Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66fb7e1c-ef6f-3ea7-8d0d-2e1207a84ebf.roa
File:                     66fb7e1c-ef6f-3ea7-8d0d-2e1207a84ebf.roa (raw, json)
Hash identifier:          +bfkML7T07Xq7xJ7md7tPNB5WgU4txfpAmAhGwLYXMg=
Subject key identifier:   DE:E9:8F:01:D4:83:FC:82:B0:81:56:5B:26:1C:A5:09:67:E7:BE:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79352387D4C231C9BB517D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66fb7e1c-ef6f-3ea7-8d0d-2e1207a84ebf.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     12097
IP address blocks:        184.105.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:23:87:d4:c2:31:c9:bb:51:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=d9b661f8-851f-4621-88f4-e2971c4a1b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:92:ff:c3:61:bd:ac:35:7f:5e:c3:9d:dc:
                    d3:cd:33:7c:51:49:c3:a8:ad:ff:7d:d4:d7:d7:f6:
                    78:48:46:7e:14:cf:e7:64:d4:90:80:26:9b:67:c2:
                    49:72:6d:a9:d5:3f:10:6c:20:b2:96:9b:f9:e0:1c:
                    00:c2:ca:64:f6:29:08:6e:f1:e5:1f:bb:05:60:29:
                    cb:34:d8:87:b5:0c:85:fc:97:6f:e1:88:02:fe:3c:
                    c1:33:5e:e7:0b:40:e2:23:9a:f4:d6:9e:31:9c:a5:
                    b0:b7:55:4d:47:67:1e:b1:56:12:16:e9:65:8d:c9:
                    cc:4f:89:b1:bc:91:89:14:b8:28:79:7a:51:a0:db:
                    f0:93:a0:6e:0b:df:c4:aa:b2:60:c6:9a:8f:33:4e:
                    68:64:3c:0f:9f:26:bf:40:c0:44:b2:b9:ef:d6:e8:
                    11:78:de:55:e8:d8:d3:07:99:96:48:21:c3:55:58:
                    1a:c8:6a:d4:73:c6:e5:e9:d9:e7:2d:33:b4:f3:c5:
                    a8:ed:58:24:0c:7c:f4:05:bf:84:4a:88:90:ef:bb:
                    5f:32:be:e0:60:f5:c3:42:0b:8e:dc:41:2b:b1:8d:
                    b5:2f:83:f9:d4:a0:37:72:d4:de:21:28:12:71:39:
                    20:48:1d:fb:d9:ef:44:b8:1a:29:6e:ea:40:92:1a:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:8F:01:D4:83:FC:82:B0:81:56:5B:26:1C:A5:09:67:E7:BE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66fb7e1c-ef6f-3ea7-8d0d-2e1207a84ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:de:1f:8c:ec:e9:67:db:4a:9a:91:d3:b4:0c:cd:59:d2:6e:
         e2:b7:54:c2:4c:67:58:4f:59:7c:0a:5b:85:f2:f4:f5:58:e1:
         05:03:08:7e:09:ef:71:25:85:cb:d3:4e:97:17:f8:8a:cb:4b:
         d2:fd:b0:4d:28:d8:5b:ae:d2:b9:04:ee:be:62:a3:f2:08:cd:
         df:6d:fb:16:c3:28:19:91:99:8e:72:43:45:27:3e:5e:ab:2c:
         9b:b8:5a:f9:f1:51:a9:d7:1b:73:c6:08:eb:62:bf:44:af:0a:
         bc:70:ef:a4:bb:8f:ee:fd:03:aa:e0:55:c7:22:6d:85:00:5e:
         06:eb:34:2f:b4:af:fb:51:8a:dd:2b:d3:45:a7:92:6a:b6:9f:
         02:1f:bb:7c:98:05:f4:89:2e:d3:66:4f:83:86:96:e2:5f:27:
         e7:47:06:ea:87:57:fd:93:27:3f:c6:3c:3f:e5:51:83:7b:6f:
         29:26:e1:7e:99:88:da:1c:81:89:0b:2c:a5:29:f8:f9:0c:4f:
         b6:b5:80:d3:29:66:34:54:ff:70:14:b9:b6:7a:3a:44:5e:14:
         10:29:de:1f:2e:55:84:16:cb:13:62:e8:e3:7d:40:94:d9:66:
         48:61:e6:27:7e:0e:6b:88:4f:4a:7c:1c:2b:e0:09:cc:c5:b8:
         e2:1a:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:42 2023 by rpki-client on console-fra.rpki-client.org