Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a30a0f4-f28e-3241-afdc-47b8046862d2.roa
File:                     2a30a0f4-f28e-3241-afdc-47b8046862d2.roa (raw, json)
Hash identifier:          wcGfG5cnHrrEDGy8djkE1iSBB1sWIdea6xb15sq76yI=
Subject key identifier:   C2:97:D6:51:27:08:FD:FE:D9:81:71:69:DC:EC:D8:70:25:AC:97:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935369B95F9BACD0A123A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a30a0f4-f28e-3241-afdc-47b8046862d2.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     12247
IP address blocks:        184.105.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:36:9b:95:f9:ba:cd:0a:12:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=f67afb0e-2511-4bb9-af42-9b2efd4a8ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:90:18:b7:ff:4a:21:c2:09:d4:79:c7:93:4c:
                    64:e0:91:af:67:b7:06:fc:58:6b:b0:73:b8:bd:cf:
                    39:62:31:00:b2:16:aa:76:43:ec:0c:28:c0:37:6c:
                    fa:0a:52:8b:8a:fa:1e:fe:e4:17:7f:fd:12:21:39:
                    71:04:10:65:97:a4:1f:7b:7d:4e:8f:08:12:d3:71:
                    b6:f9:b8:17:18:52:e7:c8:69:ea:bc:66:58:d7:12:
                    f3:3c:d7:2c:eb:1a:b9:57:dc:4a:43:43:1c:23:1d:
                    6d:e1:4a:9c:97:9e:5f:e7:62:11:b9:50:c4:d7:e8:
                    3c:d5:7d:8c:fa:37:18:36:b5:e8:57:32:5d:85:f1:
                    0d:82:62:23:34:0b:72:e3:4a:97:b4:2c:16:16:0a:
                    c9:e6:69:24:5e:2e:2d:a4:06:06:0f:b0:9f:8b:1c:
                    b7:26:d0:1c:70:17:5e:dd:f3:7d:67:f4:40:5e:c2:
                    45:ba:b2:d2:ab:ae:96:6d:3d:73:29:e8:50:60:1c:
                    9a:0b:e5:84:65:bb:2d:47:b4:8e:23:13:04:00:10:
                    c6:88:4e:89:84:7f:d2:90:b4:eb:70:b3:95:3e:eb:
                    cf:8d:32:f0:13:97:00:e5:7c:56:97:d6:fe:27:a8:
                    bf:a7:cd:cf:47:eb:da:33:2c:0c:77:06:27:41:ca:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:D6:51:27:08:FD:FE:D9:81:71:69:DC:EC:D8:70:25:AC:97:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a30a0f4-f28e-3241-afdc-47b8046862d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:7b:e0:94:cb:98:61:7e:a4:49:42:c6:92:b4:ed:5c:81:
         72:be:e3:db:34:f2:00:a2:8b:46:ff:6e:7a:46:c7:ab:95:e5:
         fb:9a:81:ed:f6:a8:03:fb:d8:79:ab:8f:e9:e5:92:36:4e:ee:
         02:97:9f:89:e9:c7:1a:41:47:fc:87:b9:11:d4:b4:3a:e8:5a:
         40:e0:25:9c:09:a0:1b:b1:fd:14:aa:21:07:1e:ca:f6:8d:94:
         38:50:66:b7:68:3d:fa:4a:63:9e:9e:ad:bd:01:3e:ae:62:bd:
         74:19:5a:57:76:75:f4:7c:15:da:f3:84:29:86:1d:cc:a5:1b:
         1d:bf:fc:0d:79:32:81:db:69:cf:92:a6:df:10:50:d7:1c:32:
         26:30:e6:5d:98:e4:57:6a:0b:ab:fc:20:f3:d7:7f:0a:97:0e:
         43:f2:93:bc:4c:77:ee:15:39:9b:62:39:35:f3:dd:1f:cf:49:
         6e:b0:f9:67:3b:08:2c:49:9f:28:83:54:d3:6e:5e:eb:25:61:
         a8:b1:29:58:23:73:3e:5d:15:7d:74:1b:75:6d:34:90:d5:47:
         25:8b:5e:67:af:10:71:1e:3f:ee:58:d4:e0:a3:69:b6:0e:f7:
         4e:7a:a5:29:65:7d:e9:6d:6e:85:f8:47:19:4f:8c:fa:2c:43:
         65:63:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:35 2023 by rpki-client on console-fra.rpki-client.org