Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7592747a-4a65-3b13-8179-122d17254a77.roa
File:                     7592747a-4a65-3b13-8179-122d17254a77.roa (raw, json)
Hash identifier:          KoLJXA5sxlo01+gQ1TLe/9tePubqkRVmVASAUBsWLRs=
Subject key identifier:   F6:45:B0:A8:3D:AC:6E:2D:73:8F:C8:CA:40:BE:1F:D5:C8:FD:29:E0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5EDD8768F47C52777CC80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7592747a-4a65-3b13-8179-122d17254a77.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     30336
IP address blocks:        209.226.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:ed:d8:76:8f:47:c5:27:77:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=646d1de6-393e-4ef9-be86-0eb335512716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:8a:97:9b:cd:cf:ae:4d:d7:5e:0a:2d:fa:
                    7f:fe:b4:fa:46:0f:58:21:50:dc:77:a1:ad:98:42:
                    c5:f1:20:e1:97:d6:2e:5b:c9:92:a7:bf:6a:0a:58:
                    a6:88:f6:8e:d1:68:59:42:38:f8:27:fc:d9:e5:70:
                    55:d8:af:40:9b:45:f4:83:a6:bd:b6:d2:99:bf:4a:
                    55:60:9b:af:c4:da:5f:61:65:7b:23:8e:3f:14:49:
                    de:34:35:c7:ba:02:34:a6:52:de:e1:53:ff:71:ab:
                    71:a2:ca:3f:9f:36:a9:d9:d9:37:50:b3:11:e8:96:
                    54:e2:c5:6d:30:aa:f2:5e:b6:95:2c:7d:35:c2:93:
                    44:59:83:a8:d0:5a:2e:31:a6:e0:7c:09:a5:08:06:
                    f9:64:7e:75:10:ba:86:ea:4c:72:0a:13:43:47:b6:
                    9c:1e:2b:a2:b4:ff:c2:79:5d:56:69:84:ca:08:d7:
                    07:72:0b:47:83:34:28:a7:62:73:f2:41:67:b9:62:
                    61:e1:31:4e:8e:eb:5d:07:c9:e0:b1:26:7d:9e:dc:
                    0b:b2:df:45:cc:70:22:99:e7:47:e8:1b:a0:aa:e9:
                    cb:cf:c2:d3:5a:d0:04:2a:db:16:ea:7f:0f:34:ca:
                    6b:c8:fc:36:12:db:93:5e:ae:69:3c:b5:19:c9:17:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:B0:A8:3D:AC:6E:2D:73:8F:C8:CA:40:BE:1F:D5:C8:FD:29:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7592747a-4a65-3b13-8179-122d17254a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:b1:79:b4:8b:71:e7:a7:0b:d1:06:49:c2:37:df:29:f9:
         37:c4:c5:38:4f:11:a7:78:89:22:42:01:6c:a1:cb:ab:a3:47:
         08:be:87:2f:90:0c:c6:75:b4:ff:12:a5:70:da:5d:77:be:c2:
         8f:5e:22:4d:ff:27:3d:7f:01:ef:6d:8e:b0:0e:e6:32:15:09:
         65:78:66:34:51:27:29:95:af:c9:15:d5:9f:af:a2:95:ef:b3:
         48:df:02:37:d0:af:76:51:91:ee:3f:8c:cd:81:c1:fd:fe:fe:
         00:95:c8:4d:0b:7a:3d:07:b3:32:79:87:65:38:de:75:ff:2a:
         00:cd:69:ce:d1:d2:4a:03:4d:c0:19:c4:e7:15:6d:6a:2c:32:
         bf:d8:8d:52:6e:f1:fe:12:21:96:b4:79:49:01:89:3d:2b:a1:
         ec:24:a9:c8:05:cc:09:b0:7f:e3:52:b3:76:4a:89:d6:55:6a:
         df:41:a9:4c:2a:ac:0f:b0:93:0e:d4:2a:89:6b:ec:94:5b:b8:
         76:db:20:9e:c2:50:bd:59:0d:54:8b:04:8b:ce:88:34:10:f0:
         e4:53:a5:0d:fa:f3:e8:7f:af:28:be:81:a4:65:a3:df:d2:8e:
         84:90:5e:a6:59:cb:bc:57:b5:42:49:57:0b:c1:06:3f:da:44:
         9c:84:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org