Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6a97e9aa-2b12-30c1-82bd-751227499199.roa
File:                     6a97e9aa-2b12-30c1-82bd-751227499199.roa (raw, json)
Hash identifier:          yLcsVrSPQPk2eu+fn8sGCCNYWXKb0f6S+SIV4uHP05s=
Subject key identifier:   D4:58:6D:0C:49:90:A2:34:35:1F:EE:14:7F:2A:24:79:48:24:D5:EE
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285841E46DB9311E2EFFE353960F60
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6a97e9aa-2b12-30c1-82bd-751227499199.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 05 Jul 2023 07:40:22 +0000
asID:                     398465
IP address blocks:        72.14.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:b9:31:1e:2e:ff:e3:53:96:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  5 07:40:22 2023 GMT
        Subject: CN=657cf031-4bb2-4aaa-9d2c-cb9c41015c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:9d:9a:a7:28:d1:93:2b:e2:55:0e:86:a0:
                    ab:6a:87:3d:34:51:10:57:ce:46:d6:52:1d:20:f0:
                    ae:b8:c2:44:b1:b1:7b:38:3b:e7:32:70:b3:ff:5a:
                    66:93:a8:08:34:71:bf:6c:4e:e3:ed:93:cd:3c:03:
                    ac:c1:44:24:0d:6d:c7:de:5c:07:01:31:c5:43:a2:
                    5d:a5:68:0e:fc:d6:95:15:2e:8d:df:47:30:e3:77:
                    aa:a1:e3:2d:c3:7f:bf:b0:1c:12:62:ea:d1:36:77:
                    ed:a5:a6:03:a6:22:9a:32:49:ac:2a:97:a5:0f:a1:
                    2c:0b:c5:10:08:75:55:c6:06:f2:be:19:65:ba:0d:
                    86:73:d1:cb:f1:4a:da:32:e7:d5:60:d5:cb:d6:6e:
                    a0:99:33:14:a5:0e:11:55:10:92:f2:60:4e:a3:1f:
                    41:04:78:67:1b:70:81:72:9e:67:84:fe:86:55:8b:
                    ff:3e:a2:53:6a:ed:63:a4:cd:95:20:0e:46:c9:4b:
                    10:bb:77:74:10:5a:0a:64:bb:43:b4:d9:51:bc:04:
                    23:56:cf:64:eb:b9:ca:9c:70:8b:ab:85:f5:d4:9d:
                    bc:93:37:42:2f:e9:a1:c8:de:3c:82:a9:87:5a:68:
                    5c:6b:da:43:58:8a:5f:eb:35:e3:9a:7e:ac:b2:2e:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:58:6D:0C:49:90:A2:34:35:1F:EE:14:7F:2A:24:79:48:24:D5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/6a97e9aa-2b12-30c1-82bd-751227499199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:4f:3a:cd:6c:a7:1b:2d:56:ac:1e:13:ba:44:da:6e:ad:
         37:12:8b:b4:35:69:f7:d6:3d:af:44:16:21:7f:e5:f3:eb:b5:
         e9:37:9f:08:ce:9c:cf:d5:f7:09:1e:18:bf:13:1c:29:5e:6b:
         71:bb:52:22:98:3e:ee:fb:5f:ad:29:e3:8f:2d:1e:1b:04:cb:
         bd:b6:db:c5:12:9b:ff:76:00:b4:b2:2d:c4:7e:b6:56:72:36:
         84:8a:c3:33:7a:c0:6d:f3:50:20:24:ec:32:79:80:ab:db:1a:
         fd:6f:c3:45:6c:1a:00:58:92:37:39:31:ee:91:c5:38:0b:e8:
         88:eb:48:47:21:be:1c:c7:e3:ae:25:8b:34:5b:53:1d:e0:b6:
         2f:46:4b:18:24:e4:0a:1a:c3:d3:4b:58:5d:9d:02:08:4a:af:
         05:e4:fc:d3:3d:fa:17:93:72:34:22:12:ce:d5:7e:44:b0:0d:
         50:0c:0d:d4:96:cb:78:92:46:5f:f7:64:65:99:cb:f8:69:da:
         74:b6:93:aa:5d:56:93:c2:fa:04:05:fb:55:48:9e:21:50:a5:
         45:b0:f4:51:77:37:8e:71:9b:f1:af:91:f4:c8:2d:b4:9d:f8:
         4d:9a:19:5f:9b:17:e1:e5:93:48:cc:76:0a:de:16:cd:c2:99:
         7a:1b:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----