Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f53a45d9-4195-306d-a706-1abf060b7fff.roa
File:                     f53a45d9-4195-306d-a706-1abf060b7fff.roa (raw, json)
Hash identifier:          cfqqfOeY8PqJW08dUBhIzfi5QDqGzTXkCGP+8xXCRZI=
Subject key identifier:   97:E3:2B:B7:0D:09:7D:84:53:43:E6:85:45:8A:64:52:C3:57:70:39
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F43285837F30D501147311739BD279E60
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f53a45d9-4195-306d-a706-1abf060b7fff.roa
Signing time:             Thu 08 Oct 2020 04:00:00 +0000
ROA not before:           Thu 08 Oct 2020 04:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     57164
IP address blocks:        163.123.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f3:0d:50:11:47:31:17:39:bd:27:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Oct  8 04:00:00 2020 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=409bd5bd-719d-400c-b7db-9699778eb0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:46:79:19:42:74:ed:f0:15:db:ba:91:20:
                    1b:b8:10:ad:48:45:97:9a:86:36:4b:55:3b:61:45:
                    a2:30:75:2e:f9:54:72:81:3a:e3:b9:ae:36:0d:69:
                    4b:8f:a6:c3:58:98:ca:65:9b:d4:34:c8:11:b1:da:
                    73:8a:05:7a:10:ca:84:98:ab:23:1b:f5:75:19:4f:
                    46:01:9f:a8:20:c8:53:26:35:aa:ea:28:cb:af:23:
                    31:2d:d5:9b:9e:e2:de:7c:19:5a:b4:e5:82:fc:22:
                    92:f4:6c:7e:b4:64:3b:75:d3:60:13:d1:ca:42:36:
                    2d:39:57:bd:45:e4:a0:f7:0c:e6:26:b9:7c:19:f9:
                    85:f3:3b:09:13:4b:f9:fc:2c:63:0e:41:d7:0d:08:
                    9f:b3:76:b6:59:ec:77:dc:b2:bd:3b:b2:99:53:69:
                    87:fe:b5:19:08:8b:84:be:13:f6:81:6e:71:42:48:
                    af:9f:91:be:3d:6a:71:17:41:a3:a6:86:f1:33:ed:
                    81:a1:f8:3c:1a:95:f9:39:ab:ef:cd:6f:0d:3c:76:
                    4b:0a:cd:f3:36:6c:bc:1f:99:90:e0:52:3b:e9:f0:
                    be:08:c3:24:64:46:15:69:db:87:cf:80:75:cf:02:
                    c3:78:ff:2a:42:0c:9e:f2:a9:7f:8c:63:cf:3f:7c:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:2B:B7:0D:09:7D:84:53:43:E6:85:45:8A:64:52:C3:57:70:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f53a45d9-4195-306d-a706-1abf060b7fff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:42:38:32:b4:0f:ce:31:ba:2e:65:cd:11:a2:1d:57:5e:c8:
         7c:65:39:17:70:39:38:50:bc:43:f4:bf:74:80:e9:77:0f:06:
         25:a0:29:ea:4b:c7:22:3d:5b:c4:ac:8d:66:03:a1:23:d6:d6:
         c0:b4:67:7c:af:f8:45:f7:a1:32:2d:bc:cb:25:49:98:eb:05:
         fb:a7:87:ad:f0:3a:c0:46:31:4d:e5:ea:5c:2b:8f:fd:1d:fb:
         e8:e4:86:21:f6:78:d1:23:82:4e:08:e4:da:20:43:b6:49:42:
         f2:e8:ee:d3:87:fc:46:1c:48:b8:35:12:82:9b:70:80:c5:74:
         be:37:e1:a5:95:fd:9a:58:ac:3d:5f:f3:d7:e6:71:a7:39:a9:
         0d:e7:62:63:7e:74:b0:98:91:5e:6f:f7:56:5c:1b:ff:09:17:
         ec:0e:9d:0b:8f:ed:9d:bb:a9:05:f6:0f:85:0b:64:e9:93:b0:
         d4:03:f2:64:6e:16:a3:c1:4c:a5:a1:a5:75:43:ee:0f:ba:e9:
         46:6d:37:e5:7c:43:7c:4b:74:89:bf:49:46:ee:6e:b7:0a:29:
         d5:20:1d:ab:02:7c:b2:6d:46:9f:41:b1:1c:df:a7:07:20:48:
         a6:58:cf:85:68:66:96:c4:9a:fb:18:02:53:85:42:6b:b9:8d:
         ff:14:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:23 2023 by rpki-client on console-ams.rpki-client.org