Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8780b35-1400-39c5-b026-be694470d897.roa
File:                     e8780b35-1400-39c5-b026-be694470d897.roa (raw, json)
Hash identifier:          KvrSR3B+t2bduA5lsWILIswRlhFmk2n938MHwqWy0l4=
Subject key identifier:   78:C9:5B:ED:68:C1:45:EF:E0:6C:18:13:DA:CD:12:F2:AA:90:56:D0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE6457ACF6C674FAEAE0900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8780b35-1400-39c5-b026-be694470d897.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     19152
IP address blocks:        216.208.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e6:45:7a:cf:6c:67:4f:ae:ae:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=1c117bc2-cf31-47ae-b93d-b97f588d52b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:59:47:1b:00:da:f5:ef:d4:65:ac:9e:7f:
                    88:b3:63:5e:6c:99:8d:85:6e:e2:00:84:3b:13:c3:
                    bc:be:6d:9a:de:d3:d9:96:0d:01:4b:35:1a:78:a4:
                    ee:fa:15:9c:ae:d5:c8:ef:b6:1c:d4:3e:d6:9a:7b:
                    85:d1:1c:c0:69:ff:ac:51:0c:e6:fc:91:93:28:05:
                    26:ad:24:3f:a4:be:e2:cc:d4:58:10:1b:30:7d:1b:
                    d1:64:3f:e5:ed:6d:62:55:9c:f2:88:68:3b:f5:a0:
                    e5:21:d4:65:ef:08:2a:30:df:ec:5a:ec:06:75:17:
                    e3:5e:c5:b2:b0:f1:c7:88:4c:36:eb:b1:33:80:70:
                    e5:67:df:fc:78:3c:8a:1c:66:bd:8e:86:af:8e:18:
                    b0:9e:89:f3:f2:49:51:21:ed:f0:9a:0a:d4:7b:ef:
                    61:ff:92:52:f1:32:2b:a8:06:ce:24:a2:90:d5:17:
                    fb:4f:73:75:58:83:f2:a0:cc:d2:60:e5:5d:3a:0f:
                    6a:04:bd:ea:08:f4:c9:b3:b6:b6:5b:3c:24:10:88:
                    85:7f:45:15:b4:7e:b6:cb:37:ce:5b:6e:01:00:08:
                    b9:9b:06:be:e9:8c:3b:25:a5:ce:1a:d7:ae:b7:af:
                    cf:ac:23:3a:f9:98:44:fa:d1:bd:54:a9:6d:4d:00:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C9:5B:ED:68:C1:45:EF:E0:6C:18:13:DA:CD:12:F2:AA:90:56:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8780b35-1400-39c5-b026-be694470d897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:35:e5:12:d3:24:58:6a:04:62:2d:5f:41:b8:8b:31:f6:
         29:5b:76:13:d6:4e:99:47:3e:c4:59:27:96:e1:b7:6c:a4:12:
         83:de:be:d6:47:d1:bf:45:1e:75:dc:61:b4:6d:61:fc:d1:59:
         d7:2a:b2:be:86:ff:fe:c5:f4:ab:c7:d4:47:78:cf:27:e5:6c:
         49:4b:24:59:a5:e3:c5:f7:9e:cd:f5:e2:26:d0:6b:3b:33:d7:
         1a:00:cd:a2:b2:c1:6c:9c:bb:4a:fd:a1:3a:a5:ac:94:cd:a9:
         34:6a:4a:6a:0a:2a:ea:ce:fd:fd:d2:28:26:60:d2:c8:e7:10:
         9f:80:96:e1:5a:cc:c8:95:a7:34:da:59:fd:66:03:a0:e0:be:
         65:9c:e4:55:67:73:c2:e3:f4:a5:b3:30:33:fe:ca:c0:b4:b9:
         e2:3a:cc:85:b7:e7:4f:41:91:6e:62:ac:fe:e1:89:49:55:5b:
         a7:8d:bc:9e:a9:b2:a6:fa:9d:03:fd:05:9d:35:9d:f2:b0:6b:
         e7:3d:6b:40:21:94:38:86:ee:0c:c9:64:84:b1:12:a5:57:b9:
         59:97:1b:1c:d6:bd:d1:2f:05:d3:e0:04:d0:34:74:2e:6d:d7:
         4a:ec:72:7b:7b:34:49:b6:54:c9:96:d7:48:75:90:80:d9:07:
         8b:f8:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:16 2024 by rpki-client on console-fra.rpki-client.org