Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d92346f0-1a0e-39dd-8718-81c2be8a8145.roa
File:                     d92346f0-1a0e-39dd-8718-81c2be8a8145.roa (raw, json)
Hash identifier:          WKvce4N/jnxpKaZyGkHFpxR2uYYCYzBmAfBJexE7Nhg=
Subject key identifier:   46:F8:EF:39:78:EA:7A:38:3B:F9:2D:8B:FD:41:D8:58:CD:E6:FC:86
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931425D11CC19FDBEA0D9400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d92346f0-1a0e-39dd-8718-81c2be8a8145.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     855
IP address blocks:        142.134.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:25:d1:1c:c1:9f:db:ea:0d:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=d46be35a-c82e-4d76-8e8c-c9bcfb9567d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:e0:fd:50:e1:94:3c:86:36:90:d1:74:56:
                    44:d7:bc:6e:17:72:6e:63:09:a2:e9:45:61:a4:e9:
                    d5:f8:9b:fc:38:5c:7a:53:90:e3:93:6c:32:65:c2:
                    29:c8:1f:33:71:ff:d2:91:ff:8c:f8:95:3a:0a:2e:
                    1a:7c:46:5b:9e:85:c2:29:9e:3a:3b:88:b9:0b:87:
                    5c:2a:55:1e:7b:3f:ec:46:e4:3b:58:41:c2:65:25:
                    62:d4:43:59:5d:27:7e:1a:96:4e:56:e0:dd:98:19:
                    06:1b:e7:99:73:d5:d4:5b:b0:ed:8c:db:e5:c9:2d:
                    28:b3:b4:36:d6:ac:0c:d6:be:f3:93:c8:62:64:18:
                    30:e0:4f:26:b0:d2:ef:e1:0f:ce:33:4b:80:8a:a9:
                    fc:76:c0:ec:db:92:c4:c8:6d:37:14:4a:d9:dd:c2:
                    44:c0:14:c5:d6:93:7b:4e:51:f7:cb:83:93:46:64:
                    61:3b:b4:63:0d:bc:f0:97:1d:50:d8:41:dd:57:6c:
                    37:a2:7f:c5:16:cf:5a:d0:b8:e3:33:aa:ee:f0:42:
                    72:45:4d:96:2b:02:44:96:66:a8:24:ca:64:77:ba:
                    2e:6b:fc:e7:d9:32:64:05:03:4c:99:d8:bf:31:cb:
                    f1:b1:95:c6:ec:a9:5c:9e:32:74:70:34:cc:9a:4f:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:EF:39:78:EA:7A:38:3B:F9:2D:8B:FD:41:D8:58:CD:E6:FC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d92346f0-1a0e-39dd-8718-81c2be8a8145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:47:89:3d:6c:2b:22:e7:ff:d8:7c:1a:d4:df:b2:20:86:11:
         63:89:f4:89:11:35:3b:f5:cc:73:89:c4:6a:cb:36:33:4a:4a:
         33:6f:9d:ef:a9:00:7a:b5:db:0d:6f:82:6f:b7:ab:04:27:3e:
         88:21:ac:09:08:2a:db:96:67:b3:23:0a:3a:c3:a7:e5:ea:d4:
         52:80:43:33:47:13:16:6b:b8:48:98:b6:d1:92:a1:bb:b2:cb:
         98:2a:67:22:41:70:47:06:58:5b:1b:9d:ca:c1:c2:3f:5f:f3:
         3b:47:6a:47:5c:fc:d9:c0:7a:d5:b4:1e:f1:a7:05:3c:b9:7f:
         05:ec:bb:d7:16:cf:23:10:ff:18:35:77:8f:f5:b7:fd:f1:80:
         77:11:4c:9f:e8:60:c0:10:fe:4a:18:0d:ed:4f:b4:c2:32:96:
         c8:c8:23:af:15:8b:01:ab:cd:68:11:b1:13:c5:be:71:d2:96:
         51:f7:1e:d9:69:77:dd:9a:b1:4f:19:30:37:ba:66:44:70:58:
         45:6d:00:56:7a:6a:05:98:af:b3:86:95:9e:8b:91:78:59:95:
         f3:21:09:24:55:de:12:82:fa:f1:ab:dc:c1:a3:f3:92:af:6a:
         b2:7f:f4:93:92:f0:ed:c6:ac:b3:2e:44:a8:6c:99:f2:2e:e1:
         fc:84:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org