Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fac9560d-6a83-3b16-b2ba-9a749fd341bc.roa
File:                     fac9560d-6a83-3b16-b2ba-9a749fd341bc.roa (raw, json)
Hash identifier:          m4cS7MKt5PK3pCF2mlhDAMn9vZkSGTnNOlIgMWqD/V8=
Subject key identifier:   90:46:55:48:EC:91:33:A0:6F:40:89:C9:64:C2:EF:70:AA:22:A5:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583ADDFB8D050291DA9BF48051E8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fac9560d-6a83-3b16-b2ba-9a749fd341bc.roa
Signing time:             Mon 09 Aug 2021 04:00:00 +0000
ROA not before:           Mon 09 Aug 2021 04:00:00 +0000
ROA not after:            Wed 09 Feb 2022 05:00:00 +0000
asID:                     207254
IP address blocks:        184.104.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:dd:fb:8d:05:02:91:da:9b:f4:80:51:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  9 04:00:00 2021 GMT
            Not After : Feb  9 05:00:00 2022 GMT
        Subject: CN=1c96566a-2311-4d68-a072-2abf45699f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:66:12:0d:71:f1:98:0e:c6:aa:ce:72:54:
                    b6:36:1c:98:a0:55:21:be:71:0a:15:ba:4f:96:23:
                    69:ed:73:17:03:e4:e8:2a:09:41:9c:27:6f:b6:44:
                    9d:ec:c9:53:20:55:fc:b5:6b:8d:4c:ce:54:b1:c4:
                    59:5a:8e:0f:cc:87:f9:7f:49:91:58:86:bc:1a:0c:
                    40:a1:e6:45:b3:93:fa:d8:1c:91:2c:bf:8a:a7:84:
                    07:a7:e7:75:52:35:83:47:75:70:1e:d4:a0:08:75:
                    01:a7:04:5c:fc:3b:03:32:39:c9:36:f1:52:93:8e:
                    41:2b:63:ea:b4:26:04:26:19:f0:54:1e:90:63:5c:
                    7a:5b:8b:04:38:1d:c8:ed:56:85:6d:a5:f7:dc:97:
                    ec:95:0f:06:7e:37:1f:78:93:b8:3e:c1:ca:d2:9b:
                    ca:8a:09:61:15:2c:08:7d:45:21:8e:98:9c:0c:8b:
                    bc:91:da:b6:c8:13:6d:a0:c4:64:8e:87:fa:18:67:
                    e9:ae:17:c1:14:d3:2b:d1:1e:08:49:70:b6:b0:fb:
                    0e:6c:bd:7b:0c:73:6c:3a:38:da:a5:37:04:73:83:
                    6d:3b:a7:f2:21:10:8c:98:34:0d:8a:b3:cd:27:9b:
                    42:29:ef:2b:6b:a7:c1:65:2b:d9:8f:99:d4:69:1d:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:55:48:EC:91:33:A0:6F:40:89:C9:64:C2:EF:70:AA:22:A5:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fac9560d-6a83-3b16-b2ba-9a749fd341bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:e6:13:eb:ed:ce:14:cc:f7:d3:f5:e9:f0:37:f6:23:c6:
         d1:6d:03:92:e3:5e:bf:71:8a:48:88:c3:dd:44:a3:65:e4:e1:
         27:f7:d8:c5:f2:5b:4f:d2:dd:9c:00:d0:87:04:16:95:68:8c:
         84:63:45:3d:9d:b5:76:a3:76:05:3a:a6:f8:3e:0e:29:21:f6:
         0a:48:62:54:d1:08:a4:ab:28:f0:a1:cb:4b:30:24:3f:da:c5:
         3a:06:85:28:70:92:56:ed:a7:a8:33:ab:c6:10:05:3e:74:ef:
         3a:fd:22:2e:7c:d9:7c:b2:a6:24:aa:14:9a:8a:77:cd:35:a9:
         e6:4e:a8:93:9b:f5:2e:5f:de:06:2d:27:00:55:19:af:b9:99:
         72:47:3f:af:16:7a:ea:f0:27:44:9c:7d:d7:15:fe:2a:f0:5d:
         dd:7a:63:3c:a3:f3:5a:6c:8d:66:cf:2e:dc:c7:bd:2a:f9:75:
         8c:74:94:55:6f:76:81:a3:5a:97:8c:e0:bd:c8:ac:11:c0:f0:
         ad:fc:b1:6b:c6:17:54:91:40:01:35:57:57:6b:53:f8:f5:4b:
         37:fa:ac:c6:e7:9f:fe:0e:bb:e2:21:d2:5b:32:59:06:52:b6:
         39:8c:7b:f1:14:c6:b0:7f:13:16:51:e8:4e:d4:38:26:47:6b:
         64:22:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:44 2023 by rpki-client on console-ams.rpki-client.org