Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fe853ee3-8d10-36b4-80fc-d33bca3877c4.roa
File:                     fe853ee3-8d10-36b4-80fc-d33bca3877c4.roa (raw, json)
Hash identifier:          KQRwgT3IFsQj/0Z9rpW4ArrCc5Dffjc5i6lHx2FJRNY=
Subject key identifier:   94:7F:19:6D:7E:A3:D5:7A:D3:CC:BB:AB:C0:9E:66:24:57:5D:91:00
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315CC9003AF46241FC18280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fe853ee3-8d10-36b4-80fc-d33bca3877c4.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:cc:90:03:af:46:24:1f:c1:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=c12cf4e0-90fb-437f-b970-aab1f1129aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:8d:10:d6:c7:e4:96:e3:a7:f7:72:65:98:
                    ea:54:83:1b:d7:fa:7d:a0:5c:52:13:5b:a4:3d:79:
                    de:ac:a9:78:de:8f:bc:72:4c:41:9a:13:43:b5:60:
                    61:cc:18:14:38:a1:f9:fe:fb:50:ca:30:c2:7b:d4:
                    51:0e:52:49:14:e3:b0:12:d4:f3:70:a7:18:c2:15:
                    72:2a:30:52:fd:52:49:22:3a:78:34:85:46:e5:2b:
                    99:34:d6:d8:4c:67:7c:49:63:51:f4:39:b3:28:7f:
                    ed:82:6e:1e:6a:57:b9:67:55:49:10:2a:b1:8d:8d:
                    ba:3d:95:6a:5f:3d:d3:c3:79:ff:00:65:e3:cf:7c:
                    72:64:6c:53:50:6e:1f:7d:c1:39:10:11:af:25:93:
                    d2:94:a2:49:5f:11:f3:9c:3e:51:5d:7a:0d:b2:f1:
                    27:50:fa:23:7d:8c:ff:59:f8:d7:9a:4c:76:2e:07:
                    01:38:5a:4b:3d:a5:15:2e:ac:1b:f8:79:bb:25:63:
                    60:ac:52:0b:a7:b7:b0:01:41:a7:17:2d:2e:47:22:
                    25:da:6f:8d:cc:fe:f6:74:1f:f4:0b:c2:23:e3:f0:
                    6e:ea:4e:f3:7f:4b:f6:c0:75:34:db:62:05:09:64:
                    95:74:de:17:cf:8c:9e:c0:54:42:62:82:8a:d2:0c:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7F:19:6D:7E:A3:D5:7A:D3:CC:BB:AB:C0:9E:66:24:57:5D:91:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fe853ee3-8d10-36b4-80fc-d33bca3877c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:95:32:1c:11:c7:14:92:f9:35:5e:42:b1:c4:2c:40:59:
         ae:e7:80:6e:a0:1e:c7:c7:7d:e6:4e:1f:34:68:9c:a2:1e:57:
         df:ce:10:6f:0a:72:c9:30:dc:f0:51:3c:a8:62:ca:d6:c4:ee:
         a3:22:a6:a4:44:e6:9c:ce:36:e9:a7:8b:72:d4:d5:2f:91:2a:
         9c:fc:09:f0:36:16:d3:38:95:35:ad:89:e5:1a:cb:8d:86:95:
         20:a0:53:a1:e3:c9:9a:92:59:b6:98:50:f8:bf:79:6c:58:07:
         be:47:df:11:b9:01:91:9d:16:55:3d:88:b6:40:f1:e1:da:39:
         d0:f6:46:d4:5a:b5:fd:fa:3b:8a:aa:41:cd:ce:38:74:de:58:
         59:ab:5b:41:ed:4b:bb:7d:96:69:2d:ec:5d:26:8f:34:01:1f:
         41:11:f6:1a:19:c1:89:d9:15:e1:ee:a5:28:0b:12:d9:d1:e1:
         46:6a:66:e3:03:64:92:fc:a6:cd:fa:13:1c:e2:16:65:f7:61:
         11:93:bb:fe:45:60:90:16:94:b4:cb:2e:8b:d9:fd:b6:46:51:
         1e:08:f4:41:f8:21:08:8f:38:4c:ca:cb:8e:39:f8:44:f6:3f:
         4c:bd:c6:f7:de:1c:87:66:d3:57:b1:52:d6:e1:15:a7:f9:57:
         88:6d:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org