Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd2faaf6-0a24-3034-8d74-706680f02b0d.roa
File:                     dd2faaf6-0a24-3034-8d74-706680f02b0d.roa (raw, json)
Hash identifier:          undcewa4zqruNIe3rFTSfy30eHdIpNkIzgAcnhiKkmI=
Subject key identifier:   DA:A7:9F:68:8D:1F:87:24:00:87:F3:88:1B:7D:C5:75:51:AF:E5:EF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5430D4A5AB4806F87E18C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd2faaf6-0a24-3034-8d74-706680f02b0d.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        184.151.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:43:0d:4a:5a:b4:80:6f:87:e1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=7567b269-50f7-4019-b8e4-0117a04c48bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:7b:b6:f5:f5:5f:5b:e3:c9:54:2d:1f:3b:
                    0c:db:09:4f:3d:e6:05:b9:60:95:59:07:a0:62:94:
                    0c:b7:62:c7:03:db:18:46:ed:68:44:38:04:e1:8c:
                    c7:c4:2d:71:db:f8:93:04:56:1f:93:43:89:4a:0e:
                    1d:a5:04:af:bc:2f:8b:07:d8:64:06:34:e8:ec:8b:
                    c7:30:25:85:fd:83:07:cc:9d:57:e7:c3:99:a6:2a:
                    3a:0c:e0:7e:54:78:47:cf:94:d7:eb:07:c3:3c:c0:
                    9b:92:78:4b:50:cc:91:c6:ec:83:d4:60:c1:3e:07:
                    13:6f:c9:36:33:f5:78:02:da:d6:13:e7:87:b7:7f:
                    59:60:8d:e9:c1:67:90:df:49:ae:c6:7f:1e:5a:48:
                    1d:bc:2e:d6:32:6d:cf:a0:e9:2e:29:f6:4f:a6:53:
                    1f:ab:e5:8c:c1:d0:2a:c4:eb:8a:19:04:93:e0:14:
                    b0:65:80:f8:e9:a3:99:e7:a9:03:8b:10:81:cc:1a:
                    63:1a:69:62:88:c5:71:1a:2e:3d:3f:d6:93:c1:68:
                    c5:58:98:ff:03:47:00:02:63:12:1f:5a:fe:07:d9:
                    bf:85:17:57:55:3b:58:cf:ab:3b:6a:71:cc:6b:45:
                    b1:1d:01:64:f7:40:f6:22:b4:27:19:e8:df:ff:6d:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:9F:68:8D:1F:87:24:00:87:F3:88:1B:7D:C5:75:51:AF:E5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd2faaf6-0a24-3034-8d74-706680f02b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:ab:47:cd:3a:74:82:23:05:08:64:78:d0:88:f2:cc:78:
         e1:d6:c4:92:32:07:cc:af:17:e2:2b:20:a0:de:92:cd:b2:57:
         3d:5a:b6:59:23:ef:c8:42:71:c3:09:5b:63:2b:f5:05:85:b0:
         24:12:4c:03:ca:50:5d:58:65:c1:25:75:85:3b:4b:3d:e1:16:
         b8:69:ae:bb:e8:5d:12:16:65:31:af:47:9c:82:21:29:89:e1:
         8c:45:17:be:86:69:4b:78:ff:1b:3c:6b:65:00:58:56:ef:83:
         7e:c7:98:03:78:26:d7:e4:ea:d1:a6:b6:a3:ba:0f:76:08:4e:
         89:f6:3b:2a:9b:0e:85:6c:4f:95:f9:37:47:98:ca:e3:84:81:
         a2:12:70:29:c3:5d:76:30:ca:12:00:62:29:76:5e:5a:60:40:
         4e:f6:84:2f:78:b0:7f:3c:13:79:1e:98:4d:d6:ce:e8:d2:87:
         65:19:54:4e:a9:64:84:11:67:0c:04:74:ca:03:a9:ad:7f:52:
         fb:85:83:89:b0:ef:b7:7d:25:66:20:ba:d3:49:2f:c6:2c:c9:
         f2:11:e1:11:58:75:48:42:2c:5c:6a:d5:cf:16:51:0d:07:8c:
         d1:d1:4a:4c:f0:3d:f2:62:92:78:44:d7:4e:4f:ff:3f:d5:d8:
         fa:cb:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org