Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0836bc6b-6db9-3303-b7ec-81fb636c676d.roa
File:                     0836bc6b-6db9-3303-b7ec-81fb636c676d.roa (raw, json)
Hash identifier:          Ebffmo95K4inUnu4W4+Bz8MjXSuK9+J9rmqVvMpjdRo=
Subject key identifier:   40:1C:65:E8:25:2A:57:A0:84:D8:33:37:57:AB:1F:7A:22:B6:75:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA13003F1432A07C92518A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0836bc6b-6db9-3303-b7ec-81fb636c676d.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     32463
IP address blocks:        209.226.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:13:00:3f:14:32:a0:7c:92:51:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=92b92882-32e5-43df-a18a-2ac8bbd58092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:a2:54:7f:8b:5d:bf:1c:ac:d0:4f:85:8d:
                    ef:d3:01:71:05:40:be:b8:50:9f:97:0b:1b:d8:b3:
                    e3:e7:2e:e6:ab:c2:5f:3d:1e:e4:41:38:f5:bc:98:
                    44:1c:98:97:03:30:5f:f8:bb:c2:ca:d2:9f:d5:44:
                    45:99:b2:9a:c9:a8:b4:e7:9b:68:5d:79:2a:57:c7:
                    ad:b1:73:5b:4c:56:72:32:81:27:d8:42:d9:c4:fa:
                    b1:57:23:8c:9a:16:b8:58:82:65:a4:b9:97:3b:40:
                    7a:79:97:f8:1e:df:d7:30:36:74:ce:80:55:d8:91:
                    b4:2d:c6:db:3f:46:2b:d8:26:aa:24:3c:60:d3:98:
                    e0:47:f7:82:5b:6b:2a:15:22:5f:2b:c7:91:17:5d:
                    45:44:b3:91:04:04:bb:bd:2d:30:2e:8a:04:8b:39:
                    62:f7:d9:22:af:9b:17:bd:95:9d:18:27:b2:f2:54:
                    d7:a7:b9:02:2f:92:54:f3:ad:77:c3:a0:80:3e:ff:
                    14:d7:e8:fa:ad:d9:6e:82:72:ad:a5:53:90:06:d4:
                    da:04:4a:27:78:11:f4:07:66:4a:3a:fe:30:6c:65:
                    35:35:db:1e:18:c8:af:34:34:a4:b9:fd:6e:15:87:
                    17:79:cd:65:e7:20:3e:ba:00:92:fc:ac:d0:5d:81:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:65:E8:25:2A:57:A0:84:D8:33:37:57:AB:1F:7A:22:B6:75:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0836bc6b-6db9-3303-b7ec-81fb636c676d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:38:7f:26:b1:8d:d1:bd:9a:f6:87:ec:b3:ce:23:22:1e:6b:
         f5:d7:5e:7d:4a:13:90:a6:69:fc:69:89:69:63:1f:e8:45:81:
         fe:87:15:dc:76:41:a4:11:3e:73:8e:62:b0:15:71:42:30:a5:
         a5:cc:9c:78:92:9e:0e:f3:d5:db:fc:44:6a:55:6a:34:c9:6b:
         65:c5:4b:93:ec:6b:57:55:3e:ea:75:ba:2e:05:9e:b4:c7:f8:
         e3:e2:c9:4e:70:b2:f5:5b:7b:4a:00:eb:d9:61:28:fb:03:91:
         87:e7:f4:77:0d:b6:20:ae:7f:e0:b5:ce:e4:71:ae:74:e3:c3:
         6d:df:78:6c:23:6e:a2:b3:e4:12:5c:a2:be:59:8d:cc:53:dd:
         73:d8:5f:b0:15:ae:79:1d:48:3f:5c:06:02:ae:da:7f:bc:00:
         d5:0b:bb:cb:b1:fa:20:65:1f:4b:0e:a9:4c:f9:67:8e:5f:23:
         ef:02:c4:3b:b9:df:51:41:8d:95:a5:09:de:38:96:4d:f2:26:
         73:12:be:4a:5e:4c:9b:c4:71:16:35:03:5a:0b:77:c1:a3:d5:
         e4:93:8e:7e:71:51:21:60:cb:04:04:51:fd:39:14:14:b2:93:
         31:53:86:eb:84:02:56:77:8d:af:c9:c0:6d:e4:45:03:8a:a1:
         c2:66:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----