Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ee079ad-9197-3bcb-9021-612b438c228c.roa
File:                     2ee079ad-9197-3bcb-9021-612b438c228c.roa (raw, json)
Hash identifier:          wYhrr3ujJ7xBlo0G2zl0Q22liqcMfa5BMgT3IJBPPLg=
Subject key identifier:   4B:F7:F5:A9:40:7F:A3:FC:0D:37:E2:57:23:79:09:4B:0B:0E:D0:2D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314FB0EB573A1393AA16300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ee079ad-9197-3bcb-9021-612b438c228c.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:fb:0e:b5:73:a1:39:3a:a1:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=7db19db1-81c8-4582-a93d-d358d2d44056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:51:55:78:1e:ad:68:e7:53:2e:4e:13:5a:
                    5b:24:71:d9:2b:1e:6d:33:43:fa:26:18:d0:be:ea:
                    3f:0f:83:b3:df:63:83:b7:a2:5d:43:c4:77:f8:c8:
                    bf:e5:c6:17:ff:1d:6d:59:c8:8b:40:55:78:65:44:
                    f0:3e:08:a6:09:cc:59:2e:f9:f5:3b:3a:a8:54:68:
                    27:c0:94:f7:97:ab:77:64:7f:79:73:74:0e:ab:0c:
                    59:85:97:a9:65:e1:e7:a8:ac:f1:b9:fe:db:46:c1:
                    02:1d:a9:83:9f:75:0e:87:10:32:d9:5a:8c:7e:aa:
                    68:49:95:d6:a8:3b:57:71:61:c8:c2:0c:11:11:7d:
                    ed:cf:be:88:df:02:c1:a0:e4:a0:c0:73:0e:49:5e:
                    2d:a0:f9:4f:04:cb:7d:6c:e7:45:60:5b:aa:d5:d7:
                    27:eb:2a:47:b9:04:4e:46:02:ea:9b:a0:75:d9:f0:
                    ea:b9:66:1c:1f:fd:df:2f:e9:e4:aa:f4:d6:cb:a2:
                    0d:fb:cf:18:d5:1f:25:8e:fc:9a:e6:60:14:a2:22:
                    eb:d9:5a:02:6d:a3:ac:58:d1:84:e7:b5:85:c3:ea:
                    df:37:f1:7e:5b:2c:8c:5c:f1:c5:60:ac:40:f2:58:
                    34:4e:66:10:1e:b4:dc:ef:8e:d4:1c:aa:26:38:14:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F7:F5:A9:40:7F:A3:FC:0D:37:E2:57:23:79:09:4B:0B:0E:D0:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2ee079ad-9197-3bcb-9021-612b438c228c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:39:5d:44:1c:33:52:88:25:94:97:6a:8c:fb:6e:69:dd:f5:
         8b:35:75:58:30:8a:2f:52:7a:0f:c8:28:1b:64:f4:2f:ea:a0:
         cb:f1:ac:78:ec:f9:b5:8b:01:e9:5f:e5:a0:3a:dc:db:4e:8f:
         81:19:94:5b:d6:ed:7b:a3:dd:5d:e3:2a:f9:33:3b:b7:b1:f5:
         f7:26:06:14:29:09:f6:2d:99:ad:f0:ed:14:fb:f3:49:97:0c:
         15:a5:5e:c3:54:71:2a:1a:7a:77:94:02:2e:96:93:3e:60:69:
         56:23:ad:1b:20:3b:5c:95:0a:99:fd:74:b4:f3:8c:b6:85:65:
         64:70:f8:d9:d9:5e:72:0a:75:f8:e4:4b:05:42:44:e8:33:a6:
         30:83:12:92:16:e2:65:1a:56:30:2c:cd:87:c3:d2:09:29:47:
         e0:97:17:33:a5:80:7a:1a:be:13:79:68:8a:7a:3f:8e:cd:13:
         84:c6:ee:45:1c:d8:92:0d:da:e1:ed:9b:9d:d2:3b:94:45:4b:
         c9:a1:77:fd:c2:d4:5c:3d:86:92:7a:5b:30:93:24:c8:b4:85:
         d2:93:f9:7c:bf:35:bc:7c:57:85:87:36:c7:9f:9e:36:10:2a:
         da:ef:dd:2e:b5:41:af:b0:75:7c:90:02:04:40:87:e3:2f:ff:
         ac:53:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org