Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d244224e-79c1-342e-b30a-bbecfd6a4966.roa
File:                     d244224e-79c1-342e-b30a-bbecfd6a4966.roa (raw, json)
Hash identifier:          fKNMLY3nZ4maB0jxrNpNrvzIqBCrEuff6keQlg1BkR0=
Subject key identifier:   77:54:A1:88:3D:3F:43:89:8A:63:87:EF:78:25:A6:00:A2:DB:EB:78
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7581EE290CF7F04B889800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d244224e-79c1-342e-b30a-bbecfd6a4966.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.150.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:81:ee:29:0c:f7:f0:4b:88:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=e19bb042-f4af-4cab-9fdb-d39722a8bcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:07:bc:09:2f:3c:6f:55:55:1b:88:45:fc:
                    06:ac:41:2f:02:e6:43:9e:7a:ec:9d:8b:82:83:6d:
                    24:5a:1a:7f:39:d6:67:17:a5:2e:31:88:37:e4:5e:
                    a5:5c:06:cc:d1:09:c9:16:9b:43:33:1b:08:68:0a:
                    45:54:7d:50:cf:2b:ad:92:f5:45:0d:c1:2e:8c:dc:
                    fe:bf:ed:36:60:83:7b:c5:f5:de:49:82:6a:94:67:
                    08:78:59:c8:57:1f:8c:d4:14:87:ee:3a:34:6a:ab:
                    61:af:63:72:7c:84:ce:00:f4:2a:0b:b0:b6:24:4b:
                    21:3d:69:6c:74:b0:1e:12:a1:fb:f1:76:6b:50:00:
                    3d:7c:49:a1:7e:25:e9:de:f7:6f:92:e3:0d:e9:42:
                    d0:0d:00:e6:29:7c:17:e4:75:da:01:a6:9a:66:a2:
                    a6:d3:bb:13:86:22:7d:8b:40:81:e0:b4:49:6e:84:
                    94:0d:7f:db:60:38:39:f1:43:87:99:45:df:fb:1b:
                    63:5e:d2:13:36:f4:a8:cf:b6:92:ed:5a:9d:9b:d6:
                    2c:b6:c4:ec:04:11:48:68:f8:a4:31:de:ab:c9:2a:
                    a4:75:0f:9d:83:a0:93:3a:a4:c4:6c:50:bf:78:00:
                    c1:53:86:18:43:e9:bf:3c:bd:fb:29:ac:b4:68:15:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:54:A1:88:3D:3F:43:89:8A:63:87:EF:78:25:A6:00:A2:DB:EB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d244224e-79c1-342e-b30a-bbecfd6a4966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:ca:c5:90:74:68:db:1e:f6:11:17:b2:15:97:7a:45:42:
         1a:92:45:42:a0:04:4f:67:b9:e9:f1:d7:46:79:d7:08:cb:cf:
         80:d3:6a:4d:45:62:dc:ca:eb:62:22:8a:ba:a7:d6:bf:6c:ef:
         98:fd:e1:22:37:ad:c2:72:21:41:2e:57:eb:95:21:4e:2f:36:
         11:f3:2a:0e:34:47:c2:ad:71:ff:a4:5e:74:a1:4d:cf:2b:87:
         8e:02:98:77:76:68:16:b2:9e:21:10:91:c2:e5:49:b4:70:fb:
         b7:2f:0c:88:61:e0:d1:43:f8:7f:40:45:4d:8c:9b:e3:13:7f:
         9c:c2:0f:98:34:07:08:8a:ee:3d:53:fb:95:d3:57:24:cf:04:
         08:0e:77:ac:df:96:ab:3c:ab:4d:3b:cc:e5:f1:53:b2:85:69:
         a9:30:3b:22:b0:7a:62:10:f7:a2:d0:c3:2d:2d:4a:a7:c0:8b:
         28:b3:43:ee:0a:6d:68:c0:46:c0:54:5d:c6:2b:24:b3:3a:51:
         da:51:7f:8f:a6:cc:2c:98:33:73:98:d1:c2:bd:b2:4d:f2:ea:
         70:1a:9c:8a:f2:1f:de:2f:47:7e:2e:91:0c:83:31:11:8a:ba:
         95:41:73:1e:91:67:23:d3:ac:54:a3:4f:33:22:cf:ac:31:b7:
         0b:bb:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org