Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ff5d8309-bd40-3e40-94f4-84a840a77db1.roa
File:                     ff5d8309-bd40-3e40-94f4-84a840a77db1.roa (raw, json)
Hash identifier:          vWLb5D+bKWemwtpUN7mphaH3PuUECCY21S6R28De4gM=
Subject key identifier:   49:8F:A0:83:98:88:85:17:AF:48:CC:09:2E:29:47:A6:F7:C1:2F:7F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75A8208BDCF001977765E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ff5d8309-bd40-3e40-94f4-84a840a77db1.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:a8:20:8b:dc:f0:01:97:77:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=7acb96ae-51be-4ad8-8609-01c880a3dd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:b6:7e:90:b1:ca:ab:8d:7f:d8:55:fa:ac:
                    d8:38:3c:73:d6:2f:88:92:95:ed:ce:5d:2a:87:e4:
                    6a:b5:24:25:40:41:df:98:0f:d0:80:66:4b:1d:b1:
                    31:07:25:e0:69:81:47:2c:41:53:ab:33:cc:43:0c:
                    31:b6:99:59:8a:de:1c:e3:c1:4d:42:e0:f8:af:1c:
                    ac:ba:8b:ba:23:c2:3e:56:24:52:b6:00:c7:f0:91:
                    65:09:26:63:7b:2c:ca:3e:0d:77:84:5d:f6:ef:ac:
                    ae:b9:e1:9c:89:34:c2:ff:2a:e2:ec:37:a0:ef:fc:
                    b7:81:c4:d7:49:37:2e:8f:2d:50:df:93:47:70:ba:
                    13:6c:d9:c9:a0:56:9a:b9:6f:77:16:0e:47:db:b4:
                    d1:96:5e:f8:7a:d8:bf:04:64:63:14:a4:e6:b4:92:
                    49:24:ff:6f:e3:fd:bb:b3:42:43:71:d2:81:d6:73:
                    c3:15:2a:94:d9:81:2a:49:ba:5b:9c:b2:e2:17:e6:
                    17:c7:a4:0c:e8:c4:fb:d2:8b:a9:36:04:96:0a:42:
                    df:7d:ac:52:c1:6d:79:45:cc:2e:c3:80:16:d7:fa:
                    b9:7a:23:a5:d1:23:f8:a6:6a:75:aa:af:9b:58:44:
                    0b:e9:8e:99:0b:14:b3:d9:16:6f:c5:92:c4:a1:be:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:A0:83:98:88:85:17:AF:48:CC:09:2E:29:47:A6:F7:C1:2F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ff5d8309-bd40-3e40-94f4-84a840a77db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:0a:ae:ce:fd:ae:16:98:71:71:ad:82:fa:d1:b9:b1:a8:
         26:41:b7:dd:9d:4a:ed:8d:7e:1f:a9:35:3f:fa:79:07:84:88:
         1c:f0:bf:c7:11:d5:07:a0:f0:5a:4e:d3:e0:54:ed:b7:ed:54:
         a6:74:a1:e7:5a:3f:de:86:2c:44:99:f0:0c:67:c0:05:ff:08:
         9a:7d:77:95:b3:2c:13:ef:e7:33:4c:6d:81:2d:52:c9:ae:91:
         1f:4b:5b:53:d3:4e:9a:53:dd:6e:43:b8:b8:e1:1f:c6:ea:dc:
         f1:c8:ad:d0:55:f6:52:59:16:c9:4e:37:f4:ab:57:9d:99:01:
         94:00:a3:a3:b6:43:d2:f8:40:80:c1:d8:2f:2a:3d:9f:ef:05:
         8d:96:c6:bf:ba:5e:8d:73:38:32:f6:0b:9e:f3:fc:d4:77:b5:
         f5:b1:53:4c:e5:04:f3:3b:a6:f6:5d:f1:18:fc:24:e6:de:05:
         2a:2d:d7:22:52:ca:82:bf:64:bd:0e:e5:21:75:a1:11:a2:b5:
         62:44:12:ab:cb:27:10:17:2b:f7:80:fd:65:77:29:5f:18:10:
         a0:0c:d2:ff:a0:97:d9:d2:09:54:ca:dd:68:21:c3:95:56:b7:
         36:be:51:63:95:42:df:21:e3:0d:49:bf:7a:7b:20:42:c4:08:
         06:02:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----