Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4777c378-319e-3a61-b4c1-e7acbc374fd3.roa
File:                     4777c378-319e-3a61-b4c1-e7acbc374fd3.roa (raw, json)
Hash identifier:          8E98AG++LMTo6MxUfjDuhNUps4If9CtXM5HCsudwkJ8=
Subject key identifier:   32:6B:80:11:36:DC:59:45:FA:0F:D3:58:26:D6:C3:88:11:03:AC:A5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B747C5F81226A5FE9FB340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4777c378-319e-3a61-b4c1-e7acbc374fd3.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        207.236.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:47:c5:f8:12:26:a5:fe:9f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=b2b408e5-b299-4966-92e6-487f8c40e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:bd:54:99:33:c0:05:fe:e3:b4:ee:6a:6e:
                    0c:fa:20:f0:9a:98:29:f7:51:35:32:a8:9f:ea:9f:
                    dc:f7:3b:54:a7:59:ff:5f:87:76:59:d8:d8:d5:90:
                    68:f5:82:b1:ee:e4:3d:6e:b7:5e:e2:f0:66:72:0a:
                    60:fe:92:1f:61:1d:19:27:8a:23:a0:5d:34:2a:07:
                    46:19:b7:46:0c:8d:62:61:cf:c9:48:cb:5e:39:d6:
                    83:a1:0b:c0:46:c1:00:fd:70:64:90:03:45:30:5c:
                    22:f7:cc:ee:75:40:4c:cf:22:32:60:2e:62:e0:99:
                    63:31:4f:e1:9c:c2:45:8a:b6:40:4e:71:36:cd:d3:
                    f5:78:fe:7e:9d:77:74:4b:96:15:78:8d:01:c1:d8:
                    b3:81:12:44:ee:50:07:01:69:77:36:f6:3f:d2:71:
                    eb:7c:35:96:21:ac:48:15:c1:89:1c:73:f7:d1:ce:
                    80:f9:3a:2b:a5:55:3e:65:05:51:e1:69:2b:1d:91:
                    72:ea:bf:d3:bf:56:ef:be:a4:00:f4:ad:70:34:2b:
                    12:85:cc:01:73:02:c6:8f:9c:b3:a5:4f:6a:60:58:
                    f7:04:97:45:d1:24:25:7a:3a:e0:68:1c:75:18:37:
                    0e:8d:75:b1:a2:8e:ba:d2:74:d5:dc:a1:d8:ee:9b:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6B:80:11:36:DC:59:45:FA:0F:D3:58:26:D6:C3:88:11:03:AC:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4777c378-319e-3a61-b4c1-e7acbc374fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:01:27:79:af:86:34:76:37:d4:29:db:f3:23:dd:9c:3b:ff:
         53:18:5e:0b:eb:3f:e4:da:d2:f9:fe:6b:90:a2:4c:aa:b3:d6:
         21:7d:51:7f:b6:1d:ef:af:30:e4:9d:d3:8d:cb:f7:56:53:79:
         ce:5e:2c:0d:e0:96:28:aa:22:e9:14:7d:a0:f0:9a:2d:90:ae:
         6b:72:76:53:40:00:ad:c1:ca:e6:06:5b:56:f4:93:28:cf:ce:
         17:8f:05:bc:32:11:5d:46:5f:44:aa:7c:c0:70:92:b9:d8:c2:
         70:70:34:07:79:b6:a1:25:20:56:02:e6:34:ad:65:c7:7a:df:
         41:f7:92:f9:0d:59:f1:f2:3d:6b:09:5f:85:c6:45:ee:c6:9b:
         5a:4e:c6:24:16:51:20:5d:29:6c:4a:13:e9:22:79:21:2f:69:
         db:72:e8:02:74:6b:e0:a1:cf:bd:7f:6f:8c:c3:eb:b4:fb:12:
         2a:ae:13:aa:c7:3d:60:26:89:1f:62:b1:98:44:6c:40:c7:12:
         77:d9:03:c4:75:97:a9:74:ae:73:a7:57:65:17:3c:68:2c:6b:
         b0:8b:07:01:8b:d4:f8:ac:a1:d6:b2:89:1d:b4:ac:61:e4:68:
         57:93:ba:f2:bc:27:a9:78:e2:41:55:77:a2:2e:12:b6:07:dd:
         e3:12:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:35 2025 by rpki-client