99a997-2f13-35bb-a904-b9c58820ba7f.roa (raw, json)
Hash identifier:          FRqB0KBioVFHxB1FOdTNmLiiVxKB2OFEc5Vtu6TQWp0=
Subject key identifier:   5D:56:79:0E:72:D1:52:6B:E3:7D:29:ED:9E:E0:A9:E6:DA:B0:1B:C3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF76372617F9D9B8636B2880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee99a997-2f13-35bb-a904-b9c58820ba7f.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     15321
IP address blocks:        216.209.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:37:26:17:f9:d9:b8:63:6b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=a062d0b9-9a92-43cf-b7c2-a701d1bfc6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:82:76:60:bd:0c:a2:e8:70:9a:48:ce:09:
                    2a:e2:10:bb:4a:7a:cd:7e:99:5e:e2:9e:55:5e:4a:
                    0f:87:1b:80:92:76:72:88:11:87:fd:e4:c8:aa:e6:
                    54:3d:74:85:88:20:38:2b:45:49:34:98:47:c3:03:
                    7e:58:24:c0:71:91:ff:71:e4:20:97:da:8c:86:16:
                    f0:9f:dc:0e:2e:3a:e8:63:81:0f:4d:f8:92:8a:9d:
                    6c:ca:a9:f0:ee:43:a2:d2:b9:3a:f2:3a:38:e3:8c:
                    41:e8:19:3a:22:7a:20:6b:27:31:e7:7f:a3:b5:e7:
                    97:a8:ef:a7:72:ab:63:40:d6:0a:d4:b3:3f:ce:1e:
                    53:01:f6:e7:4b:96:9a:85:6f:20:b6:17:3f:2d:97:
                    04:ef:4e:e5:f3:29:49:73:03:81:7a:58:e5:ce:67:
                    bf:aa:99:ba:37:0d:b1:77:8b:c0:10:04:71:2f:df:
                    0f:4c:9a:87:3e:fb:39:2b:84:e4:ba:79:3e:8f:24:
                    9a:f3:0e:a0:3f:13:11:cd:78:2b:86:94:0b:b3:40:
                    f4:59:c6:4b:e2:f3:64:39:f6:dc:95:28:44:67:da:
                    9b:9c:4d:08:5f:1c:ed:61:32:74:3a:16:1e:84:50:
                    5c:37:9c:65:d2:d6:68:df:d8:f2:77:7a:cd:71:17:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:56:79:0E:72:D1:52:6B:E3:7D:29:ED:9E:E0:A9:E6:DA:B0:1B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee99a997-2f13-35bb-a904-b9c58820ba7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:9f:b4:1b:b4:0b:66:4c:d8:46:ee:4b:95:ae:a3:13:51:
         aa:62:57:2a:b8:20:84:9a:54:9b:62:47:fd:8b:00:8f:8d:1f:
         0f:49:a7:4d:1a:58:6f:45:11:e4:26:94:08:43:54:07:d8:e7:
         ff:0b:8d:77:69:c2:98:50:ec:63:0a:21:43:c9:7e:1f:21:38:
         c1:c2:29:d5:c7:47:d8:73:bb:c4:56:6c:f7:9e:eb:15:cc:c5:
         b7:f7:e4:0e:23:03:4f:25:0d:61:30:85:2c:20:70:69:16:0b:
         46:6c:c8:a7:f4:d2:a0:6f:25:dd:db:2c:ac:ee:2a:53:04:39:
         ed:2f:8b:83:fe:97:d4:4b:43:d2:73:cf:d3:95:c1:6e:5e:48:
         5d:f7:ea:ed:36:9f:a0:43:2f:a0:b4:a8:b4:ee:8e:44:f4:89:
         2a:bb:54:ba:33:32:27:6b:fd:f9:c8:e4:0f:b2:f0:9c:b6:e3:
         50:c4:ce:7e:9c:d8:40:2e:05:f3:61:c2:24:a6:0a:85:03:d5:
         08:0d:d9:eb:e1:98:b9:9e:05:64:24:ca:db:d4:7c:9f:c2:f9:
         92:26:59:c7:e1:7a:ed:cc:b6:87:41:32:07:48:79:28:df:e3:
         01:78:0a:2e:65:d1:2f:d7:af:cd:e7:7e:f7:32:b9:2a:a5:fc:
         17:7b:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----