Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0f4db85-60f6-3904-8b67-63595718c348.roa
File:                     b0f4db85-60f6-3904-8b67-63595718c348.roa (raw, json)
Hash identifier:          dtgkQssRPdL7sIQnzq/+tMrmYDF4TE/EKNcXH/QnQYQ=
Subject key identifier:   68:D0:AF:65:22:05:CF:5E:4E:F7:5A:75:B4:0E:FC:2C:AC:16:88:1A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12F76487A97F12D9334160
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0f4db85-60f6-3904-8b67-63595718c348.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     21552
IP address blocks:        209.226.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:f7:64:87:a9:7f:12:d9:33:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=eadf989e-9abf-4a18-8559-4263b276fea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:9b:68:f2:fd:fb:3a:6d:bd:25:4b:05:fb:
                    90:37:6d:38:63:54:e0:1a:84:95:ac:80:46:27:24:
                    ab:9d:fc:c3:3a:5b:12:b9:9a:f4:1d:cd:e1:ba:9e:
                    ab:af:a5:3f:dd:e8:7a:87:83:3a:5a:6d:b2:09:7d:
                    15:f5:a7:62:80:cc:22:8c:c4:5d:69:db:be:85:76:
                    b6:f8:c2:3d:45:90:ba:da:ad:58:49:5d:45:2c:e2:
                    16:9d:fe:e9:54:07:06:ee:75:6f:7a:57:65:79:d2:
                    ed:db:a9:7c:a6:a0:1a:eb:a6:bd:d6:98:db:80:69:
                    68:b6:d6:23:54:e3:a3:09:9c:8b:e3:60:cf:4c:9f:
                    6d:e7:93:91:10:45:b2:50:89:39:83:55:7a:82:8e:
                    54:30:7f:01:41:a8:40:7d:47:e7:47:55:fa:79:d7:
                    74:cf:6a:f5:2c:16:21:9b:fe:47:39:9c:3d:c0:4d:
                    3b:e6:e5:f3:97:00:22:b7:42:69:e1:40:89:52:20:
                    be:7e:64:a9:d9:a6:b1:c3:2d:b4:4c:f9:06:b5:79:
                    c5:c7:18:e3:cd:cb:04:47:ca:84:2f:d9:f8:5e:83:
                    41:e5:e7:09:8b:9d:fc:6b:7b:33:41:e8:56:eb:55:
                    43:1e:5a:fd:06:06:d4:c6:4d:ee:cf:71:61:69:29:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:AF:65:22:05:CF:5E:4E:F7:5A:75:B4:0E:FC:2C:AC:16:88:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0f4db85-60f6-3904-8b67-63595718c348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:e6:93:fd:30:ab:5b:27:e8:8c:5f:35:1a:f3:0e:7c:6e:
         df:a8:95:66:ae:87:fa:fc:e4:8d:bb:97:1a:d1:e9:96:90:9b:
         27:15:c5:49:d7:1e:53:76:b0:44:02:d2:b5:13:dd:6d:62:64:
         b7:54:ba:fa:77:47:fa:e1:10:37:76:48:1c:c9:34:18:7c:f3:
         8a:89:36:72:3f:82:4b:c7:99:76:99:a3:e1:7c:1d:ad:d3:58:
         47:d6:79:16:2e:db:58:05:fc:6f:0d:b3:0a:b0:0f:c5:de:39:
         fc:02:ab:2e:29:e4:a0:35:03:70:c9:51:82:75:56:cb:c5:39:
         6c:dc:72:1f:42:38:a7:7d:26:ab:d5:36:15:44:85:e9:eb:be:
         7e:16:05:7f:a9:6e:5d:55:7f:29:1f:43:ab:28:cc:4e:2b:42:
         5b:32:cf:aa:48:3d:66:74:11:d7:b9:d3:63:53:0e:65:6a:d1:
         be:49:d2:3b:be:b2:7a:44:18:f1:31:8f:e2:f4:1e:73:18:90:
         a9:77:8d:17:42:36:5a:75:cf:6d:fa:a4:24:6d:31:b2:27:f4:
         bf:ca:b7:20:16:ba:5d:94:d1:bf:fa:6e:75:6b:62:0b:a8:66:
         1b:fc:fc:00:69:77:02:87:d5:eb:6a:b6:9e:45:62:3b:45:86:
         49:ef:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 04:07:35 2023 by rpki-client on console-ams.rpki-client.org