Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dda26b7-4f3b-3885-9646-884e1eaa3ace.roa
File:                     9dda26b7-4f3b-3885-9646-884e1eaa3ace.roa (raw, json)
Hash identifier:          IM4SWlbo+14AN/0h+kmzH/gibrECSXiDa2hI04h80ew=
Subject key identifier:   6C:A1:76:7D:9D:F4:BF:B0:E6:6A:C0:5B:70:AD:39:D3:8D:A8:07:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7634481566C1D358A52A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dda26b7-4f3b-3885-9646-884e1eaa3ace.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        216.208.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:34:48:15:66:c1:d3:58:a5:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=9f127406-f614-4566-806b-1f0fc635df33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:a6:41:df:41:be:e6:4b:5c:2d:3f:8e:fb:
                    2c:a4:65:05:13:33:3d:45:24:82:18:78:d3:0e:d8:
                    bb:87:c5:20:03:14:6b:ed:f1:40:7e:53:1d:0c:4d:
                    e8:0d:c0:c0:a9:13:64:2a:77:27:78:c6:fe:7c:06:
                    0c:57:a5:be:e8:09:21:e0:9a:8a:9b:23:d6:2b:81:
                    5a:55:66:04:da:28:eb:38:ba:4d:d9:da:bd:3b:f2:
                    39:50:fb:39:76:2f:86:83:dd:6f:5c:74:11:24:09:
                    7a:da:6f:3b:58:1d:e0:1a:18:e6:b5:3c:6e:a1:c7:
                    03:8b:e7:b7:98:8e:0e:83:74:61:f6:88:f7:17:76:
                    47:76:55:50:ce:8b:d5:00:fc:7f:bc:70:5f:08:1e:
                    c1:58:85:b8:63:f6:c0:db:e6:78:2b:72:bb:9e:ea:
                    c1:9d:6b:30:05:60:3d:1d:e3:ea:fa:fc:73:5d:6a:
                    5e:fb:ac:5a:53:44:38:3e:8c:51:79:ee:33:e9:b2:
                    20:cf:e1:a4:38:73:89:c6:45:64:c4:e7:a0:cf:6a:
                    83:bc:50:8a:21:f4:0d:8a:18:d2:37:01:0c:c8:79:
                    9e:78:02:af:4a:3e:42:25:89:6f:4b:b1:f3:53:95:
                    bc:08:22:eb:25:43:8d:56:7a:7f:08:86:3b:fd:01:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:76:7D:9D:F4:BF:B0:E6:6A:C0:5B:70:AD:39:D3:8D:A8:07:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dda26b7-4f3b-3885-9646-884e1eaa3ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:ea:57:d7:c3:b0:0b:1c:d2:44:fc:68:48:34:75:3b:9a:
         85:b1:83:f8:9a:e2:f4:25:ae:cc:23:8f:3d:64:81:5e:10:44:
         20:26:e1:ab:1c:48:59:54:7c:b1:de:1f:81:fc:7e:f9:8a:23:
         6c:29:ee:46:02:c3:44:22:fd:b3:e5:1a:3f:85:73:44:8e:ca:
         4b:9d:5d:0a:3c:95:fb:76:16:38:bf:e0:ac:15:15:c5:88:91:
         d3:8d:33:86:06:85:6a:4f:00:90:bb:1f:00:72:6f:64:30:ab:
         48:2d:03:3a:20:55:85:7e:cc:ce:1a:80:2b:e4:8a:f2:ff:d7:
         aa:45:e8:3c:11:63:79:1e:eb:f1:3f:58:99:63:9f:2c:3a:69:
         c2:9c:b8:a7:82:45:2f:ff:46:81:8b:d2:df:64:30:14:28:b0:
         8d:ec:49:5f:66:7e:05:7f:0c:1a:6a:08:1c:10:ec:45:ce:61:
         27:5d:2f:55:d7:77:ef:39:ab:27:c3:36:ed:dd:8a:ec:d0:be:
         cb:c9:b2:1b:e9:df:1b:82:c2:29:1e:ff:78:5f:8c:da:15:3e:
         19:b3:13:0e:f4:92:d2:2e:7d:96:81:9a:ef:ee:49:55:c5:65:
         42:49:03:98:fb:48:a0:35:d1:30:48:d0:2b:b2:b5:31:fb:b1:
         e1:16:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org