Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad02b7d9-579d-30fa-ba3a-e78444aecbb2.roa
File:                     ad02b7d9-579d-30fa-ba3a-e78444aecbb2.roa (raw, json)
Hash identifier:          dGdWDjGuDNxQW+YiOKOnbPmHHqaL1O3ShIw5LYb7irM=
Subject key identifier:   88:A2:90:24:E3:E2:6A:A5:67:F4:BA:53:0A:25:C3:33:D4:03:40:43
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF763D8654011916AE71C6C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad02b7d9-579d-30fa-ba3a-e78444aecbb2.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     15321
IP address blocks:        216.209.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:3d:86:54:01:19:16:ae:71:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=a468c731-e256-42ad-ae43-0457ec96a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:54:61:b4:b6:7d:36:a9:d6:28:df:2e:85:
                    05:00:eb:a6:9f:0a:76:0e:2b:b5:3c:79:09:7c:53:
                    81:bd:b4:63:d7:b2:b1:08:55:fb:3a:f3:80:74:64:
                    ac:49:32:fc:bb:14:3a:0e:bd:7c:d5:60:f9:1e:35:
                    58:29:9c:ea:2b:c8:23:81:fa:1b:c3:fc:85:d2:42:
                    9a:15:c0:e5:dc:c7:64:c7:5b:ff:ab:9c:d9:0a:bf:
                    09:9c:bd:c5:1a:4f:58:fa:35:e5:b2:92:cc:b0:32:
                    d8:af:9b:b5:0e:02:c2:6b:d9:d3:e5:7c:1b:41:ea:
                    86:8b:83:75:d6:6c:e8:e8:31:5b:54:a5:7e:f3:df:
                    e3:a3:a4:3c:4b:10:a4:8a:9d:a8:87:84:ea:41:dc:
                    ac:ee:f0:a1:d8:8d:c5:ab:6a:59:4d:1f:e6:e5:ac:
                    a5:4a:7a:fc:2e:f5:d8:53:cc:58:78:17:f9:b3:0c:
                    89:2c:ed:a3:18:75:9f:7a:83:e0:96:40:c6:7e:df:
                    a3:a1:a7:c6:f3:1d:ce:fe:bc:59:3a:d2:1f:2a:f4:
                    e7:8f:39:55:c7:a3:e4:a4:d5:ac:b7:04:e1:4f:37:
                    54:d1:f2:d5:fc:ff:61:00:cc:7a:33:96:7a:c8:f8:
                    29:45:b1:0f:ee:05:e2:0f:45:cb:32:60:48:f1:7b:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:90:24:E3:E2:6A:A5:67:F4:BA:53:0A:25:C3:33:D4:03:40:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad02b7d9-579d-30fa-ba3a-e78444aecbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:29:6e:84:82:47:ef:92:0e:74:ff:d5:5d:d5:50:9b:b1:0b:
         ba:35:b9:75:cd:96:bd:b1:2b:47:7e:76:ac:48:12:fe:c3:1a:
         4e:91:2f:79:9f:da:71:21:fb:79:56:1a:f6:62:b4:a5:52:0d:
         17:67:0c:9e:4e:a1:2b:71:0b:ef:e2:b1:b1:37:b7:84:e4:ff:
         31:fe:bc:46:9f:dc:14:8f:66:18:38:b5:ef:04:6d:0a:97:6d:
         b0:cb:39:98:4c:78:a6:39:a7:09:03:92:fd:19:f7:57:ac:9d:
         98:08:cf:c1:3e:84:c3:b1:79:c2:e7:38:50:21:7e:36:7c:85:
         f5:e6:0a:7f:0c:1b:ff:62:ca:86:4c:f6:4f:ff:d4:fb:a0:49:
         79:fc:b3:c1:d6:d9:22:9e:10:24:2e:06:94:bd:33:37:2d:7e:
         46:d1:e0:52:1d:f4:90:1d:53:c9:90:68:6d:64:37:94:ac:f5:
         4f:8e:80:02:45:75:5c:23:58:45:70:ec:c4:cb:67:d6:44:cd:
         45:39:ea:77:af:31:16:78:22:b9:d2:67:85:77:eb:22:3d:59:
         21:ff:fb:d4:af:e6:80:a2:92:d4:b3:d3:43:95:f1:72:47:4e:
         fa:d0:80:da:8c:1a:bc:0b:58:bc:3e:67:cf:12:2c:be:32:5f:
         bf:fa:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org