Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dd77512-f34b-3b36-b62a-265ba920ce10.roa
File:                     9dd77512-f34b-3b36-b62a-265ba920ce10.roa (raw, json)
Hash identifier:          izlxxrBib3IkzhbS2ZXqPgtIWdT97e/HUYlJ4yK0ArA=
Subject key identifier:   4F:F8:83:77:C1:33:FE:66:9F:4A:7E:6E:12:62:47:EF:6A:EC:C3:3F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DAFBE1F8C4DE40031A76160
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dd77512-f34b-3b36-b62a-265ba920ce10.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        198.235.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:af:be:1f:8c:4d:e4:00:31:a7:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=0c73638f-6a7a-402b-a3a8-c2525f9475a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:3c:70:17:f1:3a:3c:f9:a8:e8:75:81:56:
                    b8:c9:d9:d2:77:eb:25:9f:cb:83:cb:e2:77:91:da:
                    06:32:44:db:09:f9:c6:68:0e:a0:6e:59:5d:e1:8a:
                    df:03:e0:d0:dd:35:9a:90:69:07:ba:a9:27:ef:c3:
                    1e:eb:50:14:51:de:61:0f:6f:39:03:64:e6:7a:0a:
                    78:2f:95:2f:57:34:4c:56:fe:2f:45:1d:13:83:b5:
                    b2:55:a8:3f:a5:cf:7b:1d:d5:3b:5e:0d:bd:c6:74:
                    61:2c:75:75:dc:a4:48:72:bb:a2:55:20:cf:dc:fd:
                    66:0a:e1:30:4a:96:2a:19:ec:b0:09:e6:b6:e8:3e:
                    bf:d0:ff:46:89:7e:d1:9a:1a:2d:ee:6e:64:3a:f0:
                    78:00:a1:8a:df:bc:d8:2e:0f:6c:65:75:63:a7:97:
                    f8:87:3d:36:0f:a0:ba:f8:e9:91:18:50:07:8e:cc:
                    24:ad:f3:73:8a:39:99:6c:fb:18:6a:01:75:0b:bb:
                    b9:08:57:b5:83:79:24:a5:88:f3:24:6d:31:de:c7:
                    67:b2:2f:3e:68:4d:b8:b5:45:9b:fe:32:9a:01:02:
                    ca:7b:24:be:0e:7f:82:0a:61:36:c7:49:ba:b5:a3:
                    7a:04:96:65:cb:35:b6:bb:3e:03:90:74:84:f9:43:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F8:83:77:C1:33:FE:66:9F:4A:7E:6E:12:62:47:EF:6A:EC:C3:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dd77512-f34b-3b36-b62a-265ba920ce10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:41:7a:d5:6b:83:72:72:bf:33:fd:2d:98:35:3d:29:1e:b6:
         9d:00:a8:8a:a5:3e:df:4a:07:4c:b3:59:cc:3e:c5:0d:ad:27:
         ee:f8:b9:59:f2:05:91:0b:cd:23:4a:3a:63:2e:8a:73:cd:f1:
         b9:81:83:e0:f8:e4:e0:5f:76:6e:6f:19:5d:3b:3c:98:f6:f1:
         9e:39:f1:90:20:37:5b:00:d3:2b:ab:9f:55:2a:f0:e4:5f:ff:
         0a:64:7f:b7:e9:86:25:3d:b9:65:3f:e8:55:86:cc:23:5b:2b:
         47:a4:3b:c8:2c:41:7b:33:ba:7d:74:6b:a8:c3:70:f4:2d:16:
         52:31:90:3a:aa:1b:95:55:ca:5c:45:49:96:4d:b5:46:2e:5f:
         24:32:ee:eb:a0:5d:fd:95:b9:22:c8:07:97:b2:15:ab:97:57:
         f2:c8:a0:18:8b:2f:2b:fb:19:9c:d0:e3:98:b6:9a:61:b8:d8:
         81:41:a4:87:43:04:5e:9c:65:62:28:af:78:7a:eb:38:a8:2a:
         a3:e5:6d:ab:11:a3:54:46:f2:85:62:72:3b:c0:62:ef:44:49:
         c4:96:65:a4:8c:ad:8f:89:9c:78:67:95:b4:43:c1:45:85:d4:
         c5:bc:1d:2b:fd:ca:dc:3a:77:e1:d3:15:07:18:fc:67:50:18:
         f0:e9:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org