Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a24745b1-4851-3387-856a-6e62055806c6.roa
File:                     a24745b1-4851-3387-856a-6e62055806c6.roa (raw, json)
Hash identifier:          4RaIZLnqj4F6t+DCXjmRpvrxPyr6DGJw4Xo2c1eIHyM=
Subject key identifier:   57:AC:FF:3D:11:D7:54:93:C8:D2:8C:08:DF:56:FF:82:64:94:F4:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493161F5263C62D0BBF463700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a24745b1-4851-3387-856a-6e62055806c6.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.236.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:1f:52:63:c6:2d:0b:bf:46:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=84fd637f-04d0-4378-8970-d3f1971fc3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:69:5d:90:3d:4a:48:c4:45:00:78:29:06:
                    ac:38:a8:7f:65:ab:62:b0:66:42:6f:54:f0:67:28:
                    28:5d:37:e1:87:ac:0d:6e:f0:40:d4:79:e5:63:55:
                    04:90:cd:ab:30:4b:83:39:f2:ff:fa:02:0b:ef:a3:
                    ea:0d:90:3c:6a:65:7a:e9:67:62:c9:9e:73:16:6b:
                    9b:d0:86:8a:9a:00:a6:9b:3d:b8:59:b6:fa:6a:40:
                    a4:73:8a:db:fb:6c:0e:9d:a8:1d:e0:d4:6c:58:ba:
                    fb:ec:4a:e3:a0:87:66:e8:df:ed:8d:3b:79:ca:fd:
                    e8:d1:12:6b:90:da:9b:1b:30:9e:c6:1f:23:0c:b5:
                    0f:f0:d1:b7:dd:17:27:85:a2:00:a6:9b:64:9f:6c:
                    ae:03:7c:97:01:80:33:53:45:e0:6b:4b:b5:66:eb:
                    6c:fe:87:a0:39:37:7e:9b:e8:c3:8b:26:2e:93:0e:
                    3d:61:37:c3:60:96:c8:4d:12:70:3a:2e:fd:7e:e7:
                    80:8a:95:60:57:aa:2e:e1:22:51:db:00:c4:fa:c6:
                    91:85:e8:d7:5f:3e:02:23:e6:6d:6c:da:89:e4:58:
                    70:47:5f:7f:77:1d:0d:c0:c0:d6:89:e3:aa:6f:c5:
                    88:66:0b:a9:e0:2c:52:21:44:73:85:3f:9d:c2:29:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:FF:3D:11:D7:54:93:C8:D2:8C:08:DF:56:FF:82:64:94:F4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a24745b1-4851-3387-856a-6e62055806c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:f9:35:bc:db:84:06:5a:d9:82:d3:2d:60:22:d2:c4:43:
         85:b7:16:48:15:41:2f:c7:9f:f2:0c:f1:25:92:f9:ad:a6:95:
         93:1c:cb:47:e8:d4:7e:11:70:5b:ac:b6:e8:90:d3:32:90:28:
         a3:f0:67:cf:bf:32:e0:00:a1:8f:da:ae:ec:91:e4:19:52:98:
         46:41:89:51:4a:d0:6a:1e:3d:c1:a3:42:03:0f:5a:28:b7:f7:
         45:d4:43:ca:c4:ed:7e:60:c2:1b:70:f7:db:bb:5b:79:28:40:
         c9:6a:88:8b:a4:6f:21:4d:59:40:d2:dc:bc:31:39:0c:28:ae:
         13:67:54:b2:3c:87:ea:1e:be:29:93:9f:60:8b:ba:b5:56:54:
         c4:aa:9d:35:3b:e2:64:02:ee:98:f0:20:38:97:72:2a:6c:79:
         c1:c3:32:12:65:69:c2:3e:c6:f0:d8:b6:2b:ed:9f:a7:85:d1:
         3a:cd:68:0f:65:26:2a:67:25:e2:4e:dd:a6:fd:f8:3d:61:dd:
         3f:8b:75:16:10:b7:86:e4:5e:09:9b:d3:4e:91:88:44:fb:13:
         8e:8f:cc:9c:31:c7:2e:5b:03:da:1d:23:85:16:9d:ac:43:10:
         b1:29:84:8b:8d:68:ce:83:2b:d3:50:a5:40:ae:58:0a:49:99:
         58:24:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----