Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/071777ea-4fbc-3817-ba3b-29842d9c2427.roa
File:                     071777ea-4fbc-3817-ba3b-29842d9c2427.roa (raw, json)
Hash identifier:          ydBEOsTjvzb5MHioOsxbqld9gSQ8hXSWgvIU0306BM0=
Subject key identifier:   90:49:99:D4:1C:DE:19:05:B6:7C:3B:DD:6A:D9:27:11:32:1C:F0:75
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79350A1B529EF87412417218
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/071777ea-4fbc-3817-ba3b-29842d9c2427.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     22989
IP address blocks:        209.51.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:0a:1b:52:9e:f8:74:12:41:72:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=006484f5-1d93-4a57-9837-34d16c478f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:97:94:8d:38:15:9f:54:3d:6c:cb:74:07:
                    25:a4:c7:72:85:57:83:ad:89:a2:76:c9:4b:63:05:
                    0c:a4:30:e5:70:b9:22:28:83:a5:c9:34:ff:16:1d:
                    d9:5c:4a:1d:6d:c4:e8:2c:38:af:e6:b9:ce:c4:0a:
                    80:04:c1:14:9c:7e:31:27:67:1b:2b:43:d2:34:c9:
                    16:4d:5e:9d:f2:61:db:87:ae:e9:16:dd:2e:34:cd:
                    85:a4:61:90:5b:74:fa:14:44:4e:b6:ec:d1:0b:d9:
                    32:53:9a:83:27:17:1d:1b:fc:9b:02:bb:bd:45:f4:
                    1d:f5:6a:57:fe:6f:7f:76:8a:62:90:65:24:9d:12:
                    f8:e6:48:32:ce:80:f3:a1:e2:b8:0c:04:0d:e2:59:
                    3a:4e:a3:98:9f:79:3d:e3:14:06:53:d2:79:6b:2e:
                    64:dc:99:b0:d2:67:72:d6:15:ab:2f:3b:1e:d5:ae:
                    21:2c:25:fc:e3:6e:61:68:bd:87:17:f0:ad:04:5a:
                    6a:61:7f:cc:a0:25:9c:8d:9c:9b:a8:c4:a6:dc:a0:
                    ea:88:87:14:47:23:c1:6b:5a:55:56:ca:39:25:84:
                    55:bf:a4:cf:9b:e4:07:54:1a:9b:78:60:23:08:09:
                    fd:6f:81:93:9d:ec:b3:e9:d0:e5:1b:c3:6d:2f:2f:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:99:D4:1C:DE:19:05:B6:7C:3B:DD:6A:D9:27:11:32:1C:F0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/071777ea-4fbc-3817-ba3b-29842d9c2427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:71:37:b4:89:6b:ad:37:c2:09:eb:65:c5:e9:85:7c:82:
         13:3c:62:38:a3:7e:1a:ee:d3:9c:3d:f9:4e:09:ee:0e:e7:d2:
         4a:6b:a2:e6:65:65:e9:32:d5:00:9b:b0:e6:25:ab:4f:dd:4a:
         af:67:66:f2:85:c0:ea:2e:1d:7a:77:70:81:e7:c7:99:90:94:
         d8:1f:87:51:85:b9:86:35:4c:b0:1d:68:06:6f:16:2a:a1:6a:
         5f:3a:8e:21:c1:f0:65:82:bd:42:d8:37:93:cc:f7:95:cc:05:
         ca:a8:e1:fb:e8:e4:71:08:28:8f:1e:04:5c:b4:40:e0:d3:65:
         3e:16:b2:fd:b1:83:92:01:88:65:7b:15:0e:59:b3:a8:28:60:
         ab:58:b7:24:f9:df:9f:53:18:6f:a0:1f:b2:0e:97:e2:8c:e6:
         eb:5e:bb:09:8b:c4:e9:1d:87:e3:55:da:a3:e2:2e:8b:0c:6b:
         af:da:0b:9c:83:e8:3f:dd:20:89:4f:2a:aa:ec:23:cf:e0:b8:
         dc:f6:2f:73:bc:ad:ab:e6:25:ed:25:d9:9d:bb:6c:67:10:84:
         04:91:e1:f7:30:5a:76:cb:d1:49:a9:a6:89:07:3f:18:55:63:
         05:a9:da:00:8d:ed:ec:f8:6a:96:53:d3:d7:9b:96:cb:4d:90:
         1f:68:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:34 2023 by rpki-client on console-fra.rpki-client.org