Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa
File:                     3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa (raw, json)
Hash identifier:          X5xgE7q/TfetZl/3qe/2rg4oVpLnQjgREbK6RWLgVjw=
Subject key identifier:   45:A7:04:D0:22:04:08:AC:1E:BD:77:87:90:FC:26:DF:D1:61:7D:3E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931624A20415F18F38818600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        207.236.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:24:a2:04:15:f1:8f:38:81:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=36dfa49b-f166-48df-a44b-ed9c5fee75e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:6c:6d:c9:4c:10:8c:6d:1d:a6:4b:f8:11:
                    9e:27:ed:33:f1:24:c2:ac:b6:a4:ef:cb:60:0f:65:
                    b1:7e:fc:6d:27:c1:ec:0f:74:96:ee:43:59:08:92:
                    5a:e4:30:2f:52:fb:c8:7c:cc:7d:53:67:73:cd:f2:
                    dc:9c:92:35:ff:f2:8a:4f:db:b2:de:7d:8a:7c:cd:
                    81:52:bb:41:62:12:2c:5d:03:36:17:d2:15:74:6f:
                    f3:d6:aa:ca:08:5d:b8:4d:24:83:c8:32:92:5b:28:
                    b9:e0:10:34:6f:7a:66:9f:77:50:bd:b5:ba:e5:c3:
                    c5:b3:df:61:5a:88:c2:02:47:f8:0b:65:d0:32:9c:
                    6d:83:a6:0f:17:4a:b7:b4:63:2d:0c:8a:ba:88:97:
                    01:ca:26:fa:a9:47:5f:c7:25:ec:9c:68:82:4c:ec:
                    66:6b:46:e6:d4:33:ef:73:88:2e:d4:bd:31:05:fd:
                    5b:4e:c6:b5:af:da:d0:01:88:07:58:bc:bf:98:cf:
                    e3:6c:b2:4f:c9:95:90:be:f9:9f:59:36:08:43:39:
                    c5:34:e3:9d:98:52:1d:4b:37:31:7c:86:be:43:4e:
                    3d:00:56:62:44:01:28:91:ae:6f:97:e5:da:2f:12:
                    87:56:cd:42:0e:57:92:53:62:a9:09:a9:5b:1d:6d:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:04:D0:22:04:08:AC:1E:BD:77:87:90:FC:26:DF:D1:61:7D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e6807a4-e9a0-37c0-a15c-c954ccd0c28f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:d0:fc:bb:77:49:42:70:17:f3:53:de:d1:bd:1f:9b:0d:
         8c:b3:00:0f:bd:eb:52:db:7b:79:0c:93:6f:a0:43:56:3f:ee:
         02:2a:98:c5:c7:8c:02:0b:82:d1:ab:61:c9:91:8e:29:d0:17:
         e0:b8:7d:c1:86:34:c4:88:ad:ab:a4:63:b3:9d:d0:76:e7:ca:
         c6:49:11:7f:58:e3:eb:d2:2c:8c:ed:1e:95:cf:c5:e3:d8:fb:
         0d:43:72:a7:f2:93:8d:60:6a:87:d4:67:4e:78:03:a5:75:b5:
         f9:a6:cf:90:fc:89:b0:5e:c3:85:a3:7a:f2:fd:e8:1b:0e:06:
         1d:89:31:cc:8e:22:4b:68:ca:3a:ec:86:f8:48:2f:a6:a9:2f:
         fe:1a:98:38:8a:59:14:ae:1f:24:42:8f:cc:e9:5b:23:0b:e1:
         5c:9a:82:96:87:69:2a:a7:2a:38:09:9b:04:6d:ae:ee:b0:a0:
         34:de:83:2e:2c:24:04:27:0a:c6:6b:39:b1:0e:59:d9:9c:c1:
         a9:ab:2c:99:71:18:b6:dc:e0:02:52:1e:45:e7:82:71:ed:67:
         08:d4:48:ce:b7:7e:1d:66:a1:b8:4d:12:38:5f:fe:bf:6d:02:
         70:11:24:d3:e2:86:0f:fb:1c:26:ed:26:98:e8:4c:7b:86:a1:
         94:90:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org