Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d1366d8-7f88-3be9-89df-05286f2f3986.roa
File:                     3d1366d8-7f88-3be9-89df-05286f2f3986.roa (raw, json)
Hash identifier:          pEfHKn+FA09+mN+Ylaozy5DQzGIPQGquYciBF/8nfHU=
Subject key identifier:   D1:6E:04:93:C3:72:DC:5E:00:21:D8:F2:09:8F:B1:8D:5F:89:B4:EC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583AFB489399BBACA9474E18F980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d1366d8-7f88-3be9-89df-05286f2f3986.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Wed 22 Nov 2023 05:00:00 +0000
asID:                     7843
IP address blocks:        66.61.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:fb:48:93:99:bb:ac:a9:47:4e:18:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2023 GMT
        Subject: CN=506a845e-639d-4b0d-b4bf-dfd47bb3484b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:0d:fa:c5:98:68:2b:e7:39:7b:dc:01:d1:
                    68:d1:54:2e:19:fc:47:8d:2d:da:a3:6d:86:a1:1d:
                    42:cd:09:1b:01:aa:41:6d:73:eb:a7:8e:4a:86:a5:
                    62:16:ff:b0:4e:19:39:4c:c1:fc:8a:ef:4d:72:ae:
                    76:f9:73:e9:78:a3:9b:20:d8:ae:7b:0b:15:e4:1d:
                    09:fd:b7:cd:9b:75:60:2f:18:d7:dc:9e:7c:f3:61:
                    8e:eb:2f:8d:34:37:f9:4e:fb:8e:94:88:d5:a7:fa:
                    c8:82:93:c8:c3:75:3c:d3:26:a2:25:5c:30:ae:06:
                    43:7a:25:cf:be:6a:37:55:4c:42:17:de:20:3b:b6:
                    d1:28:0c:de:da:ca:ba:ae:01:f4:27:cb:c6:6a:db:
                    dd:09:17:70:d2:75:83:fc:5b:6f:6a:de:42:d0:d0:
                    75:45:8d:e6:f1:93:dc:33:66:22:a2:a3:65:d5:a7:
                    8c:1d:b9:31:dd:7e:26:b5:e1:d1:26:43:15:fe:02:
                    fb:b7:af:39:4e:ef:d5:ff:54:e7:b5:7e:9b:e8:48:
                    0a:e4:5c:c0:fe:92:78:fe:99:5e:73:85:95:23:53:
                    aa:4e:db:d4:e4:d6:82:2a:91:98:37:b6:cd:dd:62:
                    0c:27:86:cd:a5:cb:21:20:ee:40:51:6e:02:01:8b:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6E:04:93:C3:72:DC:5E:00:21:D8:F2:09:8F:B1:8D:5F:89:B4:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d1366d8-7f88-3be9-89df-05286f2f3986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.61.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:1c:5f:05:d8:19:73:96:73:a5:40:2c:65:19:7e:e0:c6:
         13:68:2b:31:72:ff:e1:2a:18:ec:a8:7e:d5:9e:fe:6e:8b:3e:
         28:e1:6f:8d:c4:9f:e1:7f:c0:e3:6e:48:29:02:45:e2:e2:50:
         2b:10:de:7d:6f:48:a5:93:0c:76:a7:39:a9:5d:65:e2:ad:1d:
         a5:94:7f:f2:62:28:97:f3:45:bc:b6:c1:d1:5d:73:dc:fb:28:
         02:63:c0:15:78:52:69:c5:39:0f:c0:67:ed:65:46:a9:7b:89:
         ad:ed:db:f5:5d:c1:44:b0:07:2d:44:7b:08:7c:fd:4a:9c:a4:
         df:f7:e7:79:81:71:12:51:0a:ef:13:1b:0b:26:60:2e:3f:eb:
         61:37:d1:34:1a:78:0a:19:31:2a:a1:2f:22:7e:bb:e4:32:f1:
         4a:52:bd:8a:61:5f:81:54:48:ad:65:a4:b2:10:a4:cb:ba:00:
         28:45:a1:40:78:da:01:75:4e:5c:b4:27:21:43:a0:ca:0b:0c:
         18:04:20:c2:a4:6b:07:95:62:21:4b:d3:89:4f:31:12:6b:fe:
         0f:85:3c:32:6f:0c:46:9a:90:3d:48:53:c6:e7:d0:46:9b:99:
         62:a1:96:14:60:3d:24:9f:0a:5c:34:29:13:fe:96:39:85:46:
         1b:4c:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 05:20:26 2023 by rpki-client on console-fra.rpki-client.org