Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e302101-105d-3e12-a83f-b8524d644f92.roa
File:                     8e302101-105d-3e12-a83f-b8524d644f92.roa (raw, json)
Hash identifier:          vLotr0l4FBT3cSuoDLmb/XpYthJypGwTz3U+JgQbgEk=
Subject key identifier:   A3:C1:96:BD:60:50:B9:8A:7C:2B:73:6D:43:50:EB:53:D0:CF:F9:7D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB03A11D8CD2C452B1D8A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e302101-105d-3e12-a83f-b8524d644f92.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     397168
IP address blocks:        206.47.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:3a:11:d8:cd:2c:45:2b:1d:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=5cbb888f-1c4d-415a-8411-d1bb093b41df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:a8:f4:ab:0a:6e:90:71:d6:81:72:52:a7:
                    e6:1a:a2:1c:05:a6:54:b0:4a:a5:c6:8c:20:8e:16:
                    73:c2:b7:8f:cf:cc:5e:fa:91:b6:26:9b:49:26:46:
                    e1:1a:26:44:ce:05:d2:67:c1:cf:b9:fb:1e:73:b0:
                    08:94:c7:77:0a:b8:c3:d9:10:e3:ea:7c:1c:42:04:
                    b4:9e:e1:17:a4:16:93:bd:17:a4:b5:fe:2f:d0:c9:
                    c5:e7:41:dc:16:56:b5:57:c1:68:50:e8:29:8a:2e:
                    43:ec:7e:38:1f:9d:87:0b:34:d1:86:a6:2c:1d:aa:
                    cf:24:4f:7b:13:75:ee:8e:16:2d:c3:57:d8:93:cd:
                    f4:72:d7:d2:0c:21:1a:34:1d:51:ba:e6:9a:b2:bd:
                    6b:2f:e8:aa:f5:2d:f5:35:69:e5:77:3a:6d:06:4a:
                    fe:1f:23:37:2c:99:6d:8c:cc:7b:6d:81:50:ec:89:
                    ac:2d:99:20:cd:d1:ab:da:bb:8f:7f:2c:80:49:e2:
                    94:0c:e9:d3:97:3b:9a:8a:ee:67:5e:00:3b:32:21:
                    79:20:b2:34:4a:88:27:82:41:eb:70:c7:f9:e8:41:
                    42:bd:96:af:44:24:31:bd:c5:2f:d3:4e:94:b1:90:
                    a2:6d:ef:8c:55:26:9a:a3:1d:9d:86:fd:5a:8e:68:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:96:BD:60:50:B9:8A:7C:2B:73:6D:43:50:EB:53:D0:CF:F9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e302101-105d-3e12-a83f-b8524d644f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c2:77:43:5d:92:c5:8b:1f:11:40:3d:f4:9d:3a:3b:54:d7:
         d7:5c:aa:f8:32:2c:cd:c8:4c:06:dc:5b:e0:6c:b8:c3:3d:11:
         12:e0:5b:35:ad:87:24:b1:80:c6:50:22:a3:1c:fe:96:dc:05:
         b8:29:f9:10:7d:82:f9:c9:ed:74:a2:a9:10:c1:f7:0c:ea:28:
         62:ea:4d:1d:e8:01:35:55:fd:05:65:f4:a4:85:70:a6:a4:22:
         98:98:34:c7:23:e5:34:6a:2e:08:73:7c:dc:95:96:c6:cb:31:
         21:4a:86:86:46:c1:d3:7b:8d:fd:26:ec:fb:28:fe:f7:15:f4:
         6c:28:d6:bd:64:aa:ec:23:1f:9e:d0:b2:2c:71:e0:b5:e7:44:
         fd:95:8a:9e:00:93:13:d9:a6:4e:1d:6a:83:5b:ce:71:44:61:
         2b:13:a6:2b:89:72:8c:ce:fa:d2:f4:92:ab:c1:70:8b:52:64:
         d0:fc:22:e0:08:38:7b:e6:a0:94:4d:51:4d:39:1a:dc:4b:cc:
         c7:7f:32:c5:89:d7:14:15:d2:4f:a6:87:6c:6f:d2:50:0d:74:
         8d:d3:c8:19:88:7a:2b:25:6a:e8:74:f8:fe:a9:ac:a2:9e:c5:
         b3:a0:1d:ce:9b:5f:38:fa:f3:63:fe:93:3a:6d:5a:27:3f:ce:
         b2:9c:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org