Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6b9caded-733a-3a1f-8499-e18254b11379.roa
File:                     6b9caded-733a-3a1f-8499-e18254b11379.roa (raw, json)
Hash identifier:          uActUURqzr5iYJY6ydpo88U0i2HHen0mmbM7jZnKQsc=
Subject key identifier:   13:77:AB:74:BD:8C:6A:9E:C3:C3:6D:84:6B:AC:A2:C6:9B:EE:77:45
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74DC97F8B9D2E29C309500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6b9caded-733a-3a1f-8499-e18254b11379.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:dc:97:f8:b9:d2:e2:9c:30:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=288b9518-3df2-4dec-b6cc-12843d87c4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:db:ab:d0:88:2b:9a:49:a8:65:49:78:e8:
                    22:e8:2b:ce:53:07:d7:2e:b5:0f:40:c3:d1:82:fb:
                    b2:15:52:96:e3:b0:90:c4:bf:88:39:de:48:b6:d9:
                    0f:5b:7c:9b:4c:f2:46:0d:f7:85:f6:be:77:eb:2f:
                    86:0f:7d:38:4d:a3:d4:ad:1d:30:ab:67:a8:c8:c1:
                    7f:91:3e:ba:28:70:6a:b4:08:fd:15:42:06:b4:8a:
                    04:cc:11:51:2f:29:5c:9b:08:3d:dc:e8:89:bb:71:
                    7b:6d:ae:28:9a:b8:4e:64:64:d0:52:50:bf:ee:25:
                    b6:11:80:ed:8f:b6:da:f6:4e:8a:b5:0a:a7:90:d2:
                    62:e5:92:39:32:be:1b:94:a2:56:f5:f7:eb:cb:92:
                    1e:34:c0:54:af:a1:3c:11:d3:e5:8a:c3:97:9a:21:
                    ac:54:55:33:bd:4b:a5:03:61:8c:28:6e:20:d6:96:
                    92:79:a9:dd:cd:38:68:f1:e7:fe:3a:2e:38:05:b6:
                    8d:81:8f:24:ac:d8:4a:d1:ce:37:2f:16:48:6d:95:
                    c9:c5:65:35:ef:aa:8c:a8:51:20:0d:5d:2a:a5:59:
                    2d:f4:34:86:03:f4:45:13:a0:6d:f0:95:3b:8a:93:
                    20:b1:fe:85:95:cb:b6:fb:74:c7:f6:bc:a1:55:0b:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:AB:74:BD:8C:6A:9E:C3:C3:6D:84:6B:AC:A2:C6:9B:EE:77:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6b9caded-733a-3a1f-8499-e18254b11379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:e9:4f:0a:ca:11:3b:e9:19:cf:2b:d7:55:96:fa:5c:22:
         8b:7e:cb:75:d3:2e:5d:b6:bd:e4:cc:52:c3:0c:f4:be:1d:e7:
         45:21:ca:49:ac:ca:05:91:6f:07:1f:51:3d:68:e1:7c:95:01:
         fa:48:72:a9:64:f5:a7:a4:55:26:7c:c2:e2:65:78:4e:42:f9:
         6a:ed:62:94:1b:c5:54:a1:55:24:c2:1f:51:5d:c8:1b:24:28:
         db:2a:d6:15:a1:18:f4:85:0d:ab:c5:ca:39:54:13:54:92:8f:
         9e:a9:74:47:16:d8:94:86:86:36:b3:e1:dc:7f:c1:be:bf:97:
         bd:8b:94:a3:40:fe:64:32:e5:87:cb:56:a1:01:20:61:c5:cc:
         e2:c7:57:f5:20:ff:46:f7:2d:1d:e1:64:74:32:e2:11:7e:4f:
         6b:35:9f:65:38:e0:de:f5:bd:12:cf:a3:99:a6:e1:3f:a0:76:
         d6:9e:3b:c3:53:2a:c7:7b:03:7f:f0:67:46:42:26:37:7d:c8:
         23:51:0b:99:ec:10:12:7c:15:d8:55:1b:c3:cc:74:8e:2a:20:
         aa:c6:85:d0:c8:3b:25:ad:48:22:e1:8b:9b:6d:0a:b4:69:37:
         bf:88:a2:7a:1a:73:2d:40:42:bf:3a:ff:a4:0b:04:0f:ad:26:
         e5:2c:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:58 2023 by rpki-client on console-fra.rpki-client.org