Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91ef05ab-119c-38ba-a396-3b0fbe463f7f.roa
File:                     91ef05ab-119c-38ba-a396-3b0fbe463f7f.roa (raw, json)
Hash identifier:          4jQt/a5lvpro3suCuyr1ViDny8dUPwvulZRyRM58u0k=
Subject key identifier:   CD:36:3D:31:EE:DC:89:16:6E:5E:DD:AE:2B:0F:C9:5F:BC:4B:6F:FE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB02B3BDFA764622AEDB400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91ef05ab-119c-38ba-a396-3b0fbe463f7f.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     397168
IP address blocks:        206.47.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:2b:3b:df:a7:64:62:2a:ed:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=9a9ae4ed-a318-40bf-99ac-fe51a31b9838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:a9:a3:33:19:ec:07:93:d4:46:ad:c7:4e:
                    62:86:fb:72:00:cc:66:d8:45:cc:45:e1:f2:97:43:
                    e1:97:1f:30:a3:8f:9b:ce:57:32:b7:27:9b:ab:f9:
                    2f:b5:fe:35:a5:46:3d:d9:f3:85:52:2f:a3:d6:8b:
                    90:d4:73:a1:10:44:e1:8c:5f:f4:b3:82:c8:f0:42:
                    35:6b:9b:f1:e1:70:cd:92:0f:07:01:5d:86:bd:b0:
                    23:6a:c7:04:0c:5c:e3:c4:19:f9:72:5d:71:0e:fa:
                    04:bb:d6:68:13:51:48:b5:16:c8:bb:54:89:17:f4:
                    1c:56:0a:cc:1a:80:86:62:4e:7c:bb:5e:e7:9c:17:
                    8d:47:c9:09:99:f6:1a:dc:b6:4e:ce:52:35:b5:50:
                    8e:57:ad:93:2a:2c:2a:78:f4:8a:69:84:51:b3:ff:
                    93:72:b4:24:29:6c:33:e2:f4:45:fe:22:f5:6f:8f:
                    48:0c:b6:67:86:60:66:af:c5:8c:cd:ba:ea:46:a3:
                    9c:d3:2a:45:30:3e:7b:d1:fc:00:a5:26:07:57:4f:
                    70:bc:96:7c:28:bb:d2:2d:1d:01:8a:40:5f:04:60:
                    83:77:48:06:e2:f0:07:a2:af:e5:1b:9f:11:ac:50:
                    81:44:b1:5d:fa:cd:28:32:40:b8:ce:e4:03:c0:7c:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:36:3D:31:EE:DC:89:16:6E:5E:DD:AE:2B:0F:C9:5F:BC:4B:6F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91ef05ab-119c-38ba-a396-3b0fbe463f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:cf:e3:8e:0d:4c:3d:54:1f:52:ce:87:b9:2d:4b:02:69:
         4c:2a:72:5a:49:85:6e:07:43:89:53:7a:73:22:7f:a6:4d:d5:
         4d:92:44:86:10:e6:64:05:ab:0a:6a:0c:6b:dd:3f:6d:a6:b7:
         f0:1e:f3:d3:b0:59:c1:20:39:33:0d:80:8c:22:2e:33:31:5e:
         05:64:7f:03:e4:53:0a:10:50:bf:29:47:ca:22:1e:8d:37:3e:
         85:6e:a6:88:41:1d:20:4a:ce:af:40:7c:2f:a9:fa:54:7d:cd:
         9b:77:2d:2a:30:a0:c1:cd:76:6d:f5:97:0a:cb:a8:76:17:38:
         52:03:b2:5e:45:86:21:3f:fb:55:57:ca:71:da:29:dd:c3:65:
         99:f1:5c:f7:11:8f:5d:62:f0:1d:e1:99:59:04:e6:3c:03:e8:
         b2:2b:51:c8:5f:9b:ab:d0:0c:42:ae:a3:80:8a:80:80:53:2e:
         6e:b0:41:e6:65:57:10:de:9d:a3:47:ec:c8:4b:63:9f:1f:c8:
         19:dd:cd:3b:7c:a5:43:25:8f:21:12:d4:dd:7a:f6:4c:1c:b0:
         c0:2a:70:0d:1b:91:5d:dd:9d:8d:ca:99:93:28:42:64:95:ab:
         15:54:d8:b4:47:94:1f:87:a3:ba:a5:08:9d:ae:a9:55:48:08:
         bf:50:9e:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsCs736dkYirttAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
OWE5YWU0ZWQtYTMxOC00MGJmLTk5YWMtZmU1MWEzMWI5ODM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRqpozMZ7AeT1Eatx05ihvtyAMxm2EXMReHy
l0Phlx8wo4+bzlcytyebq/kvtf41pUY92fOFUi+j1ouQ1HOhEEThjF/0s4LI8EI1
a5vx4XDNkg8HAV2GvbAjascEDFzjxBn5cl1xDvoEu9ZoE1FItRbIu1SJF/QcVgrM
GoCGYk58u17nnBeNR8kJmfYa3LZOzlI1tVCOV62TKiwqePSKaYRRs/+TcrQkKWwz
4vRF/iL1b49IDLZnhmBmr8WMzbrqRqOc0ypFMD570fwApSYHV09wvJZ8KLvSLR0B
ikBfBGCDd0gG4vAHoq/lG58RrFCBRLFd+s0oMkC4zuQDwHzWOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM02PTHu3IkWbl7drisPyV+8S2/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTFlZjA1YWItMTE5Yy0z
OGJhLWEzOTYtM2IwZmJlNDYzZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi8fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACD5z+OODUw9VB9Szoe5LUsCaUwqclpJhW4HQ4lTenMif6ZN1U2SRIYQ
5mQFqwpqDGvdP22mt/Ae89OwWcEgOTMNgIwiLjMxXgVkfwPkUwoQUL8pR8oiHo03
PoVupohBHSBKzq9AfC+p+lR9zZt3LSowoMHNdm31lwrLqHYXOFIDsl5FhiE/+1VX
ynHaKd3DZZnxXPcRj11i8B3hmVkE5jwD6LIrUchfm6vQDEKuo4CKgIBTLm6wQeZl
VxDenaNH7MhLY58fyBndzTt8pUMljyES1N169kwcsMAqcA0bkV3dnY3KmZMoQmSV
qxVU2LRHlB+Ho7qlCJ2uqVVICL9Qnto=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org