Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/09aaaa90-bd52-3c2b-8fd2-f447833f2c9a.roa
File:                     09aaaa90-bd52-3c2b-8fd2-f447833f2c9a.roa (raw, json)
Hash identifier:          VK9MhByVf2+VSIAh2YvbykIy27mBcvvrnZrOCL5xfTs=
Subject key identifier:   21:49:1A:A3:49:99:9F:25:AF:88:99:50:01:18:24:42:E8:B2:51:B3
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584210DEB0D6015BD90A789648C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/09aaaa90-bd52-3c2b-8fd2-f447833f2c9a.roa
Signing time:             Wed 31 May 2023 16:26:53 +0000
ROA not before:           Wed 31 May 2023 16:26:53 +0000
ROA not after:            Tue 29 Aug 2023 16:26:53 +0000
asID:                     61317
IP address blocks:        72.14.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:10:de:b0:d6:01:5b:d9:0a:78:96:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 31 16:26:53 2023 GMT
            Not After : Aug 29 16:26:53 2023 GMT
        Subject: CN=274d4482-1dc8-4521-aff8-e7b049cdc77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:39:93:40:1b:63:69:6b:0c:71:0d:25:06:
                    fe:e8:96:b9:93:2f:ba:36:92:8a:cf:06:b2:1f:2f:
                    77:cd:c3:ae:6e:f4:db:b2:10:13:41:49:85:1c:52:
                    59:05:0f:3b:47:38:80:4c:6f:e7:78:3c:f4:ac:5b:
                    b2:d3:fa:b1:96:9e:cd:12:7a:49:b2:01:a6:45:d3:
                    cc:cc:6f:d8:83:ac:64:87:ee:a3:7a:d7:52:f9:ad:
                    df:f8:7e:8f:e4:c8:e9:78:fc:fc:70:7d:7c:96:fe:
                    5c:07:43:05:99:c1:4c:53:0f:3c:01:42:53:71:4f:
                    78:aa:71:ca:b8:27:35:d3:6d:0b:94:f5:f3:dd:a9:
                    1f:38:3e:45:cf:27:c6:74:71:38:18:bd:44:59:7f:
                    9d:6a:03:2e:17:a5:f2:a7:33:12:27:c4:36:97:3e:
                    fd:f8:ad:67:b7:31:69:3c:d3:30:f5:80:48:31:52:
                    a6:da:b4:e5:3a:d4:d4:e9:e0:5b:9f:dc:32:b2:6c:
                    dd:e0:ba:9f:c8:97:6b:5e:3f:f6:e0:10:bd:1b:11:
                    42:48:86:95:e9:13:81:68:7b:6a:70:01:37:dd:12:
                    2e:77:c8:e6:41:44:c5:d2:f2:01:4e:99:c1:99:2b:
                    98:0c:d5:2b:36:ff:1a:30:46:bc:94:e2:f8:47:e9:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:1A:A3:49:99:9F:25:AF:88:99:50:01:18:24:42:E8:B2:51:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/09aaaa90-bd52-3c2b-8fd2-f447833f2c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:f7:d4:8e:66:42:26:a7:13:d7:7b:89:c0:72:ba:55:fb:
         6a:bc:44:76:dd:4f:64:9c:0e:e0:2e:9d:e1:bd:55:48:3b:a8:
         4e:ae:a5:5d:40:d0:cd:0e:88:be:29:21:65:ca:61:18:01:87:
         7b:ce:06:f2:40:a6:52:be:f3:c4:5b:b6:2c:e9:49:9c:98:a7:
         d1:4e:43:84:77:e0:eb:77:b6:d2:ff:a1:bd:9a:59:1d:d6:72:
         96:1a:dd:52:ac:65:59:dc:1f:3f:f9:1a:8b:28:b5:76:1f:b8:
         cd:19:13:2e:b4:17:e0:fb:97:df:ae:f7:30:f3:a4:1b:74:23:
         59:8a:f3:ae:d0:a0:89:0b:30:6c:48:b8:14:32:f1:a6:5e:64:
         f2:bf:cc:67:ed:94:58:bb:41:44:4e:26:ae:5e:e8:78:da:12:
         0a:5a:b8:3b:42:1e:54:b5:3c:e2:79:e7:28:15:3e:b7:70:cd:
         a3:27:0f:5a:fb:14:d2:85:dc:da:c9:6b:cb:41:0d:5f:44:a8:
         f2:9d:25:a2:37:bb:71:fe:1c:87:c1:60:a8:da:53:e2:c3:e7:
         19:3f:fb:fc:d8:a3:99:a5:4f:49:c5:85:9b:46:ce:82:8c:d9:
         8a:26:b0:76:b0:4c:fe:f4:d8:a8:08:88:48:ba:91:f9:9c:17:
         d5:de:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----