Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0274f7a8-f5c1-336c-9550-870169a8cf76.roa
File:                     0274f7a8-f5c1-336c-9550-870169a8cf76.roa (raw, json)
Hash identifier:          hc/jcyRzLZUsICLPlTgf74dBcGrZCS45Q2aoin0JLBc=
Subject key identifier:   11:68:33:B0:95:BD:E0:CB:0E:9E:CF:69:54:A0:C2:F5:2D:43:08:C4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE3F11E214F6F65D17DF900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0274f7a8-f5c1-336c-9550-870169a8cf76.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36493
IP address blocks:        66.38.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e3:f1:1e:21:4f:6f:65:d1:7d:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=9d98c1c1-3ed5-424e-b9f7-9528c99f92d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:ca:1c:38:44:f9:92:f4:ee:01:39:f7:82:
                    47:6f:1b:84:43:9a:39:da:b8:d1:f8:49:b3:e7:36:
                    f8:09:d8:e4:e0:26:d0:26:d2:32:2b:b7:c8:01:ed:
                    82:57:f8:7f:98:d5:97:ee:ca:5b:18:72:88:6a:7e:
                    71:5e:49:ad:ca:42:35:5a:f0:37:d0:fb:2e:8b:ae:
                    0f:fe:8a:e8:96:51:55:c6:e0:f7:eb:ca:6e:01:e3:
                    d7:cd:9a:01:4e:b4:65:1f:46:dd:f8:3d:b4:cc:b4:
                    2f:9a:ee:e4:4c:77:f2:42:f2:e1:6c:4d:ae:dc:95:
                    82:bb:67:3d:8d:46:c3:7e:9e:87:e1:84:99:e7:be:
                    c0:5c:b4:5a:c6:d8:5b:ab:20:f7:1e:dd:04:2c:8e:
                    23:6c:76:2f:aa:b9:5e:b8:80:32:7f:53:be:4c:fe:
                    a6:29:a4:39:0b:09:59:8a:98:f6:76:16:7c:63:78:
                    d9:66:a4:92:42:f1:6a:57:f1:ad:1d:00:69:30:0f:
                    55:ee:db:0f:ed:f7:90:9c:2b:a0:67:ff:06:4b:7c:
                    c1:ca:ca:7e:2a:cb:34:d9:c2:67:fb:35:a0:5f:b2:
                    5b:2a:de:7e:71:8c:81:32:6e:a4:c6:76:7f:99:b6:
                    bb:d6:8e:6c:a8:5a:f4:ca:de:70:24:8e:8e:96:ca:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:33:B0:95:BD:E0:CB:0E:9E:CF:69:54:A0:C2:F5:2D:43:08:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0274f7a8-f5c1-336c-9550-870169a8cf76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.38.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:1b:b2:c0:57:e7:0d:1a:de:e6:39:dc:69:61:94:a9:e7:
         ec:56:65:62:4e:01:a4:1d:64:0a:16:42:53:f7:9a:18:43:4f:
         03:89:33:d1:e3:67:b6:59:ad:58:c5:81:7f:c3:d8:06:7a:1f:
         08:d3:7c:ea:e4:b1:2f:24:fb:43:17:65:00:ce:06:bb:f7:11:
         2f:5c:cf:42:49:fd:4e:c5:c3:28:88:90:0a:63:e3:58:fb:57:
         ac:f3:1d:c6:ed:35:8e:4b:fc:85:35:85:59:e5:72:24:ba:2c:
         93:62:b3:1d:97:60:9c:b0:f4:fb:d9:e1:1b:d9:6b:69:dc:c6:
         53:a3:75:26:a8:6f:5d:b3:b8:f7:a7:2e:86:a4:11:20:e0:08:
         88:26:f2:80:3f:1d:7c:83:63:26:0a:10:d0:93:0f:45:82:60:
         92:fb:98:96:e7:e9:ca:3d:67:4e:4f:61:b7:90:d5:2a:69:57:
         1e:53:b2:cd:6d:6f:8c:4c:7b:ef:e8:72:f0:35:33:b0:d6:91:
         f6:9a:c3:83:2b:3e:d0:43:6d:a6:ec:e3:dd:c4:55:5a:ae:a3:
         99:70:09:ed:34:f6:cb:04:94:7e:68:24:63:08:6a:34:4a:00:
         b3:96:b6:18:8d:c8:ba:60:47:cd:29:00:85:72:64:a5:8f:6f:
         6c:ca:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:21 2024 by rpki-client on console-ams.rpki-client.org