Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/22c74d2c-4c65-3249-8e40-2315754b10ae.roa
File:                     22c74d2c-4c65-3249-8e40-2315754b10ae.roa (raw, json)
Hash identifier:          A6NgnQqHvUiyVPsDKRFolXkmdyjJIdJQpKQaBA4iPAg=
Subject key identifier:   B5:45:55:4B:C0:86:D6:91:83:D1:AE:2B:54:57:7F:3F:49:82:C0:96
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285843BFCADF2BF27317042B344B00
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/22c74d2c-4c65-3249-8e40-2315754b10ae.roa
Signing time:             Thu 02 Nov 2023 01:00:15 +0000
ROA not before:           Thu 02 Nov 2023 01:00:15 +0000
ROA not after:            Wed 31 Jan 2024 02:00:15 +0000
asID:                     212238
IP address blocks:        150.252.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bf:ca:df:2b:f2:73:17:04:2b:34:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Nov  2 01:00:15 2023 GMT
            Not After : Jan 31 02:00:15 2024 GMT
        Subject: CN=87dbdac0-84bb-4778-a4c9-f049c82a2e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:fb:ea:c9:fa:8c:56:73:13:e7:47:88:89:
                    db:03:56:51:84:18:7e:42:c4:30:a5:e3:1c:0a:00:
                    e1:d8:7e:d3:18:e3:a6:dd:9c:b0:71:84:15:01:af:
                    81:e9:8b:09:bf:b5:08:ef:cb:b1:a8:35:a7:27:58:
                    00:9e:3e:35:2b:9e:27:d5:35:42:f7:02:7e:f6:b0:
                    ba:ee:49:d6:ea:05:86:bf:bf:3d:a9:c5:b8:75:9f:
                    9e:18:9e:29:bf:f9:9a:1e:e7:4a:68:13:14:57:82:
                    49:aa:8b:b6:d1:3c:4a:d7:0d:58:d8:45:0e:bc:bb:
                    99:2d:e1:a3:f5:1f:cb:76:45:61:45:0a:70:1b:22:
                    90:95:dc:29:c3:e8:3e:be:e2:01:c1:a2:46:51:3b:
                    17:95:81:c0:2f:59:f4:d5:81:03:4b:67:e9:08:ff:
                    7b:85:ca:30:6a:5e:bc:68:38:15:f9:07:d5:04:31:
                    0f:83:6e:02:21:a1:cf:f6:ef:15:29:19:96:60:54:
                    08:da:ad:67:e4:15:23:b3:d7:b4:ae:e5:57:18:d0:
                    cf:c3:8c:a2:a6:d1:96:0e:8a:da:9d:8c:6c:d7:cb:
                    a3:6b:40:59:f6:0a:e0:6a:b7:a1:e6:03:73:9d:a4:
                    e0:1d:e9:e6:0e:a9:3c:f9:df:43:49:1a:03:c0:fb:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:55:4B:C0:86:D6:91:83:D1:AE:2B:54:57:7F:3F:49:82:C0:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/22c74d2c-4c65-3249-8e40-2315754b10ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:48:77:4b:13:f6:79:54:3e:58:0b:06:3f:58:cb:d4:82:f8:
         3e:a0:fa:9e:b0:e4:a9:77:77:e5:95:86:de:e8:72:84:5a:8c:
         69:08:a7:70:2b:59:5c:85:bf:d0:24:a0:13:1f:50:22:79:c3:
         df:c4:7f:eb:ea:4e:3b:15:60:7e:1c:47:5a:77:74:a5:9f:43:
         14:11:ff:c8:40:d4:19:6c:af:7d:a5:59:7a:f6:87:f1:e1:44:
         83:3c:69:19:49:3c:86:58:d7:f5:ab:f9:e0:05:97:70:ac:9c:
         08:3c:a2:58:13:82:29:92:60:cc:5a:3c:a4:64:35:36:23:e9:
         5f:a8:50:cd:4b:8c:5f:99:c2:80:a4:e6:d9:c6:70:3b:7a:ea:
         54:66:a1:ea:fd:26:41:db:9c:5c:2b:9a:4b:45:f0:3c:cf:dd:
         ea:9e:1d:a5:0c:69:18:27:4e:ce:f1:22:4d:ac:e1:7c:8c:49:
         ce:bb:ce:db:d4:2b:3d:92:b3:90:b3:3e:a9:5f:84:0a:cf:c8:
         83:2c:fe:8d:0f:fc:7f:11:a3:1e:0b:f1:c0:33:50:60:eb:e1:
         a6:8c:f6:25:19:0f:8b:75:5f:b6:47:02:fc:6a:86:41:40:68:
         9d:a7:f9:97:c5:71:48:5a:ce:62:17:8e:98:be:4c:19:a2:88:
         07:8a:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:12 2024 by rpki-client on console-fra.rpki-client.org