Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0d34946-6f40-3d48-aec0-71a920c1d184.roa
File:                     f0d34946-6f40-3d48-aec0-71a920c1d184.roa (raw, json)
Hash identifier:          HqjIH3XkdaN1SqCYZ1x8KrRQV2Ed07ipWtOU2M0qClo=
Subject key identifier:   86:0D:7F:EB:C0:1F:F7:E8:24:45:92:D8:95:09:4E:22:DC:31:9D:51
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7647696D0ACA98EB11CA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0d34946-6f40-3d48-aec0-71a920c1d184.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     3848
IP address blocks:        2001:4958:a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:47:69:6d:0a:ca:98:eb:11:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=d7327a29-9571-447a-abbd-47373b186dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:20:4c:75:74:bd:77:d7:98:39:27:bb:c9:
                    b3:1d:fd:67:a9:b1:45:d9:15:98:ab:c0:10:07:13:
                    e7:49:36:4b:22:66:bb:66:f4:19:9e:b4:f3:db:52:
                    e9:96:a2:a5:53:ac:f2:ae:bf:7c:7a:c3:4e:e1:c6:
                    74:2d:5f:6e:12:42:71:48:09:8f:75:95:6e:83:be:
                    a8:29:0f:3f:aa:d8:56:bd:02:56:9b:54:5e:44:b6:
                    50:74:27:f4:da:3c:70:1b:d8:e0:c6:0f:8c:8f:40:
                    66:dc:37:05:b2:88:7e:5a:81:c5:17:8b:c4:8f:65:
                    84:e2:ad:09:4c:27:10:f7:76:4d:fc:2d:be:74:24:
                    d5:44:10:99:4a:9f:1e:9a:2a:37:e5:a3:75:3b:4d:
                    a2:bf:fd:1e:77:39:18:cb:83:57:91:38:3a:20:7c:
                    68:be:7b:61:b4:5b:f7:20:c3:d6:82:fd:9c:fc:9f:
                    b3:95:a3:a9:4f:11:b0:71:55:33:fc:67:2b:8e:5e:
                    94:7d:7e:01:b2:45:95:d6:44:34:c3:02:2e:1c:57:
                    31:c3:17:6d:20:bb:05:33:b1:a1:0d:73:c5:c1:a8:
                    f2:fd:91:4f:3f:06:5d:8b:9f:8c:6b:35:e4:7b:3d:
                    75:c5:c2:23:28:46:79:0d:e4:8e:45:4f:d2:dd:25:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0D:7F:EB:C0:1F:F7:E8:24:45:92:D8:95:09:4E:22:DC:31:9D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0d34946-6f40-3d48-aec0-71a920c1d184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:ba:b5:c2:19:1d:d6:e5:22:c2:cb:1b:61:67:c3:77:96:
         47:32:dc:6d:35:28:96:2e:2c:b5:fc:cc:e0:65:74:c2:7b:11:
         f5:62:ae:3d:1f:08:af:9e:b3:3d:68:0a:7f:e4:ac:65:b4:64:
         34:46:07:84:30:59:05:c1:91:99:98:dc:0e:e3:99:8d:8f:d4:
         d8:d5:a7:19:a4:4a:65:ac:84:f7:13:5b:03:af:66:57:ec:b2:
         63:47:85:bf:82:64:9b:2c:8d:6e:51:b2:d8:44:3c:0f:1b:53:
         e0:ce:fa:35:e6:88:de:f7:9f:75:c0:3a:3b:1b:4c:de:0a:cd:
         ad:25:da:56:4f:68:f3:5c:42:cb:fd:2a:61:d8:85:d8:47:43:
         ca:03:d5:d1:7a:b1:f7:a4:80:5d:bd:d4:9f:b1:8a:f6:b2:45:
         2f:50:4f:ea:fa:ac:48:ef:b0:4e:2c:b5:e6:2a:58:44:81:06:
         15:6a:91:82:4e:aa:e8:53:c0:3e:44:ef:b2:1f:91:fd:e8:f4:
         eb:5f:24:27:aa:63:a6:ad:81:57:61:fd:1b:57:66:8a:b2:c7:
         de:c8:c5:14:b7:ac:bd:0d:62:37:f5:49:58:1e:d0:11:ef:8a:
         0e:45:7c:46:8c:84:6f:4e:03:d4:dd:08:71:5a:ed:31:ad:ce:
         c8:6d:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----