Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/182ffed6-9040-3288-b90d-2e61e65a92d0.roa
File:                     182ffed6-9040-3288-b90d-2e61e65a92d0.roa (raw, json)
Hash identifier:          Avbu8meyph2OC/d2xF6mbrcVbHOypRv3og2ckYPn5vI=
Subject key identifier:   56:01:D4:9A:82:21:F9:A5:F9:21:9A:5B:AF:56:FE:E3:31:E1:71:74
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493150CA4DE40C5F627470E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/182ffed6-9040-3288-b90d-2e61e65a92d0.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:0c:a4:de:40:c5:f6:27:47:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=679a3a59-e3b5-4d23-926f-defbd0e7a457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:bf:bf:d9:43:83:8c:e0:11:14:f6:10:e2:
                    35:1b:ea:2a:1c:8f:29:71:52:dd:f7:98:d2:b1:1a:
                    07:7b:9b:4e:8a:f0:a9:4c:77:dc:54:a1:10:34:ec:
                    96:f0:3e:65:2a:b6:f1:3b:2c:31:a6:e3:92:69:b0:
                    c9:b7:dc:72:68:c5:aa:4e:db:21:dc:25:2b:2c:a2:
                    71:bf:62:4e:33:0d:53:77:6d:ea:5a:f5:d7:52:15:
                    9a:23:78:bc:22:ac:c1:16:68:60:2d:19:c3:d8:01:
                    54:aa:28:76:c3:3a:04:0a:05:0c:94:50:ba:75:fe:
                    18:40:74:be:9b:a3:fe:ef:88:01:9a:6e:19:09:79:
                    d4:89:be:9d:09:c4:b6:5c:6e:1b:ee:bb:d6:8b:1a:
                    21:0d:3f:05:e7:19:f9:bb:ac:73:68:f6:9b:80:a6:
                    86:22:d5:93:08:62:90:cc:f3:1e:6d:0b:c3:f0:7d:
                    69:a7:0f:c7:41:b0:0b:10:81:5d:4a:ae:02:64:ba:
                    d3:09:d1:c7:ee:30:64:d8:e0:44:8a:f5:7c:6e:6f:
                    4e:7e:e2:ab:ee:e0:9f:06:a0:87:ee:23:4e:64:7f:
                    08:ce:4e:19:fc:34:42:51:32:55:3c:fb:01:b0:38:
                    25:84:a7:53:67:03:c5:c6:fb:29:96:5d:5d:46:bb:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:01:D4:9A:82:21:F9:A5:F9:21:9A:5B:AF:56:FE:E3:31:E1:71:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/182ffed6-9040-3288-b90d-2e61e65a92d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:0a:1a:f4:16:1e:17:6e:5f:17:df:d8:94:61:79:38:85:
         9e:00:19:ae:7d:47:c0:3d:15:72:95:35:80:8f:a5:bc:aa:44:
         06:77:b2:35:ef:45:cd:45:c5:98:57:f9:f2:03:09:1a:62:19:
         69:67:f8:85:a3:e7:e3:29:d7:d6:13:26:94:41:33:ab:f6:38:
         a4:bf:2f:72:87:76:f9:2e:67:28:78:65:78:d2:c5:c0:11:34:
         68:e6:bc:ac:a1:9c:1c:a1:98:5a:bd:ed:8a:51:59:b6:6c:a4:
         03:43:04:be:26:e5:ab:d6:fc:0e:b3:43:3a:87:38:ae:b4:df:
         b9:42:dc:e7:d3:71:b4:87:c4:61:6b:f0:ef:c4:5f:69:43:bf:
         0b:21:a1:ba:e9:89:63:51:cc:33:dc:91:ba:8f:ec:3c:22:51:
         7b:27:38:e4:c3:06:a5:07:76:8f:59:de:2b:e2:14:4a:2e:f2:
         c7:8d:47:34:48:cb:d1:57:2b:b3:6e:f7:b5:09:d8:fe:12:b7:
         c6:22:69:13:03:b1:97:e4:10:5c:b6:d9:d2:28:3a:81:72:4c:
         2d:f9:ff:de:f9:27:3e:be:8e:1a:a1:9a:e8:34:fd:31:7a:01:
         b7:49:d9:f5:60:aa:fb:76:6a:63:82:c1:5d:da:55:8d:25:54:
         0d:3a:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org