Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/4f24d3bb-f2fd-39f5-9317-2c55b85d99ca.roa
File:                     4f24d3bb-f2fd-39f5-9317-2c55b85d99ca.roa (raw, json)
Hash identifier:          Kf3BMp63bFD17BOhUNQQI3NJrf3F9fp6Dx896L8z8oQ=
Subject key identifier:   99:EE:7C:04:C8:59:EC:06:55:4F:2A:97:C1:E9:E8:B6:C8:CB:2B:51
Certificate issuer:       /CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
Certificate serial:       010D0C9F4328576D51CC73C042CFC172C8BAA0CE
Authority key identifier: 86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/4f24d3bb-f2fd-39f5-9317-2c55b85d99ca.roa
Signing time:             Thu 18 Jun 2020 18:39:33 +0000
ROA not before:           Thu 18 Jun 2020 04:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        199.165.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:c8:ba:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
        Validity
            Not Before: Jun 18 04:00:00 2020 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=35671cc7-b27d-4871-b11d-5270a5bbaf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:ef:27:5a:29:0f:70:75:eb:f1:25:cd:24:
                    95:49:8d:c5:01:5a:ce:a2:06:e4:78:c5:15:ac:8d:
                    9e:b4:fc:cf:f6:3a:e1:18:54:cf:27:f3:f0:b6:50:
                    69:77:d4:37:39:95:66:94:16:4e:67:ec:11:15:02:
                    fe:fa:fd:1c:ca:c8:41:c0:e7:12:76:3e:ff:4f:c8:
                    30:df:3a:db:89:3b:d5:6c:73:3f:b8:a4:6f:a2:92:
                    f8:f3:2a:dc:b4:3f:41:04:9e:43:1c:f4:af:33:a7:
                    fe:02:94:ac:34:cd:6f:e5:e7:25:91:24:d0:07:56:
                    80:ee:8c:2a:4b:56:19:a4:d2:9f:d4:93:8c:48:80:
                    e3:43:7d:d8:4d:2a:b1:48:8a:43:c4:87:d3:fb:3b:
                    c0:87:30:d1:79:4f:05:29:03:b4:fe:61:e2:96:bd:
                    68:ef:a6:6a:04:f6:07:66:4a:2c:5f:7e:10:cd:d9:
                    5a:ff:8c:93:69:b2:b3:97:b4:a1:f0:2d:97:82:30:
                    4f:ba:6f:eb:32:a5:84:dd:ff:59:e4:69:7c:d1:4c:
                    c2:a0:e4:3b:87:57:52:6a:29:c5:e7:e5:15:51:bd:
                    10:f3:32:e5:8f:3a:a5:4f:8b:da:2a:76:9b:b4:0b:
                    f1:38:59:88:e7:1c:ba:69:65:06:2d:af:49:62:a0:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:7C:04:C8:59:EC:06:55:4F:2A:97:C1:E9:E8:B6:C8:CB:2B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/4f24d3bb-f2fd-39f5-9317-2c55b85d99ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.crl

            X509v3 Authority Key Identifier:
                keyid:86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.165.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:72:ba:f0:5f:6a:b8:18:58:cc:bc:3b:bb:6c:ad:9a:db:85:
         15:f3:68:57:d7:e7:9f:72:58:9d:b6:69:98:a8:bc:6b:d2:a6:
         04:d5:77:48:c4:a4:f3:82:d5:a8:72:1c:ed:fb:72:a5:5b:8c:
         af:2c:db:1f:25:44:a5:40:7e:ce:78:72:25:25:eb:89:07:f5:
         b8:fd:a3:ae:6c:10:f8:e2:6d:bd:74:65:4e:f6:b7:b2:e6:e9:
         e5:43:29:2d:fb:ea:3b:47:6a:c6:66:23:46:e0:09:d3:48:b1:
         3e:93:1d:ec:4c:99:c9:f5:4c:be:28:ca:68:fd:20:1d:ac:85:
         30:8b:e0:ad:1c:9e:8a:cd:64:47:86:c8:ab:fa:33:5d:1f:75:
         3b:03:23:86:d2:a0:9e:06:7a:7d:f9:b5:2f:ff:ca:74:23:9c:
         81:da:58:4a:43:20:67:f7:62:99:30:79:bd:a4:9b:d9:be:fe:
         f2:3f:c8:62:8f:7d:72:ea:0a:92:61:ff:f4:f2:27:97:42:78:
         d1:79:37:12:8a:33:2f:49:17:b0:32:c9:7e:1d:3c:4a:05:55:
         a8:9d:bf:83:a3:29:9b:be:e2:9b:bc:6d:59:52:d9:73:87:b3:
         d3:86:39:e2:38:12:9d:7e:18:5e:e0:05:0a:25:34:c9:c1:73:
         fa:24:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:30 2023 by rpki-client on console-fra.rpki-client.org