Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ad6ea56-e242-3e95-a15c-ba4968794092.roa
File:                     0ad6ea56-e242-3e95-a15c-ba4968794092.roa (raw, json)
Hash identifier:          x5MEuOCH3ng6NTfmPA6unFDTykpJhy23YXQOUHLTfDk=
Subject key identifier:   A1:F5:76:73:30:7A:F8:9B:A9:CB:C7:87:B5:0C:72:F0:BC:E6:7E:A2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB06EFE8ACE18AC6E6497C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ad6ea56-e242-3e95-a15c-ba4968794092.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     19842
IP address blocks:        207.35.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:6e:fe:8a:ce:18:ac:6e:64:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=32f95865-d47d-4d97-b872-188f9ffad551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:88:9b:02:44:12:c9:e7:06:16:e7:2c:9f:
                    39:f5:93:3e:5a:db:ac:78:be:f5:0a:99:7d:26:26:
                    70:cc:05:99:17:39:68:86:80:23:ad:d6:3f:74:18:
                    51:2f:9c:3d:e6:02:33:bd:15:2c:a9:bf:7b:6e:14:
                    13:1f:7f:f8:3a:53:3d:82:45:a7:5c:8e:f4:73:82:
                    08:f1:ec:07:3e:55:77:b0:c9:ff:bf:69:89:97:5c:
                    47:5c:85:18:f9:62:f7:4e:d0:bd:89:ec:c5:c9:ea:
                    2b:98:d8:47:2a:9c:eb:f5:d5:7a:63:e1:35:c7:2f:
                    3b:ec:39:11:98:33:e7:26:b3:d4:c4:75:92:dc:44:
                    25:b1:31:2f:4c:50:27:0d:7c:13:6e:54:16:cc:06:
                    8b:12:0e:b7:47:c0:45:63:3a:d5:3e:40:a0:78:25:
                    45:a7:8c:31:2d:32:58:d0:19:25:ab:42:d8:80:e4:
                    ab:85:e6:39:e9:37:4f:fb:e3:97:ec:2b:51:cf:ce:
                    e4:0d:7b:8c:5e:69:e3:7f:09:d4:7e:7c:96:8d:f6:
                    e7:81:18:c1:db:5d:31:83:23:b8:29:5a:60:c7:1e:
                    65:36:aa:55:f5:f4:32:0f:1c:b2:e7:af:cc:c1:9d:
                    50:8d:7a:a9:27:bd:f1:e5:31:0a:6f:38:ff:7e:06:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F5:76:73:30:7A:F8:9B:A9:CB:C7:87:B5:0C:72:F0:BC:E6:7E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ad6ea56-e242-3e95-a15c-ba4968794092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:f8:53:d9:2d:61:fa:88:c0:35:af:18:77:9b:40:92:9d:
         85:ca:eb:85:5f:8a:e2:59:c4:09:54:cd:0c:42:cc:6c:d7:d4:
         a6:49:04:01:74:5f:a5:fc:69:c4:10:cb:87:e4:9d:59:eb:2b:
         42:26:8c:75:29:54:b0:8b:e9:de:f5:18:53:37:80:91:d0:a7:
         71:78:09:ae:ee:f7:7e:5c:64:53:e1:25:60:30:b4:61:28:f2:
         4a:88:d1:41:6d:e5:23:9a:4a:cf:26:4b:0b:c7:cc:02:ad:5e:
         34:7a:ae:51:8b:6b:9b:3f:97:37:3b:de:be:0a:d6:8e:ee:78:
         99:76:af:b7:30:b3:95:b0:2b:1a:22:c3:7a:b5:bb:6b:1d:10:
         64:6d:66:1f:0b:e1:bf:cf:3b:1f:ef:85:6f:60:2f:95:a9:83:
         8b:a5:9f:bb:20:8d:68:61:07:23:56:c6:77:29:e0:60:3f:03:
         68:d2:da:e5:bd:75:b6:b8:ca:68:44:a6:fa:7d:49:a4:1a:de:
         d6:80:9e:6d:5c:bd:0e:5c:7e:6c:45:d2:5f:3c:e1:a6:42:ec:
         46:b0:cb:d5:f3:47:60:e1:ff:74:44:98:31:35:ad:67:1c:21:
         72:fa:cd:04:7d:2a:5e:ee:e9:f0:89:2c:38:dd:1d:2e:7e:43:
         b4:82:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org