Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa
File:                     d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa (raw, json)
Hash identifier:          AIEnSmWJ09wsPk0r2oOttUTg1Xd991z8M70NF3xUvaE=
Subject key identifier:   FE:4B:3A:DB:2B:54:74:26:2A:D3:C8:A4:03:27:95:F1:12:27:71:7E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493162C1EDCD26471F825E000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        207.236.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:2c:1e:dc:d2:64:71:f8:25:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=24e19243-f74e-46c4-876c-0fa6cb9e487f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:1a:67:f2:11:24:e3:a2:67:ce:3c:cd:1e:
                    0d:92:18:9d:52:dd:2a:45:15:e7:46:8e:53:9b:40:
                    cf:0a:92:22:f7:ad:6e:34:a1:c2:43:3c:5b:b3:7c:
                    ba:7b:ed:de:a5:d7:31:8e:6e:f9:c3:75:49:40:ea:
                    a4:f7:c8:ff:41:e9:cc:47:72:1e:60:6e:62:5a:2a:
                    5e:51:ea:88:d4:fb:c2:3a:71:47:44:ea:b3:d3:25:
                    09:6a:b7:ab:35:76:d4:b3:bd:ba:39:8d:18:74:0e:
                    bc:e5:90:68:99:9f:06:a4:b9:be:1b:b2:03:7a:c0:
                    57:d3:46:75:b9:23:b1:2e:6f:83:9d:5e:5e:4d:96:
                    04:ba:a6:bb:ce:6f:77:e6:b7:59:10:99:19:76:0e:
                    4d:e8:fc:6a:b8:2f:b4:2d:1d:13:b5:4e:60:eb:8d:
                    a4:57:86:9b:d2:92:eb:4a:3d:cd:3d:07:50:c2:9c:
                    04:43:9a:fe:b0:9a:17:dc:e2:5e:28:47:2e:c1:97:
                    c3:37:70:bd:7d:dd:ac:6e:8c:3a:1c:70:84:09:70:
                    a7:0b:40:56:94:0c:83:f2:fc:7d:e9:45:ec:01:3c:
                    b5:e9:2a:69:23:20:64:85:8a:44:55:17:54:62:b1:
                    c8:9c:e9:39:f6:74:57:8d:1a:7a:69:fa:11:28:5b:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4B:3A:DB:2B:54:74:26:2A:D3:C8:A4:03:27:95:F1:12:27:71:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8a528f0-75e4-359d-9ea9-50b7cad81dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:05:ec:01:60:c5:27:3b:ba:43:2c:3a:4d:7b:dc:c1:6c:
         af:f9:6f:84:d3:27:99:2f:98:26:36:a2:46:47:51:a2:0b:0e:
         59:16:a6:7e:38:c8:dc:9c:f8:d7:89:21:54:19:52:4a:0f:00:
         e9:c0:b1:db:45:49:e3:ee:39:ef:13:fd:08:c0:bd:ab:b3:a3:
         b8:7b:ba:54:d9:e9:69:a1:17:49:79:2f:5b:17:c1:85:cc:ba:
         87:82:ed:62:65:af:71:ac:59:af:a8:f3:58:7d:b0:23:35:41:
         fa:f7:cd:c2:fd:6c:0b:f1:ee:6a:6f:26:e5:ed:68:66:44:93:
         70:f2:55:a0:5d:ec:52:34:98:60:6a:fc:5f:4c:69:7b:09:26:
         95:1b:36:87:99:5a:4d:f3:f8:d6:ff:df:b7:dc:ce:94:e5:0c:
         c5:54:db:a3:f5:01:0d:94:2f:ba:6a:8a:fe:1b:96:e9:a1:33:
         8d:f9:da:8d:9b:55:ba:1c:e4:c2:b4:fd:99:fc:8d:f5:d7:ae:
         d8:b0:4e:9e:54:1f:82:a6:41:8a:84:b2:90:42:74:2f:94:d1:
         1a:2f:ef:0b:1f:03:b3:c3:02:12:57:37:9c:3b:ff:1b:e6:21:
         8a:98:44:1a:b1:11:8c:43:0c:4e:fc:47:92:3b:4a:ed:5d:4d:
         78:bd:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----