Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82500e37-ea9d-3a6a-a7cd-caaf5bb04812.roa
File:                     82500e37-ea9d-3a6a-a7cd-caaf5bb04812.roa (raw, json)
Hash identifier:          zTjmmHAESAejhtcyPVO0EArZREetkviDXe7pjDk/54I=
Subject key identifier:   C7:10:DA:CA:57:DB:23:7C:BE:94:A4:66:FE:48:64:9C:0B:A9:83:9E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931474E07A8F5D4DE9CFC880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82500e37-ea9d-3a6a-a7cd-caaf5bb04812.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        184.150.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:74:e0:7a:8f:5d:4d:e9:cf:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=8a9bb9d3-8ef3-4aa0-bbe9-bbdd62a29480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:7e:bc:dc:96:97:4e:13:d9:0d:b2:a2:56:
                    97:aa:8e:98:80:10:fa:f9:62:28:88:ee:38:c6:ec:
                    77:18:b5:85:0c:71:e5:7e:f1:60:f7:91:68:3e:ed:
                    ef:f3:c4:e5:66:19:8f:18:94:63:fd:23:cc:80:9f:
                    cc:bd:dc:37:f5:21:14:f2:71:db:e8:9e:1a:08:30:
                    81:e4:33:89:68:7d:5a:40:87:c3:e8:05:1c:e9:00:
                    b5:4c:aa:9e:d1:15:48:84:47:d8:31:e3:84:c0:0c:
                    9f:14:25:f6:bd:46:69:79:59:db:0f:7e:64:53:72:
                    bf:9f:99:3f:4c:2b:40:40:c3:2b:2b:4c:d7:05:07:
                    1a:b9:6c:6a:4a:d8:b7:79:56:4b:42:0b:d0:d4:f0:
                    c7:75:ca:c5:28:48:e0:55:56:79:75:f5:3b:b2:21:
                    2a:b3:82:53:dc:f3:56:11:01:81:7a:b5:6a:b4:8c:
                    73:a8:2b:1c:10:87:ff:e8:88:cf:a3:38:f0:2f:41:
                    9f:18:6b:76:81:93:4e:3d:0d:06:a6:76:2d:e3:c7:
                    2b:96:89:46:5b:81:1e:b2:a5:6e:5e:3a:85:39:59:
                    3a:61:1b:ec:01:0c:c4:e3:57:fc:a3:f6:26:73:5b:
                    9a:b6:0e:36:47:5c:72:82:09:d2:0b:9e:15:ee:c2:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:10:DA:CA:57:DB:23:7C:BE:94:A4:66:FE:48:64:9C:0B:A9:83:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82500e37-ea9d-3a6a-a7cd-caaf5bb04812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:9c:6c:31:dc:f3:ad:fe:4b:99:0e:e9:98:0d:2f:52:9a:
         e3:1e:8f:c8:8f:85:9a:6f:cd:f9:89:23:37:d2:57:bd:72:0e:
         c6:5d:20:37:3a:63:14:9f:17:b2:43:24:d6:42:af:96:8c:b6:
         2f:28:17:ae:fb:e0:7d:7e:68:66:89:7a:20:dc:62:d3:f6:87:
         1e:c5:41:70:2a:34:df:e9:65:32:61:89:c1:33:0a:0e:3b:8e:
         5d:c2:38:cd:0b:0c:7f:a2:a7:73:61:5d:b6:c6:1e:cc:af:b2:
         79:26:a6:17:ff:fa:80:95:ec:8a:0e:3e:c9:a6:86:cc:58:35:
         ad:13:17:d2:5e:98:46:ab:8a:70:c6:c6:2d:81:49:51:b3:5b:
         97:65:85:f2:0c:dd:66:be:90:b6:b3:5a:26:7b:0c:e8:97:3b:
         06:4c:43:57:90:7d:d9:f8:1c:a5:94:a2:c2:5e:01:14:e1:cc:
         f7:c2:7f:4c:3b:40:25:1e:16:58:59:03:42:71:a5:45:0f:55:
         59:0b:c3:46:37:bc:52:b4:e9:53:1e:77:6f:3a:1a:da:64:bc:
         ad:ca:da:68:99:4f:35:2a:8a:ae:12:fa:84:97:c4:c3:2d:16:
         7d:99:cd:f2:3a:47:6d:24:22:f4:5c:73:ed:d3:c5:c9:da:a5:
         60:a6:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org