Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/923b33fa-fc6d-3c94-bfaf-2e260df37612.roa
File:                     923b33fa-fc6d-3c94-bfaf-2e260df37612.roa (raw, json)
Hash identifier:          jSb2j63egykd9MRSwEJsADjLTRjWNHoADLio5qqRlcA=
Subject key identifier:   16:95:C0:B7:6B:6B:8F:3A:D0:D5:E6:AF:D0:52:63:E5:23:A3:15:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285843B13AF9FAB4CE689C6ADD7D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/923b33fa-fc6d-3c94-bfaf-2e260df37612.roa
Signing time:             Fri 27 Oct 2023 19:49:06 +0000
ROA not before:           Fri 27 Oct 2023 19:49:06 +0000
ROA not after:            Thu 25 Jan 2024 20:49:06 +0000
asID:                     3455
IP address blocks:        65.196.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b1:3a:f9:fa:b4:ce:68:9c:6a:dd:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 27 19:49:06 2023 GMT
            Not After : Jan 25 20:49:06 2024 GMT
        Subject: CN=23835581-469d-43c4-a205-33423a664bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:08:be:86:ff:79:ba:f6:ac:5f:14:5a:36:
                    ea:42:e5:76:94:9b:87:0f:eb:41:6f:e4:df:ff:7f:
                    c6:7c:14:ce:5b:25:72:ca:72:28:58:40:f2:d1:03:
                    f4:e9:12:72:c5:9f:2a:3b:2f:e0:05:aa:e0:38:91:
                    78:12:76:54:e6:61:4b:6e:fc:69:06:4f:9c:33:22:
                    e9:dc:d6:6e:49:b1:53:28:ad:0f:50:6a:97:3b:36:
                    5e:ff:d4:5f:f5:54:84:d1:39:d0:8f:ae:12:3e:66:
                    cc:49:c4:04:35:07:fa:0e:d2:81:ab:f9:2c:d3:ca:
                    1a:0f:dd:f7:ab:6d:ca:24:3a:bc:23:d4:f1:89:dc:
                    3b:83:1c:ee:40:f0:e9:97:c1:0e:43:1b:94:e6:15:
                    a7:27:a2:54:36:98:ca:5b:35:3d:d1:05:5a:3e:45:
                    83:5e:bd:51:36:5e:d6:cd:68:87:68:31:70:c5:d8:
                    0f:f8:9e:83:0e:3b:a3:4f:46:31:cc:bd:6d:1d:fb:
                    21:ba:b8:b3:1d:b4:15:03:f7:76:bc:3a:47:34:bc:
                    5e:aa:f5:58:b7:5c:12:6d:31:cf:85:eb:e4:a7:a4:
                    9d:66:53:5a:79:ae:0c:6c:c4:28:97:b6:85:0e:10:
                    5e:1a:47:a6:b2:96:06:23:a6:e1:a3:3f:18:56:73:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:95:C0:B7:6B:6B:8F:3A:D0:D5:E6:AF:D0:52:63:E5:23:A3:15:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/923b33fa-fc6d-3c94-bfaf-2e260df37612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.196.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:65:5c:58:f0:67:ad:5d:7e:c6:d3:93:a9:27:29:35:1d:
         b9:36:b1:dc:52:fc:fc:99:16:d6:54:e0:3b:14:02:dc:44:db:
         a7:a6:a7:f9:f6:62:ee:38:02:68:e1:ee:16:c1:fe:ae:aa:7e:
         f1:ce:2c:1a:33:b8:b6:e3:a8:a3:67:30:4b:65:81:af:a0:72:
         6e:f4:30:cd:8e:49:55:24:86:79:53:4f:46:bd:01:82:73:b9:
         b8:d0:f8:0d:77:9e:dd:61:30:21:9e:15:03:59:db:2a:3e:05:
         e2:9f:84:f5:4f:c6:86:6d:30:63:7c:41:12:b1:bc:d5:aa:d2:
         3e:79:61:60:95:3e:1f:a4:5e:5e:ef:6c:e5:e1:9f:9d:e9:b4:
         16:5b:a8:71:3c:ca:ff:f1:a9:b5:52:66:19:d8:dc:95:35:21:
         f0:d8:ad:46:01:03:ed:2e:23:b5:da:8c:61:a9:b7:e5:91:ff:
         a7:2d:94:0a:19:42:2a:77:4c:61:6d:14:08:08:43:9a:ff:3b:
         cc:40:2f:50:27:f3:bc:4d:ce:db:1e:bf:ab:0f:4e:07:e4:04:
         42:fb:2d:7a:b9:34:3e:f7:d0:c6:f8:76:18:50:66:cc:a3:31:
         52:78:85:77:ad:06:fc:cf:70:e6:43:b7:46:03:a5:36:f9:b5:
         6b:0b:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:35 2024 by rpki-client on console-ams.rpki-client.org