Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38e1daa2-af92-300b-a3b3-eacf12ed8a54.roa
File:                     38e1daa2-af92-300b-a3b3-eacf12ed8a54.roa (raw, json)
Hash identifier:          iGygvGP01kbCyaEbiBKN9NXv91BFvN0mN4esvZAy1vY=
Subject key identifier:   A8:2D:FC:F4:96:77:AF:4B:58:A2:CE:28:A8:D1:FA:55:1A:C4:C6:29
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493141DECACBE398FACCCB64A
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38e1daa2-af92-300b-a3b3-eacf12ed8a54.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.134.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:1d:ec:ac:be:39:8f:ac:cc:b6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=9600388a-f1f6-4471-aa80-e5d9435e1bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:b0:f4:e5:2a:ec:ed:c5:7a:52:e4:80:ca:
                    d4:18:2c:89:90:e7:7d:d5:9d:3b:46:96:1c:8e:22:
                    0a:37:5c:38:d4:59:32:ac:10:20:1b:64:bf:72:33:
                    8d:da:47:44:9a:b1:7a:db:6e:39:d5:b9:e9:ed:1d:
                    04:17:b0:41:58:ca:d3:c2:f0:85:ce:81:93:31:9d:
                    55:01:27:e1:fe:a3:9e:de:7b:2f:0c:5a:f2:a9:be:
                    c4:f0:ca:b0:25:aa:f0:b5:4c:60:ac:fb:41:5d:af:
                    cf:4f:35:e5:65:5e:53:eb:ce:5f:26:17:f0:a6:61:
                    5f:35:c8:f7:a2:3c:07:b4:d8:5b:f0:f1:f0:31:ac:
                    47:a1:6d:1c:7d:31:22:f0:63:32:12:c3:a0:8e:36:
                    55:99:96:ba:8f:a5:6f:65:c6:3b:bf:d5:75:76:e3:
                    09:d8:90:c5:38:ad:30:65:72:46:0d:97:5b:25:12:
                    ac:6e:cd:e9:c5:64:71:f6:ed:ff:21:09:69:db:81:
                    b6:13:4f:ba:4f:ef:d8:a4:ee:d7:f7:d7:2f:9f:df:
                    55:1c:bf:8f:08:51:d3:37:da:cd:88:13:b2:65:92:
                    8d:cf:fa:74:69:11:51:74:f6:5e:01:0c:79:7c:77:
                    40:20:e3:46:b1:d4:57:2a:25:74:ea:fa:49:d1:50:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2D:FC:F4:96:77:AF:4B:58:A2:CE:28:A8:D1:FA:55:1A:C4:C6:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38e1daa2-af92-300b-a3b3-eacf12ed8a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:22:0d:2f:a6:c3:93:9c:7a:ad:f7:98:8e:b2:64:2f:53:
         76:8e:d4:91:16:03:95:c7:30:18:f2:df:54:95:fe:00:fa:96:
         c5:97:ae:63:66:70:4e:69:ee:1a:6e:ad:e7:bb:0e:85:cf:84:
         ed:98:05:65:a3:92:5c:ff:58:b1:94:cf:67:e1:95:3e:c3:82:
         4b:50:fc:6c:59:d9:26:b2:8e:e4:41:cf:c9:f0:1d:1f:25:30:
         9c:0c:f5:04:d3:63:67:03:83:02:5b:2f:92:55:8f:c4:ba:63:
         42:cc:80:8c:bd:0e:a7:20:50:8c:4e:81:a1:8d:85:92:49:8d:
         53:6f:3a:4f:0c:00:06:3c:93:43:11:ac:8d:5f:dc:a6:a2:10:
         50:20:e3:85:70:bf:21:f4:11:d5:95:21:4d:e9:9c:1d:82:fb:
         1a:0e:ef:90:96:a2:0c:1b:a5:9f:68:a9:e1:b7:2b:a1:46:99:
         e6:cd:d5:44:a3:d4:57:05:b4:68:7d:4b:3a:2e:c2:bd:20:c0:
         53:10:01:10:65:bb:b3:fc:e0:57:9d:a6:a5:d1:2d:f5:38:0e:
         e0:53:c2:36:0f:a0:10:48:df:3b:2b:e3:c8:a7:17:60:74:f9:
         db:46:90:34:18:16:54:88:2f:8c:c8:24:31:cf:c6:35:d6:ed:
         b7:f1:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org