Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b254e415-7e64-3c76-86cf-76f8ef236025.roa
File:                     b254e415-7e64-3c76-86cf-76f8ef236025.roa (raw, json)
Hash identifier:          GWXLMuz8JWOiKf9DLnX0Wc2eTNR9Qurn4iANxeEFtBw=
Subject key identifier:   B6:67:5F:D7:8A:67:2C:94:61:A9:93:71:EE:53:F1:54:2E:07:26:53
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C09916FCC11C8AFD887142280
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b254e415-7e64-3c76-86cf-76f8ef236025.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:6f:cc:11:c8:af:d8:87:14:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=754f85c8-ccc3-43cd-805e-326e8d2ca488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:d5:aa:91:b5:50:d0:3c:48:8c:f3:df:97:
                    57:55:46:2d:77:45:46:0c:ea:d0:fe:4b:fc:f0:76:
                    95:14:07:13:55:e8:68:df:75:b4:8b:d7:a3:d8:1a:
                    6c:46:0f:5d:88:63:03:0c:64:2c:4a:44:f5:ae:41:
                    f8:68:a0:b5:24:9b:9c:1e:c6:8f:86:cd:cf:94:35:
                    ba:0e:cf:c6:8a:a9:63:3e:41:ea:e2:db:44:da:c3:
                    5e:4f:13:90:89:b9:f2:39:d8:d2:7e:49:4f:75:0d:
                    b6:dd:8a:e3:46:34:95:e2:a0:8e:0f:e5:2b:82:c8:
                    7e:cc:45:d3:6b:f7:ab:5a:43:e5:b9:0d:ea:f1:ab:
                    c3:50:20:73:99:dc:c6:7f:63:55:a7:ee:c8:20:29:
                    b0:fd:ae:bb:63:16:17:9c:f5:03:e5:0f:af:54:7d:
                    f3:cb:a7:d3:32:5a:fc:8b:17:e6:71:2c:db:b8:c7:
                    47:a5:15:68:cf:ee:15:b1:c6:e1:4d:70:cf:70:4d:
                    35:4b:7b:c8:4f:7a:4b:ac:1d:84:19:8f:9d:82:e6:
                    05:7f:ae:42:3a:c1:22:8a:fb:dc:a5:6a:cd:ca:35:
                    05:bf:55:df:f0:39:14:ee:a2:d1:4e:9e:df:c1:e4:
                    55:d2:88:46:fc:d1:b8:1d:e0:7a:fd:7b:f9:64:32:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:67:5F:D7:8A:67:2C:94:61:A9:93:71:EE:53:F1:54:2E:07:26:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b254e415-7e64-3c76-86cf-76f8ef236025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:2f:c1:53:c8:82:12:34:e8:d5:3f:d7:f5:9c:87:2f:85:
         2c:bf:24:e8:89:dd:a2:85:b3:e5:ca:54:3b:87:6a:97:aa:7f:
         56:9c:08:ce:36:45:07:6d:7a:da:2c:59:e2:55:d8:46:ac:fd:
         ce:01:76:f8:a7:b2:30:43:5d:6a:e8:81:f4:45:66:c7:69:f8:
         8d:27:ec:5c:1e:90:2b:14:16:9f:77:ba:2e:f9:e6:c6:44:c3:
         5e:2b:63:e2:b3:13:58:02:3e:22:3c:e7:dc:b4:2d:1b:b3:18:
         c9:96:5b:ab:28:89:02:b8:da:b0:1b:d3:8e:1c:44:0d:83:5f:
         dc:f1:a6:42:d2:6c:4f:b7:54:ec:09:6e:5f:72:7d:0a:33:54:
         7c:05:ae:32:c5:7c:ee:49:be:d8:eb:8d:9e:15:0a:c5:c0:94:
         bc:16:51:ff:fe:89:81:9f:ce:f7:8d:7e:d7:70:ac:ed:01:76:
         1f:f2:24:b5:45:6c:89:2f:0e:f9:1b:d5:e6:3f:5d:7a:bc:a6:
         ca:f4:ff:d6:3f:b9:f5:f9:4c:12:e4:06:53:24:71:2e:7e:3a:
         89:50:fa:cf:13:85:18:5e:83:14:3b:54:41:00:b3:8a:97:58:
         8a:3a:d3:2f:8b:93:ec:e0:c7:8e:fd:b2:fd:b3:f6:a6:e4:9a:
         0d:5b:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 05:45:18 2024 by rpki-client on console-fra.rpki-client.org