Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10c41e5d-798d-3819-a7d0-44cea122fc35.roa
File:                     10c41e5d-798d-3819-a7d0-44cea122fc35.roa (raw, json)
Hash identifier:          Xdab/mRF50lmPtX1uNK2cWpL70nH80dnNmT+woxW+Cc=
Subject key identifier:   BD:ED:87:BA:23:93:C6:89:C5:BA:2C:52:6E:2B:B0:B7:1F:4C:49:DC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB0D22BDDFA585133946080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10c41e5d-798d-3819-a7d0-44cea122fc35.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        207.236.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:d2:2b:dd:fa:58:51:33:94:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=440f1d7f-7476-4a46-bac8-2f6c28dca64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:b7:58:93:ed:a3:2f:cb:b0:2b:82:f1:76:
                    99:7c:89:89:ee:14:86:2b:45:5d:8b:c3:d2:61:ea:
                    67:6c:54:f5:db:70:a2:61:4a:43:bf:ad:21:49:3d:
                    91:88:6e:1a:33:40:22:64:3e:72:d8:2c:10:f8:eb:
                    97:df:60:d7:9b:60:e5:aa:8c:c8:ce:1c:87:95:b0:
                    c8:28:c9:d2:16:4e:76:2c:38:5f:ca:fb:cd:35:7f:
                    f0:97:76:e2:37:86:df:ff:33:99:38:c3:bf:a8:6a:
                    d6:02:50:2f:58:9d:5e:c6:eb:3e:45:30:1a:23:23:
                    a3:e6:ee:ee:55:ae:2b:2c:f6:b1:09:d7:3d:b1:2e:
                    d9:1f:f9:1a:9b:6b:b1:83:3b:96:81:8a:41:af:ef:
                    16:5a:74:6f:d6:20:a0:6f:c9:f0:0e:40:5b:1e:cb:
                    12:e3:7a:aa:8d:9c:3a:f6:a4:f7:d1:ac:52:c5:2b:
                    68:cd:15:42:9f:33:b5:91:39:5c:fb:63:a0:4a:93:
                    49:16:02:ac:9e:2b:77:f3:10:28:37:c7:fb:c1:d1:
                    de:81:6d:77:ce:25:3e:48:af:82:11:b5:04:7a:49:
                    57:c9:59:0b:de:22:97:8d:e3:f6:a4:c7:83:8f:c9:
                    27:8d:a5:dd:25:38:f8:e0:e8:97:c3:85:a0:e2:a8:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:87:BA:23:93:C6:89:C5:BA:2C:52:6E:2B:B0:B7:1F:4C:49:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10c41e5d-798d-3819-a7d0-44cea122fc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:3e:64:b7:82:d1:23:f1:2c:3a:be:7e:cf:1f:28:fc:44:
         53:78:a3:91:fe:9d:56:3b:04:70:42:af:e1:60:bf:15:8b:17:
         87:fa:43:fd:1c:99:38:6e:fc:0c:25:41:b7:67:32:e0:c0:a5:
         74:3b:7b:14:77:fc:bb:d9:f7:e9:cf:bc:56:24:c2:07:03:be:
         31:de:de:e8:85:99:49:5b:40:01:33:a1:73:38:65:22:a2:e3:
         5f:b6:4a:e2:e9:f2:1f:1a:4c:fb:09:12:f3:6d:d1:78:54:f4:
         54:79:cb:f2:c6:d0:34:2f:e5:1a:fc:ce:24:c7:a1:ba:9f:34:
         e0:02:dc:19:14:df:e4:6b:1a:c8:f7:64:ba:2f:df:62:04:29:
         33:a3:1d:f9:39:23:82:f1:21:92:e6:41:d2:f8:4a:d1:c1:86:
         1b:0a:91:fc:01:33:5e:7e:ef:10:f8:36:33:9b:2e:1d:63:4e:
         d9:05:7b:19:d7:0c:18:c2:cf:a6:dc:aa:c6:69:12:58:9a:58:
         2a:ea:90:9d:b3:ed:f4:21:b6:0c:e9:5b:99:2c:a1:39:ca:ce:
         f7:b0:75:ab:18:4c:12:57:d9:58:31:05:0c:ec:4c:74:bd:c3:
         79:fc:56:83:d1:03:d5:3d:94:73:82:fe:32:1f:b6:31:d4:ec:
         c4:35:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org