Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a0970b7-3e0b-341b-8990-dd636b032be6.roa
File:                     9a0970b7-3e0b-341b-8990-dd636b032be6.roa (raw, json)
Hash identifier:          vh4nmvYPBZpT0BjGNrpXFX03/FaFhdEkyxD/iMaCB7Y=
Subject key identifier:   7C:A6:8E:63:C6:28:94:65:0C:4E:7F:E8:E0:12:F7:57:20:90:0D:22
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5C57EC39F4A07E0093F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a0970b7-3e0b-341b-8990-dd636b032be6.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     3848
IP address blocks:        209.226.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:c5:7e:c3:9f:4a:07:e0:09:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=b1e1d15b-a038-4df8-8697-4c73b3753926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:db:a6:9f:06:36:ab:04:52:90:7d:95:5a:
                    46:31:8a:79:5e:84:17:a0:63:70:1d:55:62:5b:80:
                    fa:64:50:1c:20:1e:9b:11:26:48:69:d6:58:61:7a:
                    8a:f0:92:16:21:8b:b2:b6:5e:ef:36:f7:2d:78:a8:
                    ba:20:91:36:bc:0f:c1:dc:f6:8e:8f:45:51:a1:8c:
                    83:d9:59:94:18:23:02:f2:30:72:b5:c8:50:74:df:
                    d2:27:75:79:a5:a6:9c:26:bf:13:c7:c8:de:c3:26:
                    7b:92:ae:f8:05:68:f6:54:6c:23:c0:b6:56:53:bf:
                    84:c5:75:0f:35:7c:50:c7:21:c9:8a:19:eb:3c:11:
                    e8:95:37:cb:d6:99:a3:ac:17:16:e3:fd:96:4b:e3:
                    dd:8d:e3:96:2f:e4:d8:5e:2a:75:bf:f5:84:64:e1:
                    61:59:78:69:48:93:07:e3:29:a7:ad:ef:7f:3b:0d:
                    5d:a0:2b:d5:74:20:54:af:66:e4:8f:75:83:b5:e0:
                    a1:87:af:58:64:31:2e:3a:c1:77:29:7d:80:06:b6:
                    25:d2:bb:f1:e4:42:21:dd:a4:c0:bf:e7:ac:62:4a:
                    a1:ad:d9:b7:49:67:1c:50:da:b7:ea:4d:98:12:81:
                    ad:11:a6:4b:06:cd:c8:bb:b8:86:cc:f4:44:67:c0:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:8E:63:C6:28:94:65:0C:4E:7F:E8:E0:12:F7:57:20:90:0D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a0970b7-3e0b-341b-8990-dd636b032be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:17:40:48:ea:8d:5e:13:31:36:06:d6:4a:88:74:40:43:17:
         4a:06:1f:6f:da:9c:4d:66:1e:ac:ab:22:3c:df:e6:6a:43:50:
         57:e4:89:04:05:c1:90:37:cb:2f:ab:cd:98:22:fc:0d:b5:95:
         35:d9:b6:cd:5f:84:bd:02:c8:41:8e:a7:bc:18:80:8f:3e:ac:
         52:54:df:e9:b2:15:8b:50:8e:23:ef:fc:f9:08:c5:64:4e:8f:
         dc:62:69:31:d3:72:32:f2:00:56:3d:9f:a5:cc:db:43:3b:00:
         b2:d2:32:06:66:0d:78:bc:7e:bb:2a:f3:05:78:18:88:7c:4b:
         3c:87:88:72:db:92:ad:a2:38:b9:48:34:dd:41:f9:3b:53:5b:
         ce:3b:2f:8c:95:42:44:ae:2a:f6:bc:95:ab:85:06:80:47:4e:
         03:9b:70:27:27:79:f0:b8:6a:f8:bc:1b:c1:65:1d:a5:6b:05:
         6c:58:88:ed:0e:b2:33:65:e6:22:5b:f1:4c:02:a5:1a:4a:1e:
         ad:ee:49:77:15:15:88:64:5a:58:d3:75:19:a7:c0:56:18:94:
         16:51:74:58:bc:a2:fd:a7:a4:73:21:27:9d:a0:df:ca:67:f7:
         7d:b2:c6:dd:d9:d8:83:8d:8f:53:76:4c:df:0b:db:4e:b3:f2:
         4a:84:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org