Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f9b1ef78-4954-3526-8b8b-6e6c8e045d36.roa
File:                     f9b1ef78-4954-3526-8b8b-6e6c8e045d36.roa (raw, json)
Hash identifier:          jPP873n/tZtO9uqSmOyfbLBJwf4hiCc5FAUEm0wpGbI=
Subject key identifier:   7D:F5:BD:1D:DB:83:02:08:8C:54:29:CD:05:73:41:52:6B:A2:C0:AD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75FAFB5EF74BF3A1A35C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f9b1ef78-4954-3526-8b8b-6e6c8e045d36.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     35911
IP address blocks:        209.226.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:fa:fb:5e:f7:4b:f3:a1:a3:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=b4062c71-c100-44f8-9139-7a6ff5b1b0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:ee:b1:68:86:97:ca:32:b2:cf:aa:f8:07:
                    90:52:5b:78:5f:c8:bb:00:a6:77:bc:45:61:92:89:
                    5d:a9:6a:d4:af:bb:5e:4d:2a:8b:f6:91:4c:66:bc:
                    d6:cd:2b:98:26:dd:08:63:20:68:c5:f1:92:46:aa:
                    38:90:ae:82:c7:b1:61:09:63:1a:51:37:cc:18:b4:
                    17:60:31:ce:11:c2:76:9c:47:7f:f3:75:bb:9c:b2:
                    a7:a8:12:f1:63:34:f9:5b:69:51:67:f6:e5:4c:bd:
                    79:68:32:f4:2e:0a:b1:90:72:ce:cf:45:29:34:41:
                    4d:4c:43:bf:c6:cc:77:18:7b:7f:14:89:6a:17:5d:
                    01:a1:2b:f0:03:3d:65:e6:3a:02:49:40:5e:9b:29:
                    62:67:37:a5:5d:c1:15:88:1b:34:60:3f:46:47:c0:
                    1e:46:26:c0:f3:07:95:06:62:5a:aa:e4:8d:32:a4:
                    91:56:80:a8:68:f2:f3:42:65:18:32:55:97:50:dd:
                    bc:b7:87:46:7c:d1:9b:2c:f9:f3:90:ab:3b:88:30:
                    dc:c5:85:79:48:84:f6:9b:73:cb:0b:69:50:f7:c8:
                    aa:9e:ea:55:ff:53:13:4b:1f:7e:0d:fd:5e:b1:13:
                    35:2b:f9:46:00:25:ce:2f:3c:43:ac:73:44:64:e0:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:BD:1D:DB:83:02:08:8C:54:29:CD:05:73:41:52:6B:A2:C0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f9b1ef78-4954-3526-8b8b-6e6c8e045d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e3:25:e4:dd:2a:33:f0:d3:91:90:47:93:28:7c:fb:4a:1e:
         ed:33:dc:13:ef:a0:58:9e:9e:91:21:06:37:bd:6c:32:33:f3:
         f6:d9:3d:6e:0e:13:7f:b8:36:24:57:c8:8e:92:cc:2c:ff:ac:
         6c:28:50:97:b9:a1:78:11:8a:0e:e4:a4:49:08:2b:53:41:7f:
         2a:5d:8c:55:15:1b:aa:89:04:be:36:be:cd:b7:03:9b:61:9a:
         25:32:8f:d5:dc:1b:fd:8a:75:b3:f1:46:b1:36:ff:bf:f0:16:
         fd:49:b0:d4:e9:fe:06:8b:55:32:12:1a:46:c7:91:36:a4:53:
         92:0b:64:af:2f:af:46:6d:1c:94:26:a1:4a:53:12:3f:9c:97:
         4e:5d:f2:6a:0e:0f:a7:8e:b5:3b:f0:e1:2d:98:b0:40:63:27:
         e3:53:8a:45:91:31:ae:12:44:37:19:8e:6e:4c:3f:ef:7c:7b:
         b5:2a:f9:e4:60:79:16:df:5a:b8:1a:c8:eb:11:02:86:9b:57:
         67:9e:65:41:c6:36:6b:9a:9d:03:de:40:0d:f1:e8:1c:70:c7:
         b6:ac:02:ca:1a:d5:ec:31:9c:14:d2:58:e0:0c:54:c7:2d:da:
         da:98:bf:de:ca:9e:3c:f6:a2:5b:ae:36:0e:86:df:85:9d:93:
         99:a0:12:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdfr7XvdL86GjXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
YjQwNjJjNzEtYzEwMC00NGY4LTkxMzktN2E2ZmY1YjFiMGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZLusWiGl8oyss+q+AeQUlt4X8i7AKZ3vEVh
koldqWrUr7teTSqL9pFMZrzWzSuYJt0IYyBoxfGSRqo4kK6Cx7FhCWMaUTfMGLQX
YDHOEcJ2nEd/83W7nLKnqBLxYzT5W2lRZ/blTL15aDL0LgqxkHLOz0UpNEFNTEO/
xsx3GHt/FIlqF10BoSvwAz1l5joCSUBemyliZzelXcEViBs0YD9GR8AeRibA8weV
BmJaquSNMqSRVoCoaPLzQmUYMlWXUN28t4dGfNGbLPnzkKs7iDDcxYV5SIT2m3PL
C2lQ98iqnupV/1MTSx9+Df1esRM1K/lGACXOLzxDrHNEZOAhgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH31vR3bgwIIjFQpzQVzQVJrosCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjliMWVmNzgtNDk1NC0z
NTI2LThiOGItNmU2YzhlMDQ1ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eJaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHjJeTdKjPw05GQR5MofPtKHu0z3BPvoFienpEhBje9bDIz8/bZPW4O
E3+4NiRXyI6SzCz/rGwoUJe5oXgRig7kpEkIK1NBfypdjFUVG6qJBL42vs23A5th
miUyj9XcG/2KdbPxRrE2/7/wFv1JsNTp/gaLVTISGkbHkTakU5ILZK8vr0ZtHJQm
oUpTEj+cl05d8moOD6eOtTvw4S2YsEBjJ+NTikWRMa4SRDcZjm5MP+98e7Uq+eRg
eRbfWrgayOsRAoabV2eeZUHGNmuanQPeQA3x6Bxwx7asAsoa1ewxnBTSWOAMVMct
2tqYv97Knjz2oluuNg6G34Wdk5mgElU=
-----END CERTIFICATE-----
Generated at Wed Jul 26 04:01:59 2023 by rpki-client on console-fra.rpki-client.org