Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2999185-67fb-31da-a2ea-6d46feb0dfb3.roa
File:                     a2999185-67fb-31da-a2ea-6d46feb0dfb3.roa (raw, json)
Hash identifier:          coJhqN17aXQZAOACFCDyKwTOjBmtxR5peiyYIpmGSF4=
Subject key identifier:   A8:C3:EF:9D:7C:86:51:DD:34:6D:E4:F8:64:2E:8D:E9:B0:B5:B7:81
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE587977EFD779ED4965F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2999185-67fb-31da-a2ea-6d46feb0dfb3.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     17170
IP address blocks:        207.179.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:87:97:7e:fd:77:9e:d4:96:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=1befd62f-613b-45bf-8009-e6037d65f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:63:59:3d:12:51:c8:0e:0b:ed:46:85:90:
                    57:d3:94:3c:56:22:0c:49:16:aa:e2:62:d8:99:a2:
                    f4:fc:a7:a3:e5:0c:fb:c4:44:d4:32:f2:0c:44:84:
                    49:8f:7a:44:bc:9c:66:f5:66:64:27:1e:93:44:52:
                    d7:ef:bf:04:16:e7:e0:58:e2:30:20:17:8f:e9:b4:
                    17:ba:4f:02:d9:e6:23:43:29:23:e0:16:f7:99:1f:
                    99:71:24:8c:08:9d:7d:e5:02:a6:22:eb:1a:14:19:
                    c3:f5:4a:18:c7:d3:fc:27:f3:68:4a:6d:c3:88:d8:
                    1e:d4:a4:07:40:85:31:1f:cc:d6:d5:a9:8c:3b:a9:
                    b1:1c:8c:e2:22:6f:f8:ee:b1:82:cc:d9:0f:01:07:
                    8e:91:1f:7b:27:21:55:32:0b:ad:6c:45:6b:83:e1:
                    6e:ba:45:82:bc:64:21:29:eb:67:88:f5:88:19:76:
                    c3:72:88:6e:cf:b0:12:a9:15:e7:bb:a8:be:3d:d3:
                    bf:af:d5:9b:03:be:ab:1f:28:0d:43:e6:3c:17:50:
                    0e:40:f8:86:eb:8e:8b:83:22:7b:03:f3:ea:af:08:
                    13:c9:05:60:62:f0:6d:38:90:6c:04:34:95:a7:db:
                    6d:ed:ff:c1:c2:e9:01:7b:39:5e:71:53:ff:34:08:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C3:EF:9D:7C:86:51:DD:34:6D:E4:F8:64:2E:8D:E9:B0:B5:B7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2999185-67fb-31da-a2ea-6d46feb0dfb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:37:df:ee:ac:0b:a9:79:96:20:fb:7a:f5:df:38:78:2a:60:
         5e:f9:05:a7:7e:e2:60:0c:46:57:94:9a:a3:6e:4e:07:70:d0:
         5f:b3:b4:f9:5a:73:1c:d0:81:15:04:e0:b0:ab:09:41:29:e1:
         92:64:d7:89:96:13:34:79:8c:95:28:82:95:f0:fe:74:e6:74:
         f8:7c:48:1f:03:90:d3:ac:ba:df:9f:56:e9:1c:9b:62:f2:34:
         6a:0f:7b:ab:50:1f:87:f9:6c:95:f2:2a:bb:c7:75:2b:dc:80:
         2b:56:f8:70:68:57:60:d2:64:2d:91:c1:a8:83:6e:33:47:21:
         90:a6:02:54:fb:11:cb:61:e6:a1:aa:61:34:a5:d3:59:f3:dc:
         1e:45:90:68:62:9a:cd:c3:d1:59:ac:03:8b:6b:b1:c2:21:f5:
         41:0d:69:75:f5:8b:f7:59:14:66:7e:e5:52:0d:b0:74:bf:f6:
         b1:e2:40:f6:e9:d4:31:fe:2a:dd:a6:15:47:aa:80:11:33:ca:
         55:6d:6b:68:e4:c1:40:c9:19:af:71:d1:69:72:e4:2a:21:ff:
         c7:d0:5c:13:e2:a0:b7:53:27:1f:d3:e6:40:33:72:fe:b4:88:
         07:f8:4b:42:1d:06:c0:32:3e:a1:93:5f:66:29:bd:6c:9f:28:
         ce:48:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org