Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/507cb057-6cd5-37d3-9c85-e8b379c704e7.roa
File:                     507cb057-6cd5-37d3-9c85-e8b379c704e7.roa (raw, json)
Hash identifier:          NrVx28GTymyQ/CFUSf+gCsiGAUYGEsDtOuHvW8u2zX8=
Subject key identifier:   93:94:F1:76:C9:39:CB:4C:57:78:58:A7:43:D3:6E:BC:68:5C:94:80
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB08B627FEF44AFD7D21C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/507cb057-6cd5-37d3-9c85-e8b379c704e7.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     33017
IP address blocks:        207.61.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:8b:62:7f:ef:44:af:d7:d2:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=bcea5f36-66d9-43dd-9752-8be9a801c304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:fd:76:57:69:5d:06:ea:8a:33:84:fe:39:
                    b9:20:ed:89:3a:4e:07:c4:1a:d6:1c:70:4d:3f:8b:
                    2b:3c:50:36:e0:3c:82:a8:6a:a7:87:0e:55:ca:2a:
                    09:11:8a:b0:19:f2:a4:57:a0:e4:77:20:14:82:3a:
                    a5:7c:44:3a:8f:1c:8d:03:0e:5e:de:36:0e:18:4a:
                    58:cc:09:64:b3:ce:a3:f5:00:bd:62:ca:13:ab:b0:
                    b2:02:e6:f1:c2:aa:2a:35:b6:c7:df:79:1b:40:c4:
                    ba:e4:1e:1c:13:83:4d:e7:73:57:4f:94:95:c6:30:
                    e2:80:c0:67:ba:3f:09:c3:d2:ae:79:41:c2:01:e5:
                    7a:1b:54:7b:7f:34:0c:96:a1:23:7a:1d:c6:4f:7e:
                    2e:4a:b9:92:34:18:9a:1b:cb:ab:ef:c2:13:12:19:
                    71:f0:4d:a3:7f:73:4a:ea:6a:10:57:cb:fc:c0:a3:
                    c0:51:9b:2a:b3:89:e2:0d:a1:76:63:f2:f5:86:90:
                    3d:1c:cd:ad:c6:f0:05:37:fa:a4:0c:18:59:94:25:
                    d9:55:93:62:21:cc:b4:58:72:ac:ad:99:06:3f:d3:
                    ea:bd:43:f2:09:57:9f:25:1b:c5:ea:a4:ca:dd:ed:
                    90:44:0b:e3:2b:2f:4e:10:38:1e:cc:13:96:69:85:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:94:F1:76:C9:39:CB:4C:57:78:58:A7:43:D3:6E:BC:68:5C:94:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/507cb057-6cd5-37d3-9c85-e8b379c704e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:53:0a:7b:b7:c8:7a:f5:24:d3:5e:d3:b1:05:63:2e:c8:a9:
         bb:ff:40:b9:76:44:26:99:79:31:54:20:5a:6b:9f:91:ec:f6:
         0c:85:cd:8f:a9:8c:cd:d1:8a:b7:a2:7e:3e:2a:b0:5a:c9:ab:
         30:c6:d4:c3:99:56:15:6c:2e:aa:17:96:6d:22:84:49:87:49:
         6a:ff:1f:36:32:ec:f1:d2:4f:a2:f0:70:58:fb:76:a9:1a:51:
         85:e2:16:f9:5c:80:fa:7a:68:fd:ac:06:87:73:05:d5:14:c7:
         6d:fb:43:cd:be:36:82:fb:87:b1:02:97:e6:09:df:3d:4c:2f:
         2a:db:69:ec:7a:0d:9c:b9:c2:46:93:a8:96:6a:12:5f:01:7a:
         08:f1:c0:ee:0d:05:66:e7:42:5f:98:d8:9a:c0:d3:ea:4f:16:
         14:14:0b:03:52:65:54:51:06:d7:5d:b8:4b:20:7b:5a:03:56:
         25:a9:bd:3b:af:ed:23:50:5d:e5:b4:71:b1:e2:28:7e:e8:37:
         a9:92:fb:a4:48:2c:6e:54:f0:fe:23:20:1d:a5:5a:0c:49:d0:
         ad:bb:13:15:2f:b2:1e:4d:e9:6f:23:66:93:9f:a0:88:ce:1e:
         24:27:81:de:ff:63:20:44:b7:7b:f1:29:b4:43:64:5c:ce:fc:
         fd:b4:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org