Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03635ecc-29fe-37be-a02d-bc3797941ddd.roa
File:                     03635ecc-29fe-37be-a02d-bc3797941ddd.roa (raw, json)
Hash identifier:          p71DFaz03nHYmlGf3Z12RbHTZF88v4XROD506Ou5hjE=
Subject key identifier:   53:A5:E3:0F:10:87:B3:D8:30:0C:C7:B7:6A:05:D6:49:39:AE:4C:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79366E4D9A9883515BCF993A
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03635ecc-29fe-37be-a02d-bc3797941ddd.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     56484
IP address blocks:        216.66.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:6e:4d:9a:98:83:51:5b:cf:99:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=00bd7f05-f1ff-4811-a63c-c0dd1aacac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:59:01:d0:c2:c1:00:d5:c6:42:a3:84:fb:
                    e3:f2:13:10:c1:4c:72:78:79:16:20:f0:fa:05:4d:
                    a0:f6:95:83:53:37:db:6b:1e:6a:65:0f:bb:83:f6:
                    ae:01:80:99:99:b5:19:c7:19:ee:26:4d:c9:26:33:
                    bd:5e:fc:8f:fd:bc:c2:a0:d8:a1:1c:30:79:f7:29:
                    7e:eb:39:08:17:fa:e3:58:46:f4:d1:de:18:f1:f4:
                    93:77:6e:4d:c1:ca:04:a9:49:83:b3:b5:48:6b:e1:
                    ed:09:33:da:9c:db:aa:f8:44:8b:61:b6:26:ec:df:
                    2e:5b:f2:3e:4c:ce:24:b3:0a:0d:d9:c5:8b:38:46:
                    c3:6f:ac:2d:f0:02:29:60:b5:6a:d2:18:60:2f:06:
                    f2:4a:a0:6e:fc:57:72:07:cc:27:59:b6:ab:01:ec:
                    d6:2f:24:5f:34:c0:2d:81:1b:f7:55:f7:0d:49:a2:
                    b9:f6:ab:7f:24:50:bb:bb:87:03:1b:dc:62:98:40:
                    13:01:c5:2f:14:02:0c:74:98:78:f4:55:cf:17:d0:
                    19:7d:e5:99:cb:5c:cd:5e:c2:4c:d1:62:54:8f:33:
                    e3:b5:05:c4:71:b7:9a:13:ae:05:2f:2f:ac:22:72:
                    38:e7:ea:65:f6:64:13:fb:73:74:89:4b:de:27:66:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A5:E3:0F:10:87:B3:D8:30:0C:C7:B7:6A:05:D6:49:39:AE:4C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03635ecc-29fe-37be-a02d-bc3797941ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:03:01:29:da:33:3c:da:b6:14:cc:10:48:44:d7:32:2d:
         39:1d:05:77:81:26:c8:f8:f0:6d:a1:ad:de:ae:a3:a6:c5:2a:
         b6:e2:17:99:d1:bc:d2:b9:8e:47:30:ad:b5:ee:d2:ec:52:b3:
         5a:d0:99:76:75:2d:f1:be:20:50:91:a9:05:c7:58:78:99:44:
         45:e6:3a:02:b5:3d:36:69:29:d6:b2:9a:df:40:b0:0c:f8:e9:
         88:0f:06:01:0b:9e:5d:bc:75:e4:fb:66:53:77:e8:d9:f2:ae:
         5d:41:57:98:82:9a:84:78:56:cb:fc:42:38:78:5b:a4:70:14:
         a5:1a:54:58:f0:ae:d7:60:19:92:88:80:49:96:5b:27:fb:4b:
         8a:16:f3:25:7c:45:03:11:f2:5f:e7:fc:77:16:eb:5b:db:d0:
         a0:32:a3:ac:03:6b:df:b2:fd:48:e4:d7:2c:75:ea:8b:c1:81:
         6f:47:84:04:db:f8:a1:63:65:a5:7f:42:5d:34:9f:32:c3:00:
         e9:f3:20:a4:03:89:99:e8:b4:89:c8:70:32:b3:d3:33:48:8a:
         90:2d:dd:2d:ba:96:43:77:8a:54:bc:f5:6d:cf:72:af:49:71:
         03:ab:0f:90:54:8c:00:be:cd:41:67:ba:cd:dc:be:76:15:31:
         10:c2:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:33 2023 by rpki-client on console-fra.rpki-client.org