Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fce9d382-ea8d-3a14-9879-eead9d6c2a57.roa
File:                     fce9d382-ea8d-3a14-9879-eead9d6c2a57.roa (raw, json)
Hash identifier:          62UZLpHjDdG6kX4iO9wARXZfgy+bSb30U2Et8uufy/s=
Subject key identifier:   DA:EC:2B:CB:C1:C9:C4:EE:92:6B:CE:53:48:15:66:92:4B:FC:E6:F5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75F760B0B0141B42EB1D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fce9d382-ea8d-3a14-9879-eead9d6c2a57.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:f7:60:b0:b0:14:1b:42:eb:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=ffa85358-a726-4030-80b8-13728c0861f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:01:d7:d4:e8:a8:f2:f1:d3:5c:ef:18:4d:
                    ab:73:03:e8:42:8a:1b:f7:10:59:e3:b2:b8:87:0a:
                    6f:26:33:92:72:34:f9:7b:13:bf:aa:ea:b9:cc:21:
                    00:ee:53:25:b9:48:d0:7f:d2:54:f7:bf:4c:da:fa:
                    a1:e7:e3:6f:67:73:15:e5:bd:f6:0a:61:2d:e5:95:
                    de:1b:5a:f3:3c:f1:78:ad:c2:79:50:3c:35:55:19:
                    f6:aa:41:4b:69:1c:01:ff:f2:54:c8:29:3a:f6:be:
                    43:67:fa:3c:ea:a7:5c:ed:c0:b1:21:44:b7:0a:0d:
                    d1:20:1a:ea:a1:ab:db:07:bd:19:31:0e:0e:12:25:
                    24:90:09:12:1f:67:57:4c:16:f7:d3:c5:1d:72:74:
                    80:3c:07:54:cf:74:b2:1a:e0:0a:87:9a:9d:b2:1b:
                    5e:84:0b:5e:c5:6d:71:de:ee:ed:1a:80:94:03:90:
                    f5:c5:b6:53:22:f6:f5:a6:9e:34:70:a5:08:43:69:
                    6b:72:ef:9e:1c:4f:bc:6b:f8:c5:45:77:ed:6c:2c:
                    88:6c:58:c0:46:b1:ea:b2:6a:b1:99:f5:55:b5:ea:
                    f1:84:99:18:e2:f6:33:07:79:2b:33:e4:72:98:42:
                    ea:78:78:92:d2:11:3b:fb:fa:ea:28:88:60:2c:84:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:2B:CB:C1:C9:C4:EE:92:6B:CE:53:48:15:66:92:4B:FC:E6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fce9d382-ea8d-3a14-9879-eead9d6c2a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:69:66:27:8c:7b:96:9f:6e:f3:dc:38:3a:17:0f:d7:56:
         06:1c:a9:f3:12:de:f3:e2:39:33:4c:00:f0:e9:c8:e8:86:8d:
         3a:20:e2:e9:30:27:b3:b3:eb:6d:c7:35:72:8a:9a:c5:f3:d9:
         19:de:81:57:e9:7e:f5:7f:87:ce:4c:5c:ac:fe:ee:e1:b7:dc:
         bd:90:54:de:89:08:d1:0f:11:3c:3c:b5:ab:da:02:93:50:28:
         f1:49:ae:bd:bd:da:4b:49:23:26:70:ad:b4:1d:44:78:43:73:
         a9:96:a5:0b:33:77:7a:a6:2b:5c:fc:ab:2c:55:a9:9c:3a:32:
         25:6c:d9:62:72:ea:07:6e:61:dc:b0:6d:b5:10:bb:79:83:3a:
         53:75:b8:34:20:f7:7f:b3:f5:67:db:9a:5c:82:b8:5f:f9:a7:
         b0:21:58:13:80:4e:c7:95:f9:1b:a5:fa:3c:cb:af:4e:7a:cc:
         d4:d9:63:ce:21:54:5a:f2:5c:07:ac:41:3c:df:77:69:02:6d:
         f6:93:c7:7b:2b:77:ed:72:8d:8b:25:64:94:d5:4d:a7:2e:0c:
         74:13:3b:b3:ec:7f:a8:f3:35:29:80:6a:c3:24:07:18:71:f1:
         6d:09:31:2e:93:9b:54:b3:60:92:fc:b8:02:cb:30:20:8f:f9:
         54:83:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----