Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/345cb49f-c844-347a-85be-efda938af763.roa
File:                     345cb49f-c844-347a-85be-efda938af763.roa (raw, json)
Hash identifier:          RvNY74H4xZEvHKTdAPLy0dHhhWqWCReGmJ1a8g7jrhM=
Subject key identifier:   17:CC:CA:DB:21:59:1B:AA:AD:55:C9:BE:C5:28:AE:D0:C6:70:D1:4E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE52428A10427D54050A580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/345cb49f-c844-347a-85be-efda938af763.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        184.151.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:24:28:a1:04:27:d5:40:50:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=39fdff86-0812-4b80-973f-8fac42063e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:cc:11:e9:90:d4:84:0d:83:aa:41:d2:0f:
                    3d:64:32:9c:fa:f7:61:70:cd:61:15:b0:f8:59:b5:
                    50:e1:10:ae:1d:50:34:06:a8:51:68:0b:4e:ba:36:
                    64:78:1c:bd:97:a4:c8:27:1d:05:ff:3c:c3:57:d3:
                    32:7a:a2:a1:bc:38:f2:30:c6:2b:ea:15:8b:ef:d0:
                    b8:37:e1:61:00:88:73:23:81:21:24:e3:9a:26:66:
                    d6:90:51:01:0c:f5:63:32:61:5c:db:12:0f:f4:f6:
                    37:37:30:0a:22:f4:21:99:4a:d5:e4:63:29:30:89:
                    9d:ac:50:6c:5a:46:21:00:4f:af:0d:c2:1b:6b:f9:
                    1d:22:06:45:3d:bf:44:07:93:18:b7:b6:ad:08:48:
                    8f:14:fa:c9:1f:c9:a2:90:22:26:7f:86:27:8e:3b:
                    c6:42:59:42:8b:2f:76:09:b7:8e:a7:3a:de:ab:a0:
                    6f:cd:99:64:90:a1:6d:ad:3e:52:3b:e8:7e:09:4b:
                    83:86:f9:1a:cc:cb:37:b7:ab:71:c5:a7:ac:e5:09:
                    da:24:e1:83:fb:4e:61:ef:44:fe:67:25:a5:72:52:
                    97:48:87:20:36:45:5b:48:18:db:12:50:db:df:8a:
                    40:ea:ca:91:86:85:f2:dc:a6:fe:ce:32:cd:aa:1c:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CC:CA:DB:21:59:1B:AA:AD:55:C9:BE:C5:28:AE:D0:C6:70:D1:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/345cb49f-c844-347a-85be-efda938af763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:16:32:ef:ff:6e:2e:12:dd:95:e9:9b:d0:8f:2f:07:4b:
         a4:c9:4c:48:6c:35:5f:1a:71:c0:a6:12:5f:4f:ab:b7:33:2a:
         af:6c:ea:35:73:d2:21:43:aa:1f:6a:20:5c:b3:c8:15:16:3e:
         bf:95:d1:51:1e:42:f0:18:d9:e6:b6:18:5b:6c:a1:9b:85:79:
         09:54:bf:5b:2e:f5:84:90:8d:f1:84:dd:b4:50:04:1d:5f:b3:
         f4:ee:a6:74:ed:2f:49:63:60:51:1b:44:f4:97:a5:12:7f:a7:
         ad:d4:bb:37:7e:22:00:29:83:26:27:1c:80:ca:89:6d:55:13:
         7b:29:7d:68:17:1f:e6:e0:b2:fd:85:00:4e:b1:ef:b4:a9:b2:
         7f:62:72:2a:b7:14:01:15:e8:c1:3f:75:73:9f:c4:57:1f:3f:
         4e:7a:3a:18:81:63:ac:e0:a1:0b:fd:de:d3:49:9c:90:d3:d9:
         04:02:07:6b:48:41:16:c0:8d:7e:bb:db:87:5f:5e:4e:2f:6b:
         75:32:65:fe:a4:00:be:7b:5d:1b:21:2e:36:da:61:0b:2c:11:
         84:ef:bb:62:e2:db:bc:be:55:49:d6:b2:e3:af:2b:08:08:4b:
         aa:00:8c:54:2b:81:71:7b:b7:f9:5a:0c:1c:4a:99:eb:c4:71:
         31:d3:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org