Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c265dbe2-fb7c-3d87-89c3-a5212031e75a.roa
File:                     c265dbe2-fb7c-3d87-89c3-a5212031e75a.roa (raw, json)
Hash identifier:          lRud/iIYkrxT2z2/Pye02Ke4aLmYnja9zLZQXHppWFI=
Subject key identifier:   E9:EE:0E:D2:C1:D5:70:2F:BF:DE:92:72:96:18:82:B6:D3:DA:CD:B2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449316B4228DED14AAA52EF1C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c265dbe2-fb7c-3d87-89c3-a5212031e75a.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:b4:22:8d:ed:14:aa:a5:2e:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=f832dc43-7da3-4122-a418-5de74eef5799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:21:48:4d:c8:8f:3e:ef:c3:12:6f:9d:53:
                    1e:36:d9:22:29:3d:05:67:03:d8:52:7a:3e:8e:6c:
                    26:39:53:c4:d6:95:91:ce:92:63:59:88:39:14:be:
                    0c:a2:63:85:f9:20:6c:f6:1e:f3:21:7b:9d:24:12:
                    6f:3a:db:35:fe:04:06:31:42:ca:f6:d6:b8:b5:81:
                    ee:be:a7:c7:b1:f9:b9:a9:e9:51:c8:b8:e0:ee:18:
                    b7:81:3b:e0:90:dd:b5:73:72:3d:5c:07:41:a3:ec:
                    80:f8:53:84:d9:3e:0c:e0:4d:10:36:16:90:d2:0a:
                    88:f9:64:f7:44:dc:9f:a0:8a:21:f9:83:c3:9d:35:
                    ee:34:5e:ab:08:56:2e:1e:11:f3:ed:bf:37:8d:d4:
                    19:a2:c4:69:7f:a2:af:30:e6:e4:72:5f:43:2d:11:
                    25:f0:ad:57:67:bb:8f:29:0b:d3:97:95:50:0f:0b:
                    d2:f1:9f:ca:5e:2a:d6:82:e4:4b:15:6a:0f:97:fc:
                    1d:f7:f5:27:72:ff:bd:ea:1f:71:24:7e:a4:25:f3:
                    51:3e:41:40:0f:d6:85:08:1c:7d:82:8b:72:4a:6d:
                    3b:93:52:68:e9:64:02:19:b5:14:7e:05:24:76:58:
                    d1:c5:83:9b:ab:5a:14:fb:39:67:92:69:6d:85:06:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:0E:D2:C1:D5:70:2F:BF:DE:92:72:96:18:82:B6:D3:DA:CD:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c265dbe2-fb7c-3d87-89c3-a5212031e75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:7e:f7:66:9f:23:ef:bd:0f:a9:e7:e6:53:82:fb:f3:9b:
         8c:ad:7d:8c:fe:6f:fc:6a:8b:70:90:2a:8e:9a:ea:15:d4:2c:
         30:c6:84:b2:c1:af:4b:cb:5a:7c:9e:d5:33:9a:a3:20:82:a2:
         1e:2c:db:21:b7:95:3f:4e:e3:2b:b5:5b:78:76:ba:2e:38:cc:
         a1:3e:55:67:d2:54:e2:cf:81:24:7c:44:46:46:01:9f:d8:af:
         ec:28:80:d2:05:30:fd:fc:78:bf:11:cf:0e:1c:9c:f2:38:9b:
         11:09:59:02:31:ac:81:60:5f:de:79:32:2c:8f:d4:ee:2c:89:
         38:53:05:a0:59:47:46:11:dd:36:d1:c9:1a:a7:b3:ec:4f:b0:
         49:88:be:43:35:4f:ec:e4:13:ea:4f:fa:4d:d8:8b:a3:c4:86:
         a3:e0:6f:6e:5b:70:69:e0:4e:33:9e:62:ef:5a:8f:e6:07:fa:
         e1:4a:d9:ef:9d:0c:e6:ad:94:17:19:db:0e:e2:94:7e:8e:8e:
         d6:98:a6:db:fa:29:35:4f:10:0c:2f:c7:67:d9:b5:28:bb:c5:
         9e:3f:09:2b:ad:98:ac:2e:dd:28:ca:7e:22:d3:fe:98:d9:fe:
         6d:15:80:7b:99:25:1f:45:59:5a:3a:9c:a8:db:a5:67:30:78:
         d4:8b:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org