Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fded28e9-887f-3153-805b-7161f8b259a5.roa
File:                     fded28e9-887f-3153-805b-7161f8b259a5.roa (raw, json)
Hash identifier:          OlycNpM4Yq6TSiZ9/DmwjkRZcPOAnqKhY3jn0yh0gkk=
Subject key identifier:   C3:80:05:91:AD:24:A5:31:37:77:18:6D:78:C5:C3:35:28:4E:A4:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583CA0F6C5CF1924C7FAAE5D3180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fded28e9-887f-3153-805b-7161f8b259a5.roa
Signing time:             Mon 17 Jan 2022 05:00:00 +0000
ROA not before:           Mon 17 Jan 2022 05:00:00 +0000
ROA not after:            Sun 17 Jul 2022 04:00:00 +0000
asID:                     393436
IP address blocks:        184.105.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a0:f6:c5:cf:19:24:c7:fa:ae:5d:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 17 05:00:00 2022 GMT
            Not After : Jul 17 04:00:00 2022 GMT
        Subject: CN=ddb169a2-f6ed-4f4e-b36c-5354917ac676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:dc:80:23:35:72:cf:4f:6c:43:f6:bd:bf:
                    c3:c7:ff:53:2d:9e:20:dc:3d:cd:06:5e:ff:b2:7f:
                    bb:99:2d:14:cb:04:f9:db:1c:e8:7d:8a:6b:d0:a9:
                    7c:e5:cb:e5:70:32:1d:b6:5f:42:24:b9:f5:e5:f3:
                    dc:39:c2:50:f7:81:af:d8:e7:43:3e:db:9c:b7:5e:
                    0b:a6:23:02:29:bf:f5:09:60:e7:14:e3:7f:a6:e1:
                    ce:80:27:34:63:97:7f:e4:83:0e:25:9c:5a:65:77:
                    05:69:c8:70:86:ad:50:81:e6:1a:27:52:f0:dc:d4:
                    59:44:9e:c4:ee:8c:55:7a:da:fd:06:58:8c:3c:61:
                    0c:f1:c3:e3:6e:84:b4:fd:5a:20:ba:96:d8:35:c4:
                    22:b7:b1:af:be:f6:4a:51:7d:ff:bf:86:89:70:50:
                    69:80:69:65:f9:1b:50:2a:f8:be:8f:4f:06:d1:29:
                    2a:ae:e5:3a:1b:ad:52:4f:1a:6d:8c:bf:c7:6c:80:
                    b2:d7:c3:52:da:e4:ba:14:dc:a8:28:84:f8:72:79:
                    31:f5:0f:1b:b0:c5:b8:27:1d:22:90:33:83:cd:98:
                    a4:df:93:fc:2c:1e:bf:1c:2c:1c:31:0c:56:ea:99:
                    33:cd:4c:0e:1c:27:1b:6c:ed:b7:57:f8:87:b8:62:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:80:05:91:AD:24:A5:31:37:77:18:6D:78:C5:C3:35:28:4E:A4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fded28e9-887f-3153-805b-7161f8b259a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:3c:d1:c5:2a:bd:0d:99:be:7f:6e:bf:11:2c:92:8e:19:
         e3:0a:f7:b5:0b:a0:d5:22:2f:12:49:03:ac:2c:0d:82:1e:a7:
         6a:c3:cd:18:90:f2:32:93:ab:25:35:31:e6:f4:66:c8:35:04:
         0b:af:26:86:f6:d7:63:92:d6:9a:d1:f1:83:65:57:7a:49:1f:
         5c:aa:d5:b5:0e:18:90:d3:70:9f:c7:32:96:71:f5:1b:62:6d:
         2f:63:5c:cd:d5:a9:bd:0d:ce:c1:95:f4:b4:01:28:23:37:7c:
         44:d2:b5:05:01:69:ee:3e:2d:d6:e6:e6:0c:5f:61:c8:e4:a4:
         c6:db:ce:07:aa:9e:b2:f8:6d:b9:c1:d5:17:c3:31:b6:09:c5:
         76:0f:28:41:ae:44:63:f4:e1:11:39:83:a5:18:20:14:fc:e2:
         ca:17:d6:0b:08:ca:17:2f:d7:ae:45:d2:93:5d:72:68:ea:f1:
         e8:61:2d:d4:92:d6:3c:b4:83:a7:0c:13:58:d0:4e:ce:be:3e:
         d0:51:d9:d7:e7:13:76:0c:22:39:7a:1f:bc:5d:8a:a5:0d:2b:
         64:2f:bd:7a:2a:2a:6a:40:20:20:09:1a:80:5d:84:bc:20:3c:
         e5:30:76:63:fa:97:05:13:14:00:3a:b4:a8:48:05:ed:d0:8f:
         c9:dc:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:50 2023 by rpki-client on console-fra.rpki-client.org