Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8dbb4e2-31ef-3194-9389-3e54dde3e635.roa
File:                     e8dbb4e2-31ef-3194-9389-3e54dde3e635.roa (raw, json)
Hash identifier:          cVn9rimrpVOjHz+2l7i23N/Q8FyFjYJjyBMS1DJ5SvM=
Subject key identifier:   C3:48:B4:AD:B3:41:5D:37:A8:FC:D1:FB:C1:6F:A5:7C:66:17:C2:83
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF756874271A8EA35707C380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8dbb4e2-31ef-3194-9389-3e54dde3e635.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        174.90.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:68:74:27:1a:8e:a3:57:07:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=5eb8f236-e156-4294-bd0f-e678664a95f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:a0:f8:e0:c5:90:f2:81:3d:7e:6e:d1:f5:
                    d3:af:6d:1f:bd:d9:67:dd:a5:55:b5:fe:2e:31:a9:
                    25:8c:b7:f1:c6:50:32:aa:ac:5d:72:c0:6b:fb:3b:
                    a0:b0:83:99:ce:b6:ed:83:41:f1:5a:01:a8:62:8f:
                    be:34:de:23:58:2f:82:57:64:cb:84:1f:00:27:53:
                    69:4c:12:4a:67:90:f1:90:19:e1:d1:8b:77:86:00:
                    84:44:7d:0e:1c:91:39:24:3b:0f:6d:20:79:57:69:
                    70:c9:1f:61:e2:16:c4:c1:3d:a3:03:83:ef:9d:59:
                    2a:39:a1:38:e0:e1:4c:c1:17:6b:b3:89:2d:f4:ce:
                    15:eb:8d:b5:fb:b1:49:24:36:cf:01:15:f8:a3:af:
                    f4:29:67:f8:22:8b:32:9f:a5:1b:db:9e:06:1c:dc:
                    69:ec:ea:0f:c6:72:60:f5:15:ec:c6:e5:f2:c4:41:
                    7f:6c:50:2b:fe:58:2f:9e:5e:bb:6d:76:bc:1a:e9:
                    e4:5d:aa:b5:0f:86:fd:3a:bc:ba:d3:c1:28:6a:a6:
                    9c:88:a4:e5:f3:4d:33:0a:b1:51:05:cf:47:e0:83:
                    36:ef:d7:8a:c7:f4:00:67:61:07:cb:61:1f:46:ef:
                    57:b5:07:18:12:9a:d0:4a:bb:c0:ad:7a:c5:6b:70:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:B4:AD:B3:41:5D:37:A8:FC:D1:FB:C1:6F:A5:7C:66:17:C2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8dbb4e2-31ef-3194-9389-3e54dde3e635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:0c:1d:fa:29:c2:3c:9b:b9:2f:be:2a:7c:a0:76:20:79:
         1f:35:c7:fe:e1:ef:14:db:86:80:10:de:c8:a4:47:60:7b:c5:
         1c:42:37:81:82:e4:ba:fd:ea:23:4c:eb:1e:a5:4c:6c:55:b3:
         1f:89:5f:0f:7a:12:b3:00:94:a5:cf:9b:ef:20:af:a3:42:22:
         62:57:a4:1d:1b:f1:f1:02:81:6c:b8:2b:2b:cf:ef:66:b1:af:
         2b:cc:69:82:21:af:13:a1:16:ca:46:06:d1:91:af:80:e6:84:
         30:a3:16:02:dd:68:26:e5:7a:09:a6:f2:ef:60:40:32:f4:c4:
         1e:6f:ff:00:f9:e4:da:8d:3d:aa:72:d3:3c:43:da:48:20:9a:
         f3:02:6e:6d:d8:b7:49:63:9a:ab:64:8d:42:c3:85:ea:06:3f:
         55:8c:dc:a0:ef:8b:6b:bd:84:16:a0:4b:62:4d:ff:50:05:4f:
         46:59:b4:22:78:01:ef:57:3a:c2:f7:47:4e:4b:ff:9f:e5:96:
         77:49:41:23:74:f8:3d:57:f4:85:a2:aa:cd:fb:6d:05:10:c1:
         1d:9c:fe:f7:03:d3:ca:8b:98:a5:70:a7:17:b6:57:cd:a6:c8:
         bb:89:81:c9:14:7a:57:31:90:eb:b2:8d:b9:36:77:37:27:b4:
         20:48:f6:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdWh0JxqOo1cHw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NWViOGYyMzYtZTE1Ni00Mjk0LWJkMGYtZTY3ODY2NGE5NWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBag+ODFkPKBPX5u0fXTr20fvdln3aVVtf4u
MakljLfxxlAyqqxdcsBr+zugsIOZzrbtg0HxWgGoYo++NN4jWC+CV2TLhB8AJ1Np
TBJKZ5DxkBnh0Yt3hgCERH0OHJE5JDsPbSB5V2lwyR9h4hbEwT2jA4PvnVkqOaE4
4OFMwRdrs4kt9M4V6421+7FJJDbPARX4o6/0KWf4Iosyn6Ub254GHNxp7OoPxnJg
9RXsxuXyxEF/bFAr/lgvnl67bXa8GunkXaq1D4b9Ory608EoaqaciKTl800zCrFR
Bc9H4IM279eKx/QAZ2EHy2EfRu9XtQcYEprQSrvArXrFa3By4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNItK2zQV03qPzR+8FvpXxmF8KDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZThkYmI0ZTItMzFlZi0z
MTk0LTkzODktM2U1NGRkZTNlNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArlr8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0SDB36KcI8m7kvvip8oHYgeR81x/7h7xTbhoAQ3sikR2B7xRxCN4GC
5Lr96iNM6x6lTGxVsx+JXw96ErMAlKXPm+8gr6NCImJXpB0b8fECgWy4KyvP72ax
ryvMaYIhrxOhFspGBtGRr4DmhDCjFgLdaCblegmm8u9gQDL0xB5v/wD55NqNPapy
0zxD2kggmvMCbm3Yt0ljmqtkjULDheoGP1WM3KDvi2u9hBagS2JN/1AFT0ZZtCJ4
Ae9XOsL3R05L/5/llndJQSN0+D1X9IWiqs37bQUQwR2c/vcD08qLmKVwpxe2V82m
yLuJgckUelcxkOuyjbk2dzcntCBI9mo=
-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org