Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/abe1f16b-f397-35c8-8f18-38838495767f.roa
File:                     abe1f16b-f397-35c8-8f18-38838495767f.roa (raw, json)
Hash identifier:          eMGyIA1MZzDDmXKUltN6nBbiMOVPLd5ZTjcro46SBdE=
Subject key identifier:   1D:D8:D7:1A:63:17:C8:37:D7:B0:5E:F1:0D:B2:22:A9:3C:BF:15:C1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314AA59950E000AD2AE8880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/abe1f16b-f397-35c8-8f18-38838495767f.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.204.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:aa:59:95:0e:00:0a:d2:ae:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=e036a463-074d-48d8-b27d-e848b638bc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:31:9d:6c:39:25:cf:ab:00:56:63:76:df:
                    98:b3:93:85:44:ff:49:db:72:22:85:5d:77:18:06:
                    c4:6f:7a:93:29:a3:95:0f:1e:80:82:40:a4:bd:d3:
                    ca:fd:55:9c:59:3d:5e:22:6e:d4:67:17:db:bd:44:
                    a3:9a:4f:ce:ee:af:cd:d3:60:ab:b1:e2:ab:eb:c7:
                    c4:4c:f8:56:67:7c:06:23:10:1d:f0:ac:92:e2:ee:
                    a0:a2:ab:8f:d3:8e:13:b4:99:3c:d4:0e:86:44:7a:
                    5a:de:c5:08:19:a1:48:5d:9d:31:1e:e1:f1:6e:59:
                    1b:33:c6:08:46:f0:f3:d7:a9:30:f7:38:bf:5d:34:
                    62:78:02:0c:98:5b:bc:b1:8e:0d:9a:cb:43:a5:b8:
                    77:f9:cf:b6:c4:23:53:b6:3f:7c:d9:00:89:90:c1:
                    3e:07:8b:09:67:87:3e:12:64:75:f8:81:96:b2:da:
                    c4:77:67:be:bd:01:28:f4:99:8e:11:9c:95:b6:73:
                    6a:58:62:b8:53:50:46:98:ab:d8:85:84:ca:9d:eb:
                    e0:89:b5:8d:ee:65:62:7c:45:75:33:63:0b:9d:35:
                    ed:d6:68:f1:33:59:0d:79:57:4c:57:94:5c:e1:ab:
                    63:21:45:8e:5a:af:2f:09:37:9b:f6:b7:34:96:8c:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D8:D7:1A:63:17:C8:37:D7:B0:5E:F1:0D:B2:22:A9:3C:BF:15:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/abe1f16b-f397-35c8-8f18-38838495767f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:79:58:21:1e:d2:e0:26:44:eb:21:e7:7c:36:85:4c:9f:
         34:39:4e:93:c0:76:7b:00:b0:d6:45:64:00:b7:9b:e7:95:6f:
         21:87:c5:37:4f:0f:44:b9:a9:5b:dd:06:e3:d9:d8:07:89:40:
         4a:24:42:31:f7:5b:66:ab:8b:d2:bf:93:5c:d1:d7:05:40:f1:
         32:b8:e2:e9:f6:a8:c9:24:fd:88:d4:37:78:3e:e3:c1:ff:2a:
         54:1c:60:dc:86:68:d5:f6:d3:9f:0f:bc:64:00:de:e6:3c:1f:
         6b:35:f7:ca:ac:bb:85:27:89:95:f6:df:b8:02:c7:98:83:c5:
         4d:fd:04:6c:cc:e1:e1:86:41:76:d7:74:f2:9f:a1:4f:4d:eb:
         c9:31:01:c0:3f:03:9b:e2:8e:70:f0:8f:f0:83:4d:64:08:6e:
         43:b7:9b:fd:52:55:8b:d6:0d:d9:8b:06:6a:46:cf:55:b5:ca:
         ff:de:dd:41:85:32:ff:6c:c1:22:ab:ea:db:ee:ad:a9:57:36:
         2d:b6:76:03:2c:df:32:6d:50:2d:9a:27:80:9f:ba:a3:05:9f:
         5f:65:e5:2f:09:05:15:b9:02:4e:b4:e6:6a:40:a6:48:ea:f5:
         1b:eb:9d:3e:61:c7:bd:0d:fe:48:c3:0e:25:c0:4f:fd:05:f1:
         cb:98:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org