Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af69f9e2-f635-38b4-995e-bd4d4076ac26.roa
File:                     af69f9e2-f635-38b4-995e-bd4d4076ac26.roa (raw, json)
Hash identifier:          Ec6X9htGmNKp3N65CQBZJqlSuhBHgp2bCsqXEy9FpbA=
Subject key identifier:   3E:CA:EA:E3:75:04:E9:0A:AF:3A:E6:26:12:F9:AB:41:73:64:DB:A8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931592728F2E7E750E51DA38
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af69f9e2-f635-38b4-995e-bd4d4076ac26.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     18814
IP address blocks:        207.34.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:92:72:8f:2e:7e:75:0e:51:da:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=67914217-c0a2-4801-860d-d38b24f57e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:f6:74:2a:33:c7:4f:ff:67:6c:a2:54:c3:
                    d2:a3:9b:05:10:8f:2c:34:44:47:a3:54:e9:f8:7a:
                    f4:9f:08:97:c7:3c:d8:00:64:d7:52:a5:f7:bf:5c:
                    06:7c:5f:02:81:94:f6:71:09:b4:b7:b1:df:95:26:
                    d1:4d:e4:41:e6:82:8f:b4:5e:d7:5b:17:40:75:0e:
                    49:20:60:ab:8a:70:42:8c:e9:37:c0:83:2c:0b:ec:
                    f8:9c:bf:78:a6:be:f8:6b:0c:de:43:52:45:3d:0b:
                    d6:e4:d0:c5:fb:5d:c6:1d:2d:f1:a1:96:06:94:0a:
                    3e:c8:10:a6:e6:84:cd:7a:9c:8a:a1:6d:25:74:28:
                    3e:b1:fc:85:d6:b1:04:ef:ea:e5:4d:89:fc:8d:85:
                    ed:9e:1d:3e:40:68:e5:08:6f:1f:e1:03:e2:cf:a4:
                    61:0f:20:92:d5:c9:42:b6:4d:5c:39:4f:ec:7b:ac:
                    f0:02:61:cf:42:93:48:5f:47:86:32:ed:dd:51:46:
                    36:a6:63:23:19:5b:6a:8d:4b:dd:99:da:25:aa:cc:
                    0b:23:52:c9:27:49:f0:1a:cc:a0:cc:57:71:ea:32:
                    19:f1:a2:05:54:3f:a4:64:10:0b:88:44:d5:96:4f:
                    b7:2c:65:17:0c:36:68:28:47:50:e9:71:29:2d:9e:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CA:EA:E3:75:04:E9:0A:AF:3A:E6:26:12:F9:AB:41:73:64:DB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af69f9e2-f635-38b4-995e-bd4d4076ac26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:b9:18:83:a5:ed:a3:d7:e3:99:3e:b8:cf:55:e4:b9:c3:
         00:08:97:f5:6c:8b:97:80:26:df:42:e3:21:ee:ea:79:ab:90:
         0b:d7:95:84:e2:d1:0d:d3:b9:ac:73:7a:f0:2c:66:2c:76:89:
         fb:91:27:92:e2:56:8c:73:15:3d:b6:be:ab:f1:2f:60:8a:7c:
         0f:e2:2a:13:67:c2:b8:62:11:df:20:c9:94:a4:70:f6:35:a8:
         48:90:03:71:5c:24:0b:17:77:06:04:d9:08:70:df:aa:11:9d:
         79:31:9b:ae:96:82:4f:0f:73:1b:a2:a2:ee:26:ce:88:1f:e9:
         fa:2a:e5:e8:95:61:22:fc:ef:b1:62:a0:89:6e:11:4d:6a:dd:
         ed:44:9b:49:5d:2b:b2:de:91:3c:8e:67:c6:1f:79:8a:6e:d0:
         08:9a:40:79:61:3b:b2:4c:a9:a9:26:e9:eb:0a:f5:37:b1:da:
         9e:59:74:45:6f:6a:89:30:f0:ee:98:9e:c3:a5:e0:4b:d5:84:
         04:e2:84:45:7c:2c:ed:13:3f:0a:bf:1a:cb:24:5d:a8:f7:ce:
         44:48:59:61:d9:56:75:b2:d1:e0:6c:bc:eb:f4:5d:95:e3:fb:
         f2:95:7e:89:58:49:24:a6:5e:1e:8a:09:c2:0b:e5:75:30:b1:
         d1:01:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org