Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598fdb5b-72a0-376f-ae97-8b67be7a5166.roa
File:                     598fdb5b-72a0-376f-ae97-8b67be7a5166.roa (raw, json)
Hash identifier:          mvAWswGKdhVha4gcTXNFzjVvySZCvZHzx16uXQi+Ojw=
Subject key identifier:   FF:C9:FD:B8:C4:2B:BF:A4:01:68:3E:CD:E7:AE:FD:75:2A:E5:A4:BC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493161BB72F970FD362061040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598fdb5b-72a0-376f-ae97-8b67be7a5166.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     20371
IP address blocks:        207.236.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:1b:b7:2f:97:0f:d3:62:06:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=c34e6936-f3b2-4c9c-8007-ceb2b58f9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:c7:2e:6c:dd:9e:59:f9:5d:4d:a1:27:fe:
                    a5:03:8f:cd:e4:6d:3f:52:2f:23:b1:c8:53:46:8c:
                    c2:de:4a:78:19:5f:93:5c:a7:12:9d:9e:45:6a:32:
                    ea:6a:01:d0:e2:15:c2:09:4f:8d:93:bc:0d:22:7b:
                    91:7e:a5:54:63:4f:05:c1:bd:28:3b:bd:b8:66:8e:
                    a3:35:15:55:aa:87:84:a5:6d:ab:0e:a8:80:23:1d:
                    6b:7a:94:38:ee:eb:17:37:7d:71:91:82:c0:8a:67:
                    ce:93:f4:c6:35:43:2d:29:8a:eb:48:44:09:0a:a6:
                    36:19:50:6e:47:74:ae:2e:6f:89:d6:f4:49:84:f3:
                    49:8b:97:6c:70:85:7c:5f:36:8f:09:0a:28:e7:31:
                    60:3d:71:90:91:36:48:d2:c2:1c:66:ac:f2:d9:26:
                    8c:6f:61:b7:8c:96:a5:91:e0:ea:6f:0e:49:10:c7:
                    8f:1f:2d:7f:a1:4b:ce:52:86:db:02:c1:63:2b:a0:
                    52:85:4d:8e:e3:24:67:ac:e1:fe:59:29:e3:20:4f:
                    13:33:dc:87:22:18:be:0f:aa:dd:24:cc:67:ec:8d:
                    66:8f:37:f5:75:87:3f:f7:d9:e3:93:bb:c8:31:94:
                    69:52:37:41:d6:3d:c7:35:73:b2:6c:81:c1:34:5a:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:FD:B8:C4:2B:BF:A4:01:68:3E:CD:E7:AE:FD:75:2A:E5:A4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598fdb5b-72a0-376f-ae97-8b67be7a5166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:81:37:96:80:c3:4e:81:3e:f0:b0:ab:eb:c3:8e:11:99:
         12:d4:ef:08:91:52:2f:9b:ad:39:36:73:bb:be:fb:d6:cc:a8:
         cd:7f:fe:f6:55:b1:77:17:4d:16:d8:91:f5:7d:ae:0e:84:51:
         0f:60:34:b7:25:7f:e4:cf:df:c0:f7:66:83:ef:91:be:05:b3:
         e6:b4:74:57:61:1a:cb:c3:78:f2:c9:d7:b8:1e:1e:c4:06:a2:
         a3:2b:5e:36:a0:61:27:31:68:65:75:6a:ee:a6:88:4a:3a:55:
         b0:9e:9b:a0:b4:63:35:d0:a5:4d:53:85:81:f3:4d:1a:a1:08:
         78:8f:92:93:14:48:ab:75:cb:9e:95:c4:84:d7:ec:5d:32:00:
         4a:d5:7b:51:87:f7:aa:74:85:95:6c:11:21:70:37:e3:e6:8a:
         36:3b:83:ae:7f:42:7b:92:6c:3d:cb:2c:da:1c:86:77:78:aa:
         2b:1e:cf:c6:9d:35:c5:4c:b4:86:9b:93:c0:ff:89:96:c8:ec:
         de:c0:0d:61:a3:64:20:5d:34:e1:81:06:b2:9f:19:7f:f8:94:
         30:8d:6b:7c:5f:59:99:f7:33:2d:c4:88:13:d5:4e:ac:05:87:
         01:48:a4:10:16:f6:ff:c9:f1:1c:de:f0:97:dc:15:42:08:ee:
         06:00:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----