Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88a20b05-7e60-3836-855e-f4d42481c812.roa
File:                     88a20b05-7e60-3836-855e-f4d42481c812.roa (raw, json)
Hash identifier:          HChClEg2i/gx3lctr63tQzcjxMghZpk0B/ARkdYQg4g=
Subject key identifier:   39:3C:8D:E9:12:8B:DA:4C:F1:57:2B:5A:4C:45:D2:57:FD:FD:5B:C6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931599653436A6BB8F212320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88a20b05-7e60-3836-855e-f4d42481c812.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        207.35.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:99:65:34:36:a6:bb:8f:21:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=768a5559-7441-4266-bf30-53fe06c22cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:f5:6a:ec:7b:e7:a2:2c:1c:ee:fc:5a:dd:
                    66:0e:1d:90:79:d5:80:21:e2:c2:50:fd:ef:a6:03:
                    67:31:4b:e3:63:d1:6b:d2:cc:dc:68:3c:a7:af:4c:
                    b6:a5:4d:bf:6c:cd:89:c9:b2:31:36:93:11:26:1b:
                    08:65:8b:59:3b:4c:c5:b0:0b:45:f1:b4:25:b6:4c:
                    99:33:13:b8:af:3e:cc:66:2c:a0:aa:87:43:5a:3e:
                    a1:19:1d:58:e2:bd:58:ed:d6:d9:e9:42:81:32:79:
                    c3:a9:27:21:ed:34:a3:20:d3:2c:0c:ae:f3:3d:dc:
                    43:03:98:1d:a3:ae:3d:e4:8b:37:50:71:57:4d:73:
                    49:9e:28:c1:fd:cd:e1:6d:df:88:14:cc:cd:22:e7:
                    19:1c:29:37:b3:1d:aa:12:2c:7f:83:ac:5a:3c:56:
                    53:b6:92:96:c0:07:bb:b6:cc:37:26:71:93:64:14:
                    a1:d0:d4:79:93:cd:30:7f:98:5b:8f:a9:dd:46:4e:
                    09:b8:35:a6:6a:01:61:98:95:6a:00:eb:ce:04:b1:
                    63:d1:a2:c9:43:3f:f5:b0:aa:29:74:37:3f:d7:30:
                    37:d4:2c:6b:c9:e2:eb:d3:46:cb:51:05:95:35:e5:
                    2e:57:dd:dc:ca:d7:46:21:86:ba:bc:29:46:7e:0a:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3C:8D:E9:12:8B:DA:4C:F1:57:2B:5A:4C:45:D2:57:FD:FD:5B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88a20b05-7e60-3836-855e-f4d42481c812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:9f:d6:b8:be:1e:cb:a0:7a:96:e6:d1:dd:b1:64:db:33:
         da:60:1b:85:47:f9:34:ce:37:a3:21:e0:b6:6d:96:0a:4f:37:
         3d:cf:c4:a4:b6:d0:ed:8c:7e:50:04:9e:ef:cb:c8:59:50:f5:
         60:6a:d5:34:7f:9a:0d:ba:43:c1:fb:c7:b4:d3:ea:9a:38:e7:
         93:63:c3:3f:e6:57:4c:e7:8c:6c:6f:52:64:15:70:33:08:b8:
         24:d7:8f:2b:d7:d2:6a:76:6f:a1:fa:e1:41:cf:ad:a6:31:08:
         2f:2f:73:f7:be:71:a9:18:1f:9f:77:3d:64:c6:e8:f4:c7:fc:
         a3:ce:8e:03:2e:3c:94:b1:fe:87:50:83:99:25:d1:76:e0:19:
         84:04:fa:18:96:ff:c7:50:e7:80:bd:a5:1f:42:02:7b:a7:42:
         d9:f6:4e:22:23:b7:58:1b:83:2d:c4:35:ec:57:e5:be:3b:69:
         88:07:7f:12:98:65:cf:2a:6b:98:f0:a9:af:51:9f:a3:41:6d:
         45:0c:db:1f:e2:a7:5d:f0:65:d7:7b:d6:bf:e7:c1:4d:b0:85:
         7d:7e:61:f0:0b:8a:8b:30:85:40:f9:08:31:79:f2:80:be:fd:
         27:51:3d:42:00:35:ee:60:47:d4:3b:42:24:f2:7b:a1:1e:41:
         c9:f3:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----