Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e1e5bdc-176c-311f-8c98-c64c93472c9e.roa
File:                     2e1e5bdc-176c-311f-8c98-c64c93472c9e.roa (raw, json)
Hash identifier:          CS6oJXXXzztsQvT4snomCar7jTEeBbrBMwWJJQyihxY=
Subject key identifier:   41:A3:A5:CD:48:92:0A:19:F2:41:82:61:B9:AD:6E:E1:DC:58:B5:9B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493167EDB466518E7A08E9DA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e1e5bdc-176c-311f-8c98-c64c93472c9e.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     30381
IP address blocks:        216.6.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:7e:db:46:65:18:e7:a0:8e:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=db6b0eb1-9c8c-4bd5-b5bf-cf3ea097f67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:5a:22:06:8b:88:43:2e:d9:bc:34:5a:eb:
                    39:3c:0c:83:61:19:38:08:81:0c:f1:cd:38:73:68:
                    13:3c:ee:4e:b5:f0:d6:27:cc:21:68:e4:92:70:7d:
                    18:fc:12:60:fa:27:86:0a:b7:97:b6:cf:6f:5e:c5:
                    3d:b1:44:c5:16:bc:ba:83:c1:3c:e1:72:7c:b5:47:
                    49:6b:c1:3c:53:fe:b5:bc:bf:29:83:ce:de:68:fe:
                    da:31:3d:68:05:f1:8a:c0:9f:1f:9e:57:e3:3d:e7:
                    4a:64:41:92:fc:d3:81:8b:ed:03:2b:26:e8:dd:0b:
                    ba:c8:90:e6:9e:d0:6e:cd:6d:ac:91:dd:d5:77:9f:
                    52:e2:f1:f9:f5:2c:77:c1:94:31:88:5a:55:44:64:
                    73:6f:d3:8c:f2:8e:6d:e2:2a:9f:36:96:34:ce:e6:
                    38:72:09:58:b6:92:e2:18:e7:20:17:d5:93:4e:c0:
                    11:5d:c7:df:5f:b3:c9:de:d7:ef:46:7f:7c:02:3b:
                    d4:a0:b3:3d:42:ec:bc:5d:ff:54:9a:24:0a:a1:38:
                    da:a9:77:46:b4:8f:92:45:b1:60:62:93:3e:85:8f:
                    30:b0:bd:07:c9:52:3d:51:80:09:b3:e6:a0:6d:ad:
                    ea:db:80:c4:fa:d5:f0:e7:71:5a:8a:83:7e:ac:7f:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:A5:CD:48:92:0A:19:F2:41:82:61:B9:AD:6E:E1:DC:58:B5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e1e5bdc-176c-311f-8c98-c64c93472c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:d9:f5:07:be:e4:82:c9:dd:e7:ec:d6:41:a2:58:34:f6:
         d3:1b:cf:ff:69:86:4f:bc:36:1c:94:cc:2c:45:9c:2b:ee:7f:
         9e:99:b5:e7:e7:95:cc:d3:bd:82:04:6b:94:85:5a:ab:3a:31:
         b7:36:bc:4b:bf:8c:54:55:b0:55:4b:ed:84:2e:e2:e3:23:96:
         de:62:94:fa:60:94:e1:f8:fe:ba:90:45:97:f6:2b:0e:d5:b2:
         fe:94:ad:25:04:b4:0b:39:5b:d7:b1:42:5a:e2:54:8c:e8:a6:
         84:87:5d:da:a3:66:ef:a8:3e:c3:47:65:d2:56:ee:f6:a1:dc:
         0d:72:9d:5d:9e:be:04:c8:1b:ec:75:48:8a:86:96:76:e6:aa:
         51:1e:f9:33:f7:cb:29:8f:ad:95:da:dc:05:a0:ca:dc:3b:7d:
         31:6c:ff:01:87:82:e1:4e:a6:8c:a3:e9:00:cc:66:ff:60:50:
         19:a6:c5:8f:66:4d:72:42:c7:0b:3d:01:9d:37:de:14:c7:df:
         c5:8e:e9:ad:22:e6:93:e5:21:82:6e:35:13:aa:cf:b6:e3:ea:
         bd:f8:d5:13:e3:f8:fd:ac:1d:85:10:40:10:04:39:b5:21:fb:
         bf:7c:a1:63:16:8c:b5:98:3a:e9:f1:5e:9c:89:d2:35:30:0a:
         56:d1:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org