Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ae91fc-3bba-3824-b14d-a93f90467586.roa
File:                     b5ae91fc-3bba-3824-b14d-a93f90467586.roa (raw, json)
Hash identifier:          YyEZluiyo9N1h8jWCvwxSu80f7UhMzUF4ATQG+ycQ60=
Subject key identifier:   60:AB:ED:06:DD:06:68:18:87:D5:E7:37:A6:F9:0C:D2:BD:AC:79:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858402AE1C32192A5D42EDA3F3B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ae91fc-3bba-3824-b14d-a93f90467586.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 08 Jun 2023 04:00:00 +0000
asID:                     55193
IP address blocks:        184.105.194.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:e1:c3:21:92:a5:d4:2e:da:3f:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2023 GMT
        Subject: CN=d7f97a29-fda2-437e-8d3d-d0f6e7afda47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:47:46:54:0b:6a:2e:47:3e:44:45:58:af:
                    48:b4:44:09:36:ab:fe:75:dc:b2:a3:dc:bd:89:37:
                    e6:46:81:a8:00:b5:ff:6d:08:0b:ec:1d:c8:91:dc:
                    9c:ae:8b:47:50:be:c3:9f:ce:24:36:31:24:47:d2:
                    54:5a:f4:77:cb:2c:e9:5c:50:72:42:f6:d1:06:ad:
                    50:68:89:3a:6c:e7:ec:82:a9:a6:2c:b6:54:64:0a:
                    c2:dd:c7:18:29:38:c9:ec:1c:04:a4:ac:a0:b1:2d:
                    dc:b3:a3:16:db:b1:5d:55:03:ff:e7:14:ce:c9:94:
                    c5:18:14:0a:ba:26:a1:6e:3e:18:e8:80:a4:41:0b:
                    a2:f8:93:1d:d5:e4:b5:e1:63:0e:28:a2:15:19:f9:
                    65:1f:06:0c:c7:57:cc:ff:18:f9:4a:a1:ea:58:ed:
                    3a:86:4b:a2:3e:2e:6c:e9:34:21:20:d1:1e:47:4b:
                    82:a3:de:5a:81:cb:e5:a8:e5:f3:bc:94:56:c0:3e:
                    a2:92:7d:73:d9:17:9d:48:37:ae:89:08:c9:88:0e:
                    ad:11:4a:94:20:3f:45:89:c1:65:8e:98:c2:c8:3d:
                    27:cf:60:bc:c0:cb:95:50:af:90:e2:78:18:45:94:
                    84:fb:14:b1:3c:ae:0f:38:f2:02:e8:7e:ec:9a:5e:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:ED:06:DD:06:68:18:87:D5:E7:37:A6:F9:0C:D2:BD:AC:79:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ae91fc-3bba-3824-b14d-a93f90467586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:af:61:5c:d6:49:2e:3a:58:f2:08:78:02:96:2f:8d:2f:c2:
         52:cf:bb:03:61:57:aa:f3:03:77:f1:f1:36:2f:20:34:23:fd:
         47:e2:40:ae:30:94:b5:af:3c:71:b0:cd:04:18:55:00:48:3b:
         84:43:66:7b:08:ca:92:47:e9:c1:e5:44:34:3a:f4:be:93:f7:
         52:f9:bb:e6:75:d4:6b:c0:02:af:b4:ef:9e:d5:cb:c8:12:82:
         35:c6:6a:4a:9a:95:8a:8b:32:2f:36:d0:91:7a:a7:b4:13:a1:
         5a:8d:96:d4:e2:e6:e7:f7:88:70:aa:be:85:a7:1e:a9:86:e1:
         d4:7d:a0:70:28:40:35:5d:13:5e:9d:8e:73:e8:e6:5a:db:58:
         2f:28:f8:e9:a2:21:84:2e:a3:5f:f5:69:02:90:61:f5:ee:5f:
         fc:05:0b:87:bc:33:93:bc:81:95:c6:45:88:5d:5a:a7:77:d9:
         ee:8e:c9:dd:d4:28:34:29:77:b8:b8:d8:6b:f8:94:0f:e0:a5:
         a2:14:04:63:73:5c:b3:3b:e5:c5:28:58:eb:cd:1d:dd:12:81:
         a6:16:1d:28:c0:84:fd:21:13:95:79:79:a6:be:77:7e:de:f8:
         98:c9:a6:55:ab:56:4f:8c:1b:be:d5:50:1b:3a:b5:a2:55:0f:
         c8:7c:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:46 2023 by rpki-client on console-fra.rpki-client.org