Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f979781e-32c9-3ed3-8044-47b3545c939a.roa
File:                     f979781e-32c9-3ed3-8044-47b3545c939a.roa (raw, json)
Hash identifier:          znjAD763ElYAgrlgzJLFO2GxtpFjmsTpzY9/o/lbtb4=
Subject key identifier:   7C:94:FD:FD:3B:0B:0D:FA:95:62:8D:00:28:2D:54:C7:60:A6:F1:00
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75029D661FDEDE0371C3C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f979781e-32c9-3ed3-8044-47b3545c939a.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.27.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:02:9d:66:1f:de:de:03:71:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=1b7751d3-bb51-42b2-8db5-271ec160be9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:41:65:e3:31:72:95:ea:ae:50:3f:0d:45:
                    19:c4:3d:a2:91:12:d7:a0:77:72:ef:f0:a7:91:b1:
                    de:41:5d:65:5f:5b:97:86:61:b8:df:f6:3a:e3:52:
                    d4:1d:05:cf:c6:fb:bd:75:99:3e:e6:6c:c8:89:e7:
                    7d:37:b7:b9:88:b4:7c:47:55:88:ba:b9:65:2a:c9:
                    7d:a7:c5:7d:c5:7b:f3:9d:9c:24:cd:29:6d:21:49:
                    f0:a6:e8:93:9a:5c:ab:2e:ab:97:dc:1e:b3:13:9a:
                    47:74:24:62:67:11:4d:4c:12:60:ab:f7:a4:fc:2a:
                    1b:e9:46:83:ac:0a:d1:bf:60:5a:d4:73:41:ed:b1:
                    cf:89:77:f5:59:d3:82:bd:c8:47:50:6b:b8:23:03:
                    19:e7:7e:6d:fa:7e:46:cd:7d:01:d5:35:44:67:e8:
                    10:c6:9a:b6:24:79:24:11:ed:bf:66:3a:15:72:6b:
                    5c:4f:30:3b:11:1a:2a:51:3a:86:30:de:c5:c3:fa:
                    04:e6:93:95:38:17:ae:6c:ec:6c:81:bb:8d:bb:df:
                    3e:7e:85:92:72:bc:27:fc:dc:2f:3f:c4:23:5a:bc:
                    52:da:0e:74:85:70:ae:69:55:99:a1:ee:0a:15:2a:
                    96:c1:9c:e4:13:c4:9a:71:ea:82:6b:8e:62:e1:ee:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:94:FD:FD:3B:0B:0D:FA:95:62:8D:00:28:2D:54:C7:60:A6:F1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f979781e-32c9-3ed3-8044-47b3545c939a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:7f:25:e5:2d:d7:a4:63:81:de:c9:c8:5e:f5:7c:ec:50:
         90:db:dd:6b:7d:90:1a:d4:0f:f4:4c:82:b2:93:41:43:be:4a:
         84:e7:c0:02:1c:1d:18:e8:93:d7:a4:b9:9e:25:a9:ff:3f:c2:
         80:4c:91:c0:20:69:b2:48:2b:9a:6e:3a:d3:b7:f5:f8:ee:c8:
         82:4b:3d:a6:e6:74:4a:b7:a1:ab:2e:e6:a7:0e:02:bc:90:f5:
         bc:da:3c:2a:9b:7c:3e:bf:e8:81:a7:f7:1b:ce:b6:23:dd:2f:
         9c:4e:21:03:c9:be:b3:26:1d:a6:57:9f:d5:20:58:19:34:a3:
         14:d6:78:af:8b:9d:56:83:1b:6a:b3:8c:e3:bf:cd:f2:41:24:
         f6:be:a9:2b:d6:bd:27:e3:79:bb:6c:70:e3:a2:81:cc:9d:7e:
         0b:87:97:7c:2b:f8:98:c7:34:96:01:9a:2e:5b:e8:b0:89:25:
         df:d8:c2:95:1b:a3:e6:d5:29:4a:3b:f5:85:a9:03:24:17:f2:
         b2:60:9d:29:e4:62:e5:c6:c0:81:e8:d3:a4:21:48:07:b6:4b:
         ff:e9:5f:09:c6:c5:df:b6:5a:d9:92:2f:3b:af:f6:28:eb:64:
         05:59:e8:fe:3f:3c:04:45:14:7c:1c:cf:f1:8c:85:a5:76:df:
         5b:bb:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----