Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32ce106d-158a-3386-9ab1-a5c11fc418ac.roa
File:                     32ce106d-158a-3386-9ab1-a5c11fc418ac.roa (raw, json)
Hash identifier:          /emq+ecPuzZnJe4etwyULVihzWRn9WF7Q4wHwG/2Nz4=
Subject key identifier:   42:E9:10:15:52:59:61:8F:89:6E:CD:96:90:A6:17:CB:2E:7E:06:94
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75CAB375EBB73D0A52E380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32ce106d-158a-3386-9ab1-a5c11fc418ac.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        207.231.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:ca:b3:75:eb:b7:3d:0a:52:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=785cfe32-653b-4ef6-b974-3cf9e4f6970d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:5b:8b:94:85:84:95:5b:01:0e:a1:00:9a:
                    34:ce:a6:e1:b9:33:78:fc:ea:62:03:a0:05:0a:ec:
                    5d:70:67:10:4f:b2:d3:ac:84:a5:1f:e0:b7:c8:fb:
                    58:10:88:ba:65:e1:72:f7:32:b7:ac:c9:3d:03:1b:
                    91:00:1e:01:66:e4:3e:d7:82:12:88:77:ef:97:b2:
                    fd:5c:bb:76:23:c6:ea:ca:fc:00:ef:52:d3:93:ba:
                    9d:97:a8:9b:17:db:33:f2:a8:61:38:3b:7c:f4:2e:
                    61:37:6a:ae:13:9a:8a:a7:bd:56:c4:48:fa:00:ae:
                    2f:43:d0:3f:84:3d:5d:ae:0a:93:62:99:b3:59:eb:
                    d9:96:3b:bd:1b:97:13:1d:e0:f0:c2:e5:5a:c0:4c:
                    46:91:d5:0a:43:cc:16:61:ef:7d:e8:2e:bf:ab:ff:
                    4f:f8:80:a6:10:ea:4f:20:e4:f4:91:50:39:6a:25:
                    62:bd:b0:7e:e3:11:04:4f:1f:a4:f8:65:ff:b5:e3:
                    79:ed:d7:dd:09:c6:26:6c:63:5f:8d:21:c2:c7:9c:
                    b4:14:e1:e3:f2:0c:52:e1:1d:d0:6a:7d:24:d1:6f:
                    7a:91:16:55:73:6c:8a:4f:52:4e:c5:d6:59:4d:3a:
                    bd:04:8b:89:bd:22:0a:da:6c:08:97:ee:ee:54:75:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E9:10:15:52:59:61:8F:89:6E:CD:96:90:A6:17:CB:2E:7E:06:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32ce106d-158a-3386-9ab1-a5c11fc418ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:9c:0a:75:3e:d5:50:f2:0b:9e:66:f6:1c:5f:cf:6b:a7:
         8c:f6:42:6c:00:03:4e:c8:9b:19:60:5c:72:3e:64:77:06:e7:
         49:b9:ce:6f:82:2c:69:1d:59:cc:9f:dd:a5:d0:29:f5:5a:41:
         45:61:55:c1:21:0f:a8:94:90:f6:a4:92:f8:b7:92:ef:67:b2:
         72:2e:98:7a:77:1c:1e:a5:be:32:93:b1:3b:bf:d3:39:35:bd:
         6a:13:30:1c:07:33:b3:f7:46:a0:31:63:72:fa:5b:d5:22:03:
         e9:85:12:72:eb:9c:ab:8c:9f:67:5e:4a:62:e1:19:4d:e5:ed:
         ce:32:33:98:28:a2:d0:53:a4:89:e6:0a:8b:a1:84:89:bf:42:
         26:a9:f5:52:7e:15:d9:89:11:a4:49:3c:3a:8e:d6:cd:6d:b6:
         dd:e2:e1:19:0f:2f:57:d6:90:99:e9:12:50:d2:e7:03:ae:68:
         26:2e:29:7f:2e:5c:3e:19:f8:23:cd:ad:eb:ba:a7:0b:ec:03:
         ea:79:a9:97:68:83:03:9f:76:06:74:aa:f8:1b:3f:bf:4d:e3:
         76:e2:ef:93:4e:ab:24:e1:94:9a:36:dc:30:48:44:90:63:29:
         f1:75:17:19:84:1d:e7:e9:95:d6:25:08:31:b4:78:4a:8e:87:
         4e:b2:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org