Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c327564-ba59-3272-bd81-16f100001df5.roa
File:                     7c327564-ba59-3272-bd81-16f100001df5.roa (raw, json)
Hash identifier:          ww01VHDw1KIMWcQv5QS8WzYZH+jEDZiCLW90SDpf9Gk=
Subject key identifier:   D6:59:3E:71:09:4A:6F:D0:40:16:5E:23:8C:ED:CE:3E:AB:2F:83:46
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE55DF7F9775A0391959A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c327564-ba59-3272-bd81-16f100001df5.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     10972
IP address blocks:        198.165.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:5d:f7:f9:77:5a:03:91:95:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=7fba0bca-4a70-45ea-a7d2-fb1004a381d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:e9:0e:9b:ff:fc:fc:72:33:f2:8a:7b:cb:
                    c6:41:af:65:2e:a2:52:20:84:98:b1:e5:65:1b:90:
                    e3:76:55:44:a2:ff:c6:4d:83:85:6d:1b:91:f1:e5:
                    1a:39:7c:06:32:35:2c:ae:28:93:e3:ed:31:06:8a:
                    8d:38:0b:be:46:02:ab:98:87:fe:e5:5a:5a:a1:e8:
                    d1:2c:a8:51:12:c9:88:50:b9:47:09:29:f5:29:69:
                    d9:eb:a7:24:3a:58:7c:80:f7:3b:44:eb:07:82:ce:
                    76:41:11:39:50:41:48:04:5d:30:39:1c:cb:fa:c0:
                    7e:a4:b5:4e:f4:6e:3d:fb:d8:f6:df:17:81:f3:09:
                    c9:bb:e7:f1:23:8a:9c:f5:3f:77:d6:98:4e:72:57:
                    3a:96:ff:ff:f2:13:e8:45:a1:54:04:09:eb:49:82:
                    d5:eb:d0:97:61:b8:ba:50:47:ff:15:43:b5:be:00:
                    2b:2c:6f:9d:39:fb:e8:3a:ee:29:50:18:71:f7:6b:
                    d7:ae:10:39:04:36:cf:31:58:16:9b:9d:c4:69:8b:
                    5e:79:ad:23:b7:6c:47:cb:fe:1b:9d:07:58:01:d3:
                    03:31:db:73:79:ff:05:0f:af:ba:80:6a:e4:43:10:
                    98:81:4f:8f:af:0f:4a:ef:c3:91:a0:f2:a8:62:a5:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:3E:71:09:4A:6F:D0:40:16:5E:23:8C:ED:CE:3E:AB:2F:83:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c327564-ba59-3272-bd81-16f100001df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.165.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:32:63:3b:02:67:bb:bb:79:c2:4d:eb:e9:78:cd:92:20:
         98:b0:dc:54:74:0c:60:c3:fc:ea:de:2a:ec:4a:1d:78:37:36:
         f1:e2:ae:f9:30:6b:92:95:aa:29:7e:08:fa:da:b9:a8:92:f6:
         7f:ed:04:12:17:06:5c:13:d8:03:16:05:4c:b8:bf:8b:00:fd:
         be:51:00:57:03:54:94:a9:af:fe:39:cd:ff:46:27:4b:77:ac:
         da:4c:be:3c:a3:c2:d0:49:95:22:80:4c:50:0b:05:dd:e0:07:
         06:61:2e:67:9a:ed:c0:d0:bd:a2:e0:62:31:36:f5:ff:de:cf:
         f2:f8:e1:a1:28:fa:4b:9f:7b:6a:3f:91:fb:7a:fa:51:dc:9f:
         8e:28:92:90:7e:24:c7:c4:2e:33:ab:56:27:67:b3:b0:53:33:
         16:09:54:87:01:8f:e3:0c:18:c4:d4:0c:69:03:f2:2c:4a:15:
         18:ad:d8:6d:9c:37:42:bf:0c:a0:6b:e8:40:45:20:e1:90:98:
         15:b8:42:9f:8b:8a:bf:c2:e4:ae:2a:b4:7a:b4:b0:f6:23:59:
         d9:7e:9e:2f:ac:0b:6d:ad:9c:75:d9:90:a3:4e:56:96:d3:b5:
         ec:50:b9:79:76:cc:f9:ad:b1:b1:41:d9:70:40:7b:25:11:ed:
         04:7d:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org