Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/039d0501-d5d8-35bc-8128-71de61b32e7b.roa
File:                     039d0501-d5d8-35bc-8128-71de61b32e7b.roa (raw, json)
Hash identifier:          eX5T/QQagh74H8nOUfwQBDaQyeIngu01ycBZThH9VOU=
Subject key identifier:   47:B8:24:DA:16:4A:90:09:96:0C:E5:BB:B1:0D:79:D9:9B:A7:AE:25
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493138310D712A3372D235740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/039d0501-d5d8-35bc-8128-71de61b32e7b.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36493
IP address blocks:        66.38.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:83:10:d7:12:a3:37:2d:23:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=6b1d36d9-4584-435c-b045-2c6c893947fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:2a:16:10:7a:2e:3d:27:6b:6d:33:c9:ed:
                    e5:ba:10:60:e4:33:1d:02:f2:af:51:e8:e7:d3:7c:
                    31:39:6e:f0:f3:f5:1f:1e:23:24:d2:7c:0f:88:84:
                    57:23:b4:1f:6d:f2:68:8f:56:4b:c2:fe:0f:91:54:
                    a0:fb:05:94:3e:e2:b2:a7:d0:a6:a1:e3:77:b8:36:
                    db:fb:b8:bf:e4:ed:f5:f6:b7:0c:a7:ee:b4:7d:f5:
                    db:e2:a4:03:27:19:02:a3:4a:d1:11:27:67:7f:94:
                    cc:fd:67:46:dc:c8:78:bd:4b:d2:95:64:88:94:19:
                    bc:d4:7e:8c:b7:80:c0:5b:38:64:dc:80:59:aa:40:
                    09:52:bc:93:4c:d1:4c:8d:62:f6:36:14:45:ff:fb:
                    ef:36:5e:91:ec:6d:65:2d:7e:90:2b:75:df:7a:1d:
                    64:30:ad:b6:ba:0b:4b:20:67:dc:54:da:9d:3c:86:
                    24:89:19:47:73:fc:57:b6:0b:ea:75:3e:c2:69:ee:
                    30:82:8f:ff:89:ba:52:7b:be:8e:d4:98:fc:66:68:
                    7a:5b:24:c4:9d:cb:af:fc:a5:2b:0c:04:98:a8:12:
                    1b:d7:68:66:ba:67:47:9a:eb:f0:e1:21:e3:b9:8d:
                    05:2c:45:de:92:71:51:12:4f:51:e0:b7:ed:78:be:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:24:DA:16:4A:90:09:96:0C:E5:BB:B1:0D:79:D9:9B:A7:AE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/039d0501-d5d8-35bc-8128-71de61b32e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.38.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:23:10:3f:09:9f:60:09:2c:b3:64:ad:d3:55:e2:1b:85:
         ac:c4:90:01:d5:35:58:6a:ae:08:31:3f:53:61:e3:b9:f9:12:
         88:41:8c:57:e8:4a:28:b3:ba:85:b4:20:de:64:1f:17:b0:e9:
         e7:9b:ec:84:cc:ef:00:0e:c6:ff:38:ce:f3:a0:ad:94:bd:49:
         3d:1e:78:a1:59:6c:c6:e7:1c:d3:48:78:84:72:75:5a:a0:9f:
         7d:50:74:f0:54:13:b4:43:b4:bc:68:4b:a8:6b:54:b2:d0:39:
         a7:a4:b3:09:8c:b3:ff:64:b8:c8:ed:1c:2c:88:ac:0c:5f:06:
         d5:3e:5a:19:2f:ac:4c:84:32:57:01:bd:d4:38:d1:5a:f8:0d:
         f5:e9:8b:36:f0:07:07:f3:30:fa:a5:43:50:ee:73:65:71:67:
         0a:9a:f8:c5:25:b9:5f:9e:22:52:6e:b4:b1:cd:0b:59:e8:a2:
         30:04:aa:22:f5:28:5b:1e:fc:06:41:2d:19:62:1d:dc:cd:10:
         9f:7b:bc:0d:84:9f:42:7f:5f:11:85:08:5b:5d:c9:33:b4:6e:
         bd:78:98:4b:0c:91:b0:5e:e4:a7:42:d8:8a:14:e6:1f:94:6c:
         e0:d0:9f:e9:ab:dd:29:22:88:c5:2a:c1:9d:6c:30:96:6c:14:
         ae:1a:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org