Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/27fde3c8-e195-32e1-ad5e-5381615b2130.roa
File:                     27fde3c8-e195-32e1-ad5e-5381615b2130.roa (raw, json)
Hash identifier:          2TDubB2Vt+FsFnjiYAbElGFpPn1fkbst+5PfBMgUlTE=
Subject key identifier:   CB:64:11:94:F5:69:D1:FC:54:60:21:DE:B7:46:6C:8F:47:94:BF:FB
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328583AA91908E7AEF578B270F0FC00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/27fde3c8-e195-32e1-ad5e-5381615b2130.roa
Signing time:             Wed 21 Jul 2021 04:00:00 +0000
ROA not before:           Wed 21 Jul 2021 04:00:00 +0000
ROA not after:            Sun 31 Jul 2022 04:00:00 +0000
asID:                     46616
IP address blocks:        147.72.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a9:19:08:e7:ae:f5:78:b2:70:f0:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jul 21 04:00:00 2021 GMT
            Not After : Jul 31 04:00:00 2022 GMT
        Subject: CN=072696fc-4576-4e43-be6f-02eadd988e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:3f:4b:8e:01:52:26:05:2e:ef:ef:58:84:
                    f7:f7:a4:cd:6d:cf:3b:26:92:77:06:67:c5:1b:59:
                    08:0f:cb:5f:db:07:2a:14:78:20:ce:7a:4c:a7:43:
                    d9:ec:c6:40:e4:e2:14:c4:aa:f0:06:71:9d:85:07:
                    28:e1:18:1f:9d:cd:4f:97:ea:a6:df:7c:0c:a4:6b:
                    90:5c:94:1a:f7:e0:db:92:c4:bd:f4:96:73:f3:ea:
                    42:2e:aa:41:15:c8:49:d5:36:db:16:28:61:66:c5:
                    c9:94:fa:85:e9:6c:1f:ad:14:de:46:e7:be:de:e7:
                    d5:f5:02:68:d6:dd:23:7c:b9:bb:9b:e8:67:70:9d:
                    62:ee:83:f0:f0:3a:b3:aa:25:88:35:00:ce:64:cc:
                    b0:56:70:0d:54:7d:b3:ea:af:aa:01:90:3c:69:32:
                    d9:47:bf:c5:13:cf:5b:da:99:80:68:79:dd:2a:7c:
                    c9:94:3c:16:76:aa:d8:40:7e:8c:a0:cc:cd:f6:f6:
                    77:9d:85:12:29:b3:3b:ef:46:70:ee:44:6a:0f:cd:
                    2c:fe:5a:5e:64:c0:b7:52:1a:b0:f0:04:5e:15:15:
                    f4:9a:49:4e:f7:be:da:e1:70:33:ac:80:a0:da:17:
                    7d:77:0d:f5:75:89:50:37:6e:d9:bf:11:bc:46:f4:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:11:94:F5:69:D1:FC:54:60:21:DE:B7:46:6C:8F:47:94:BF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/27fde3c8-e195-32e1-ad5e-5381615b2130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.72.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:a9:52:b2:17:16:19:16:c1:03:86:c7:41:68:c3:37:67:
         38:ef:2b:01:8a:d7:1a:d4:5c:90:87:4c:d8:5e:57:bd:e9:61:
         45:80:8f:a4:9b:3b:82:2d:73:be:e9:6c:06:42:c3:4d:aa:e7:
         59:68:e5:f4:5b:83:17:13:30:7a:b0:7d:af:d0:3c:ae:e6:5f:
         2e:62:ca:5d:03:48:6e:39:eb:96:cf:ed:11:94:4a:0c:2a:f9:
         5f:ff:b6:5a:80:8c:da:ff:f4:96:00:81:95:5b:26:32:61:ef:
         7c:24:c4:b4:82:b0:82:45:ca:a9:db:db:8d:c5:51:bf:12:b5:
         b9:4d:09:40:c3:3c:80:02:e9:df:1a:1a:56:d2:93:4f:bb:44:
         9e:6b:d3:67:d7:fa:56:11:cb:f5:61:66:2f:e4:cb:07:32:ee:
         75:3b:a8:05:47:35:29:40:3c:ff:18:dc:bb:da:65:45:9e:66:
         7e:1c:dd:5e:47:ed:3b:b6:7b:62:27:fd:eb:22:47:f8:d6:81:
         b3:46:61:f2:86:6d:62:ab:d9:53:ea:1a:7a:57:a0:5b:81:1c:
         28:03:40:ac:c3:76:87:bf:b8:9c:a5:71:e9:08:5d:e6:be:27:
         66:24:bb:fc:b6:96:41:40:87:48:9b:ed:e8:cf:ca:f9:05:fa:
         c3:77:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org