Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9949d83-43ed-3f70-91a5-07c89d90fb5d.roa
File:                     d9949d83-43ed-3f70-91a5-07c89d90fb5d.roa (raw, json)
Hash identifier:          aXx4gHCMX+KNo6mGPy/h5s6U2a4XuqleOPA2o2HPBaM=
Subject key identifier:   F0:51:74:36:B2:B7:10:31:01:6D:60:15:2D:FF:B9:77:F9:26:E8:EE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493162168ED9E8E28DDA3F100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9949d83-43ed-3f70-91a5-07c89d90fb5d.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.236.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:21:68:ed:9e:8e:28:dd:a3:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=52bc85c4-0944-4125-bde8-17386a93d328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:da:5c:69:94:cd:35:f1:df:6f:7c:dc:88:
                    55:36:f3:69:34:79:16:cb:58:36:ef:3b:bb:d3:a0:
                    8c:89:1c:88:58:11:6f:d8:76:9f:55:85:bc:1d:25:
                    28:ef:58:a2:eb:7f:9e:a7:68:82:dc:24:82:7e:5b:
                    95:11:cb:d3:fe:51:e8:da:c1:e4:ed:08:fd:3d:9d:
                    89:70:f5:f5:9b:b2:7e:d3:92:c1:1a:7f:79:2b:c3:
                    c9:87:69:1f:66:b6:bc:bf:e5:83:51:6d:45:c4:81:
                    31:bb:05:d7:fe:d3:c2:0b:d9:44:d9:48:6e:c7:38:
                    a9:c4:34:ca:f5:af:ba:2a:e8:be:fb:e1:41:0d:66:
                    36:e2:8e:c6:a6:d2:2e:09:ac:3b:f8:aa:67:3e:6b:
                    57:21:35:94:3d:e6:51:2b:4b:b5:8a:bc:e2:8e:eb:
                    e9:d7:a0:aa:22:aa:38:2e:ca:31:4c:af:b3:22:b2:
                    da:64:e0:be:8c:3b:91:20:01:24:99:f2:0d:59:7c:
                    cf:14:1c:f8:c2:27:48:98:d8:f4:1f:b2:2d:e5:b7:
                    0f:59:2c:b2:2b:a8:54:e5:d6:80:38:0d:e5:76:fb:
                    99:82:ca:0e:61:0c:6a:19:4d:38:da:43:27:ac:fc:
                    fa:ad:af:70:02:cd:ca:e6:94:0f:61:9b:ec:62:86:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:74:36:B2:B7:10:31:01:6D:60:15:2D:FF:B9:77:F9:26:E8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9949d83-43ed-3f70-91a5-07c89d90fb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:75:12:dc:45:3d:70:07:7f:2f:9d:9a:95:67:14:f5:65:
         15:0d:11:34:f2:9c:1c:9f:68:b3:c7:f1:c5:2e:7d:3c:ac:f1:
         da:90:be:e5:15:fc:e3:5c:a0:46:e7:1c:30:42:69:a6:7e:c6:
         02:5d:63:ef:cf:07:6e:a0:59:72:dc:4f:e4:27:7a:39:4d:db:
         d9:1b:d2:67:c0:5f:04:b9:de:40:91:1f:bc:48:45:0c:8b:d3:
         2c:e0:92:78:ed:38:03:7f:b1:e5:f6:5b:e3:e6:91:9e:d3:bb:
         91:3c:51:15:3e:18:96:03:6b:8c:31:74:d0:3e:ac:95:54:9a:
         d3:ea:8f:a7:46:d3:51:0a:f7:9c:98:55:4e:a5:27:8d:8a:af:
         6a:80:ab:6b:9d:20:17:9f:1e:d0:c9:9b:11:bb:71:e0:70:99:
         7f:c1:f8:35:76:82:d0:9f:c1:78:b7:2d:c7:31:14:ac:04:5a:
         8a:9c:df:48:a3:70:73:11:4c:82:08:db:b7:51:77:b6:a3:c2:
         e8:45:71:67:b6:27:49:2f:57:2e:05:72:80:cf:64:2c:a0:b2:
         cd:4e:4f:c9:3c:0c:c8:55:d2:ee:49:82:ec:7f:6c:b8:48:87:
         f8:39:00:85:d2:a5:6b:32:9a:a9:25:00:5a:6d:8d:1c:34:84:
         69:6f:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org