Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e6996590-4cf8-319c-97e1-8f40d12fcbae.roa
File:                     e6996590-4cf8-319c-97e1-8f40d12fcbae.roa (raw, json)
Hash identifier:          wAUYwsg0RP1rk+Jb1qxfynaYSVsPnJOyV6xKhxA5obU=
Subject key identifier:   3E:F1:F7:15:9B:63:F5:0E:09:B6:38:17:4E:89:C3:B5:2C:CD:43:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493136B1C9D89D8C0AF655A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e6996590-4cf8-319c-97e1-8f40d12fcbae.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        50.100.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:6b:1c:9d:89:d8:c0:af:65:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=336da3c1-42df-41b1-864e-ea2b40dcf545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:68:30:f2:49:2a:2f:6a:6f:84:ad:53:62:
                    8b:37:98:0b:c5:16:e5:9e:93:01:b6:9e:94:e3:93:
                    44:bd:18:26:6b:ca:8e:e1:60:2a:fa:60:01:6b:b1:
                    07:29:58:2d:7b:3a:87:ca:12:0a:37:08:a7:55:57:
                    56:c8:5e:b1:4b:9b:2c:09:f7:7c:0d:f5:7e:72:1e:
                    41:d2:ac:9a:87:51:44:bd:76:c8:94:20:c9:cd:eb:
                    fe:82:32:91:d2:5a:3e:d3:42:53:49:c6:59:0c:fe:
                    42:4a:ae:ee:55:8c:fc:9a:6b:18:d0:a2:5e:f1:eb:
                    20:03:de:60:40:3f:cf:f3:e8:cb:7f:df:eb:b0:ee:
                    2d:0a:b5:8f:0e:86:85:a8:0b:83:f2:ba:1e:d4:77:
                    06:57:02:63:37:d0:0c:ff:76:cc:d3:4e:ce:8d:66:
                    d7:56:e5:a2:2b:f0:1f:4a:38:9f:21:1f:30:d8:97:
                    c2:8d:c3:17:cd:1d:95:c9:2c:b4:6c:01:dd:68:96:
                    a1:08:8e:a4:3f:00:b1:b4:0a:1e:51:ba:53:97:fa:
                    c0:c5:88:7a:dd:23:3f:d0:91:e4:01:a2:2a:b7:6b:
                    cf:72:a7:94:8b:16:bb:0d:5d:a7:a1:5e:49:b9:41:
                    6e:43:1e:4a:53:0a:1e:62:87:02:4a:fa:df:65:46:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F1:F7:15:9B:63:F5:0E:09:B6:38:17:4E:89:C3:B5:2C:CD:43:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e6996590-4cf8-319c-97e1-8f40d12fcbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:5a:3f:68:f8:f1:f0:c1:43:1a:99:ea:e7:fc:bc:71:9a:
         82:08:eb:c5:64:82:51:37:b9:25:4f:27:db:30:88:1b:c8:2b:
         d5:f3:da:e3:76:5d:88:ad:23:fa:1d:41:59:0b:ef:0d:67:da:
         03:e4:25:b8:60:20:ee:b8:61:15:db:1d:b1:28:f6:fe:03:05:
         ce:5e:b5:be:53:f0:f7:81:7a:f5:ee:24:88:63:5b:b8:fa:01:
         07:6c:88:ac:4d:b9:66:62:a5:d4:94:e6:60:1c:81:8e:95:a3:
         2d:8e:aa:b3:72:1d:69:11:7c:8b:18:91:b4:a2:7c:aa:3d:03:
         f9:cd:ae:8a:62:cc:fb:76:43:be:16:61:01:00:85:0c:2b:27:
         7c:d2:d2:5d:ce:e1:9b:d1:57:68:62:8c:ed:ed:8d:3a:6c:36:
         76:27:f8:44:eb:f4:7e:d3:ad:dc:30:4e:9e:e7:03:bd:dd:93:
         e6:36:96:2c:4f:14:83:1b:e7:f2:6f:d0:8e:9d:cc:47:cd:d8:
         a4:9d:12:b3:80:c2:0a:22:3d:a7:78:c2:00:6e:c6:ba:1a:2c:
         00:77:e6:bb:48:f7:45:56:a5:d9:6b:2c:4d:71:bb:40:27:e0:
         dd:65:9c:dd:7d:e4:5c:a7:75:ce:08:c1:ee:e6:44:4b:0b:6b:
         63:c1:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org