Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/55a626e6-dbeb-37aa-9057-ab7424de4879.roa
File:                     55a626e6-dbeb-37aa-9057-ab7424de4879.roa (raw, json)
Hash identifier:          g4kGG5+JQCllJIDF6fAFtSFVUz6Pao+WBXWG1pcsGLE=
Subject key identifier:   E6:27:FC:76:6D:B5:04:10:C2:EF:9E:3E:D2:4E:02:46:09:48:08:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B54F5088071CE4D9ACDC40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/55a626e6-dbeb-37aa-9057-ab7424de4879.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.231.231.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:4f:50:88:07:1c:e4:d9:ac:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=c6b9f60e-0a4d-40b5-bf56-1bf0cb6d2e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a9:57:c5:f9:10:e6:e8:09:a8:91:58:dd:42:
                    68:ed:57:76:f4:b8:9d:20:e9:c6:e5:ff:b7:bb:5a:
                    30:fa:c3:93:16:aa:67:e8:4f:e3:ad:e2:16:67:e5:
                    ee:26:00:88:c1:cc:a5:1a:f3:92:63:8a:23:de:8c:
                    1b:db:58:44:11:97:98:52:8e:8b:91:8e:4e:10:5c:
                    8d:d8:7f:6e:d8:ad:88:4f:5c:7a:9f:98:f7:47:6c:
                    ca:53:d1:a4:58:b4:02:42:fb:8c:c6:1e:be:fc:38:
                    66:ac:45:eb:b9:7a:35:39:a3:36:d8:07:64:ac:68:
                    72:30:3a:fa:eb:68:8e:fc:43:83:c1:62:a5:08:b5:
                    f1:70:ab:66:1a:4a:ab:1c:b8:54:ea:40:3e:57:11:
                    93:53:21:e8:09:52:f5:29:9f:91:88:20:24:c6:e9:
                    73:68:7a:e0:97:94:7a:69:9e:2f:fa:86:fb:d4:0c:
                    ba:81:a1:12:4c:a8:f7:ee:00:62:5e:90:b0:82:ed:
                    8d:ff:04:ef:89:02:e3:94:c1:b6:e9:32:bc:19:24:
                    16:74:62:5e:6a:18:22:db:5b:7f:47:d8:d7:66:55:
                    c6:3b:f7:68:09:7f:08:48:4f:2f:68:cd:6a:82:be:
                    b8:69:ad:5c:cc:89:9a:05:18:df:74:7b:da:d2:d9:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:FC:76:6D:B5:04:10:C2:EF:9E:3E:D2:4E:02:46:09:48:08:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/55a626e6-dbeb-37aa-9057-ab7424de4879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:1a:ec:4f:a1:47:54:5f:57:79:9e:86:94:a0:43:a9:54:
         fb:d6:7f:df:56:98:84:55:e9:94:6b:0d:8d:09:29:f3:17:dc:
         12:43:b7:15:58:d6:45:68:c3:6b:9a:99:d4:95:12:35:7b:c2:
         4a:a0:03:ad:5c:c9:50:a7:3a:8d:91:21:2f:de:4e:a9:ac:18:
         e6:fc:f2:5c:e2:5d:dc:f8:fa:f0:7f:2b:3d:96:00:e8:70:de:
         8a:25:cf:7b:e2:a3:ed:35:c8:8a:e1:fa:c6:ab:10:f7:28:e3:
         48:fe:e9:2e:68:69:02:67:75:85:9f:9a:9e:3e:c1:f2:cb:04:
         53:03:4e:e3:88:7b:3c:77:26:bc:7f:90:f9:f4:cd:3f:f8:c9:
         f2:1d:e6:28:2c:67:a8:4b:7e:40:b4:e1:06:73:66:57:10:68:
         06:fd:9a:29:39:4e:bc:51:45:0b:71:5e:91:21:e2:0a:d7:91:
         c6:50:fe:72:0f:ff:8d:6e:ca:55:b4:ed:24:85:67:99:a7:ce:
         c2:77:ee:e7:a8:e4:c3:54:18:a1:f0:97:a7:36:04:b6:43:84:
         41:47:50:a8:5b:77:d2:d1:53:ab:0f:4f:c3:6e:25:24:bf:48:
         67:07:ae:1a:42:b0:ac:1c:c8:2f:85:0d:e9:d2:f0:3e:f1:c1:
         7e:37:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----