Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88c2a26e-df03-318b-b226-3e2905ffb707.roa
File:                     88c2a26e-df03-318b-b226-3e2905ffb707.roa (raw, json)
Hash identifier:          TaNtDbsoh3DqaheIJ+tMZZAgw8d8BIVKCjkW3tCoEJE=
Subject key identifier:   DB:C6:CB:E8:B5:6A:FD:D3:AA:84:79:3B:C6:BD:57:08:38:50:E0:BC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB0C51A8ECCF26DB9214740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88c2a26e-df03-318b-b226-3e2905ffb707.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        207.236.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:c5:1a:8e:cc:f2:6d:b9:21:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=b4bbed32-9210-4224-8a19-e310922a4eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:9a:2a:43:b1:c9:7b:ce:55:77:e9:83:10:
                    a3:1b:c9:ce:14:6e:82:6c:96:6a:f3:5d:66:ee:c1:
                    47:0c:3c:9a:a6:47:86:76:1e:1b:31:c1:a9:e0:18:
                    72:6d:82:c2:74:9d:b0:40:66:b8:64:60:38:9b:f5:
                    d9:38:32:33:c1:cd:c0:3e:96:66:f2:74:c5:a2:3d:
                    17:af:59:1c:30:69:d4:3d:1e:95:b9:05:c8:1d:c7:
                    43:19:e8:d7:f4:30:18:97:63:21:c3:49:a2:0d:a1:
                    33:7d:32:09:98:b1:68:6e:7c:b8:bc:ae:6b:63:0e:
                    d0:bd:a0:c1:69:6d:4b:b2:07:ab:ec:9f:31:a3:45:
                    d3:55:ba:95:81:0e:92:f2:99:fb:30:fc:ec:d1:e6:
                    d9:f3:a5:25:d4:d2:6f:f3:b5:f5:95:a1:ee:50:9b:
                    54:7a:0a:52:8e:a9:c4:85:45:8b:fd:bf:f7:28:99:
                    50:24:f5:27:aa:79:af:1e:30:8c:9e:34:d0:14:ec:
                    74:bd:8b:e0:19:82:b4:6a:4b:ea:7b:f8:c0:74:11:
                    79:af:94:0d:f7:b5:14:f7:e4:bc:9b:cc:87:7e:ea:
                    8a:c5:d4:80:2a:72:63:22:7d:9f:2e:eb:bd:b7:bd:
                    af:a4:87:24:89:52:cc:71:c6:98:52:01:59:84:a8:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:CB:E8:B5:6A:FD:D3:AA:84:79:3B:C6:BD:57:08:38:50:E0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88c2a26e-df03-318b-b226-3e2905ffb707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:54:95:ef:ac:68:ff:d8:2b:d6:d8:52:93:25:4a:9d:e6:
         07:16:12:55:67:df:e4:99:58:d7:99:ef:cf:2d:93:5a:48:96:
         15:19:7e:64:8d:30:d8:44:20:96:b8:7c:3e:f7:1d:4b:c9:b8:
         67:05:75:cd:8a:08:88:a9:c3:77:3c:69:85:90:32:30:27:4d:
         08:72:93:75:f4:d9:9e:24:61:90:15:74:f9:d5:fa:07:4b:13:
         35:aa:7b:ab:03:cc:e2:8b:a5:79:31:80:57:b7:20:45:e4:e1:
         3b:b0:d3:57:90:00:42:44:b2:17:5c:ac:8a:7e:66:a5:c6:b7:
         69:03:42:b6:08:c9:70:76:41:e8:3c:64:cf:e5:75:aa:e6:41:
         9a:a6:5b:69:54:22:79:92:45:1d:b4:7c:bd:8c:18:b6:d0:3b:
         17:4f:99:c8:84:fe:75:b3:4c:48:c4:ea:67:b9:df:41:f7:fa:
         a4:be:71:36:ad:09:b4:2d:d8:ae:02:6a:db:d2:2b:28:07:9f:
         08:41:28:ea:54:c9:92:7c:a9:af:db:40:19:88:6d:e0:6f:86:
         c4:ec:8c:3c:fd:88:34:d6:48:6a:5d:56:dd:dc:c3:13:1d:8d:
         d1:4b:26:37:6a:4a:0e:e3:3e:4b:ab:c1:09:68:77:6a:5b:6e:
         74:17:b7:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsMUajszybbkhR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YjRiYmVkMzItOTIxMC00MjI0LThhMTktZTMxMDkyMmE0ZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGaKkOxyXvOVXfpgxCjG8nOFG6CbJZq811m
7sFHDDyapkeGdh4bMcGp4BhybYLCdJ2wQGa4ZGA4m/XZODIzwc3APpZm8nTFoj0X
r1kcMGnUPR6VuQXIHcdDGejX9DAYl2Mhw0miDaEzfTIJmLFobny4vK5rYw7QvaDB
aW1Lsger7J8xo0XTVbqVgQ6S8pn7MPzs0ebZ86Ul1NJv87X1laHuUJtUegpSjqnE
hUWL/b/3KJlQJPUnqnmvHjCMnjTQFOx0vYvgGYK0akvqe/jAdBF5r5QN97UU9+S8
m8yHfuqKxdSAKnJjIn2fLuu9t72vpIckiVLMccaYUgFZhKg8pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvGy+i1av3TqoR5O8a9Vwg4UOC8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODhjMmEyNmUtZGYwMy0z
MThiLWIyMjYtM2UyOTA1ZmZiNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+wMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNsVJXvrGj/2CvW2FKTJUqd5gcWElVn3+SZWNeZ788tk1pIlhUZfmSN
MNhEIJa4fD73HUvJuGcFdc2KCIipw3c8aYWQMjAnTQhyk3X02Z4kYZAVdPnV+gdL
EzWqe6sDzOKLpXkxgFe3IEXk4Tuw01eQAEJEshdcrIp+ZqXGt2kDQrYIyXB2Qeg8
ZM/ldarmQZqmW2lUInmSRR20fL2MGLbQOxdPmciE/nWzTEjE6me530H3+qS+cTat
CbQt2K4CatvSKygHnwhBKOpUyZJ8qa/bQBmIbeBvhsTsjDz9iDTWSGpdVt3cwxMd
jdFLJjdqSg7jPkurwQlod2pbbnQXt+E=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org