Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4f0fd6d-0671-3f03-93c5-64eef725ef6e.roa
File:                     c4f0fd6d-0671-3f03-93c5-64eef725ef6e.roa (raw, json)
Hash identifier:          FMKDl6H7JjYo+vbcwJKdmTy4N/D87NSamjsOPem+5FA=
Subject key identifier:   B6:30:9E:78:CF:17:12:D4:8A:02:E4:75:72:1A:46:6B:3B:13:7D:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB00F78E74625DA38233180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4f0fd6d-0671-3f03-93c5-64eef725ef6e.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        204.101.198.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:0f:78:e7:46:25:da:38:23:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=00eb8039-c937-44d2-9cbb-c7125472f4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:37:d8:ed:a9:32:40:4a:94:73:6f:45:df:
                    a2:5f:ce:9d:4e:de:d7:c5:dd:f1:c5:78:0f:24:90:
                    fb:fc:63:35:e7:7e:4f:2a:09:3b:c8:9f:8b:6d:36:
                    d0:8b:bf:00:24:b8:f1:2f:f1:79:08:6c:a7:23:0c:
                    0e:c6:58:6c:b3:95:ec:7e:74:b7:88:4e:f1:68:58:
                    9d:b3:9b:66:d7:5c:4c:62:23:38:45:39:1b:71:58:
                    e1:7b:7c:02:62:c7:fc:34:1d:e3:30:e5:36:32:48:
                    86:65:b2:29:b6:3d:5b:fc:12:0d:88:11:1c:91:75:
                    a5:31:83:6f:65:44:8d:86:ce:c0:b5:d8:a1:4c:5c:
                    dd:aa:0b:00:d4:0a:e6:c6:58:8a:4b:a4:23:de:79:
                    e2:d9:c5:93:f5:42:ee:70:8f:18:65:b6:1d:8c:86:
                    34:b1:67:cd:32:65:86:b8:ba:26:d3:1f:cc:16:8c:
                    c5:d8:a4:38:b9:50:0b:a1:c0:c3:20:88:ce:9c:db:
                    a5:0f:27:34:25:11:e9:70:70:49:d7:63:c9:da:0b:
                    3e:4e:58:6f:fb:8c:4e:c2:b5:03:d3:0d:4b:49:e8:
                    ff:7a:24:d9:aa:22:45:c6:5a:57:e5:81:51:8a:d6:
                    0d:ac:f3:11:d4:89:c3:a4:3b:f9:a0:81:58:14:cb:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:9E:78:CF:17:12:D4:8A:02:E4:75:72:1A:46:6B:3B:13:7D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4f0fd6d-0671-3f03-93c5-64eef725ef6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:45:da:6e:60:76:1a:a9:28:d8:22:11:43:fa:81:1a:54:
         f8:21:a3:68:6d:97:0d:27:51:b6:7b:7b:7a:2c:04:8f:f2:b1:
         3f:43:6b:53:67:eb:2e:dd:8f:e7:22:3d:08:3f:38:a4:16:7b:
         3a:65:2b:e3:db:18:bf:ea:ee:fe:e8:bd:97:8c:58:7e:1f:2f:
         e1:d6:fc:34:e4:eb:43:5a:dd:2b:f7:0f:5d:61:95:69:a5:24:
         d8:b3:43:ff:67:79:8c:22:05:20:a5:64:4b:ce:2c:be:08:8e:
         db:10:a6:e6:0f:31:69:1c:ca:83:d1:52:cf:df:8c:2a:aa:1f:
         a4:fd:6b:4a:b4:e7:2f:04:fd:3e:f6:1b:30:10:68:b2:6e:25:
         50:79:98:ca:83:34:f4:1f:6d:e9:dc:39:c7:a8:63:eb:35:8f:
         d1:90:e5:39:60:6b:12:70:0d:7e:b7:a3:25:de:d6:e5:a3:3d:
         12:87:be:ff:3d:ca:de:e7:a2:ce:00:41:02:4d:29:7d:66:57:
         59:6b:e9:ce:9b:68:4a:da:83:b3:45:42:90:1c:a9:84:d7:64:
         fd:90:66:97:b7:78:a0:a8:3b:bf:2e:d1:1f:38:50:3c:e1:2b:
         d3:8b:d1:30:a8:98:94:eb:9f:1c:e9:d6:76:2e:59:b3:da:8a:
         69:ec:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org