Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5057a454-49e8-3985-a965-bd4c01a9bcad.roa
File:                     5057a454-49e8-3985-a965-bd4c01a9bcad.roa (raw, json)
Hash identifier:          GFD2/75181iU5+xydBpL+RCoQQQrDRBlz6kjeoUYVAI=
Subject key identifier:   1D:EA:13:DF:34:3D:16:0C:82:E5:E8:F4:B7:4C:C5:99:E8:CB:D5:84
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493161CC7DD87BC8F46661600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5057a454-49e8-3985-a965-bd4c01a9bcad.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.236.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:1c:c7:dd:87:bc:8f:46:66:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=59e7b694-24c8-455b-8221-48f1fc88e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:13:3f:e2:26:4b:81:56:fa:be:93:89:51:
                    5e:89:66:12:03:54:7d:93:6f:44:ba:2b:53:d4:24:
                    3d:67:ed:85:90:71:31:1b:de:ef:75:ef:4a:1e:05:
                    74:9c:ad:21:4e:7c:83:63:ff:8b:7b:01:b0:d3:b5:
                    6c:b0:95:f4:46:f5:86:5f:5c:40:e3:10:f3:02:1a:
                    99:15:45:db:a6:ee:76:1c:ed:e8:e3:a1:1a:e0:2e:
                    ba:bb:11:b9:63:00:6c:9a:57:4b:15:2f:4c:ac:65:
                    06:a4:70:c6:b1:b1:46:3e:0e:42:59:ba:28:b6:00:
                    0d:fd:98:1f:c5:79:9f:58:81:1c:11:52:95:99:00:
                    b6:52:d3:9f:18:bd:e0:96:9f:77:cc:8e:03:59:b4:
                    d4:bf:bf:16:0d:4a:62:2d:cf:02:5c:46:83:23:ff:
                    e8:c8:bc:66:94:42:14:45:b9:f6:17:e2:1d:5f:3a:
                    ec:5d:b5:b6:2c:9e:db:ab:67:22:30:67:ed:0f:27:
                    f8:1d:ec:b1:a8:0d:cf:ac:15:56:fd:d0:d4:1e:eb:
                    ff:55:88:39:b3:27:55:73:4f:3f:67:9a:02:12:0d:
                    4e:a4:f0:e7:f2:29:64:1f:a8:75:fe:9c:e2:72:b7:
                    6a:91:1c:7d:a4:ba:3a:f1:5a:99:21:53:3e:ff:06:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:13:DF:34:3D:16:0C:82:E5:E8:F4:B7:4C:C5:99:E8:CB:D5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5057a454-49e8-3985-a965-bd4c01a9bcad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:87:d2:49:e8:f6:c7:f8:45:42:2e:9f:ce:e7:f9:71:ef:89:
         64:42:03:34:48:56:b5:e2:0e:68:d8:24:c6:58:81:5b:e4:4c:
         ca:ef:b4:0f:81:a5:35:b0:19:73:bb:ef:b1:b4:e5:58:bf:3c:
         ad:1d:4f:c0:69:af:1c:71:fb:6b:50:37:50:49:cf:e7:b1:74:
         78:f0:73:e5:1e:e3:0d:66:bd:cf:35:d1:a4:0f:93:8b:6c:06:
         99:a2:6e:49:80:b0:f8:8d:e6:43:86:27:5e:54:05:04:06:0b:
         8e:6d:b8:5c:19:33:a5:bb:51:b5:96:83:98:78:69:19:7b:80:
         9b:da:ee:e9:ad:77:00:c9:d0:dd:90:87:1a:75:58:04:5a:1d:
         10:ba:89:ea:a9:43:10:85:f4:43:c9:cf:48:d8:df:2f:48:96:
         06:86:62:45:00:6d:fd:96:c8:13:4c:cc:4c:1b:42:4a:9c:41:
         d8:2d:1b:4c:b6:f1:f5:8d:ea:b0:63:63:ab:c9:6e:eb:6a:d2:
         9e:02:c5:7e:05:d6:37:41:21:54:47:65:c6:11:78:01:07:44:
         08:15:9c:69:3c:93:83:a9:06:da:31:de:43:08:ff:f6:5a:00:
         7c:41:17:08:9c:2e:10:5e:f1:1c:97:50:f8:a5:dd:f1:1f:29:
         a3:5b:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org