Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab5a34b7-c76b-3ba2-a1a9-9efca95d4f46.roa
File:                     ab5a34b7-c76b-3ba2-a1a9-9efca95d4f46.roa (raw, json)
Hash identifier:          rxmxvOaNNkrqHjVsG1Vb8AWYoZPFsQnAhsdcFvBaym0=
Subject key identifier:   BF:3B:E9:54:93:8C:F3:59:A5:12:65:EC:BD:B0:40:A4:56:0C:E1:F9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE58F29891BA88CC605B700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab5a34b7-c76b-3ba2-a1a9-9efca95d4f46.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     29907
IP address blocks:        207.179.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:8f:29:89:1b:a8:8c:c6:05:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=b557ba29-1fbe-4c6f-83a2-ad5e29bb370e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:4a:c0:29:ac:86:4e:b0:64:e8:59:3d:af:
                    6e:93:56:d6:90:5f:ad:e7:67:c9:bc:11:78:f7:d1:
                    e8:a4:be:01:cc:71:a4:7a:45:f4:d7:dd:d5:8b:06:
                    24:88:10:28:a1:81:fb:96:d0:d0:1e:0a:96:6b:80:
                    54:d3:71:c2:bc:2d:9d:dc:fc:12:9f:6f:fe:3e:93:
                    8d:14:83:df:1e:62:f5:19:2a:ae:af:a4:ee:61:e4:
                    47:09:fe:a7:1c:70:c9:56:84:8b:d0:71:26:5d:ff:
                    68:87:8e:a5:b7:e8:a7:0f:95:22:b1:2b:c7:d0:29:
                    a2:86:fb:c3:c9:cf:6c:6a:b2:45:c9:f9:97:39:56:
                    6c:55:24:22:86:44:70:b3:c1:69:01:90:fa:40:9a:
                    08:40:0b:26:16:7e:2b:35:f6:84:2e:9d:16:41:14:
                    b9:3a:f4:be:74:96:cd:6e:68:c6:b4:87:5f:e0:b6:
                    bc:25:6f:ff:bc:7b:b0:b8:51:3d:1e:8c:54:eb:85:
                    83:32:bf:6a:49:a5:69:ce:f3:9f:d8:f4:12:f6:50:
                    d1:eb:0f:5d:54:5c:8f:71:e4:90:e3:6f:dc:0d:2c:
                    e4:0a:e0:4c:a6:2c:d5:5d:44:67:6e:93:aa:16:26:
                    e9:30:46:17:9f:00:e3:6f:9c:8c:89:7d:ef:e1:f8:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3B:E9:54:93:8C:F3:59:A5:12:65:EC:BD:B0:40:A4:56:0C:E1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab5a34b7-c76b-3ba2-a1a9-9efca95d4f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:63:ab:39:47:be:e3:52:fc:ae:f9:ff:eb:06:02:73:25:
         c9:b7:7a:61:70:b3:88:5c:6d:be:dc:a2:13:e0:67:9b:91:a9:
         7a:38:47:b2:1d:79:00:0e:31:fe:57:ec:dd:98:17:a8:4c:b2:
         9f:cf:e1:fe:fe:aa:14:05:88:43:99:97:53:6c:95:09:44:8a:
         99:62:05:e4:50:03:df:a4:41:01:d3:99:57:9e:44:0a:02:57:
         29:96:45:13:87:f6:ba:7b:5f:f1:9c:db:bf:55:ae:7b:a8:a9:
         0b:fd:34:5b:4c:15:58:b7:b8:77:de:c7:29:c9:e8:79:9a:1c:
         39:c3:11:38:a3:c9:5a:9b:05:6c:f2:53:57:4b:69:81:4b:3e:
         76:a9:21:cf:cf:fd:36:25:44:67:3e:14:2a:d7:03:c0:43:8c:
         d2:2d:94:87:18:00:be:4e:bc:0d:fb:0f:9a:cb:ef:6e:db:9b:
         a6:0e:9c:e3:a2:46:28:f1:e8:89:fe:c2:56:c0:73:8f:fb:95:
         88:70:16:35:9a:bc:f0:6b:2e:c3:cd:50:fc:0c:ac:5a:2b:8e:
         77:2f:83:f5:40:c5:51:1c:9a:18:59:37:fc:6f:dd:9f:89:d7:
         ce:60:ec:74:0d:19:97:b7:0d:d0:67:bb:9e:38:c8:40:85:36:
         b5:3a:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org