Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37666603-bd9b-3e60-9ca2-7d336f262e81.roa
File:                     37666603-bd9b-3e60-9ca2-7d336f262e81.roa (raw, json)
Hash identifier:          kHJRBzrpqLF7tOVKIhMXayWtwW1GWoft4yrzydzE7do=
Subject key identifier:   BA:8E:38:68:C6:CB:67:34:F2:54:F4:1A:97:E0:18:8D:DB:AC:2E:19
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE47FCDFCD6AA89AB013680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37666603-bd9b-3e60-9ca2-7d336f262e81.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        76.70.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:7f:cd:fc:d6:aa:89:ab:01:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=bd59f1be-f6ea-46ce-ad69-f23e3f1244a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:d6:5b:0e:2e:b9:78:59:97:b8:e2:d0:c4:
                    ef:57:f4:30:de:04:63:ad:60:98:01:90:d4:ce:3e:
                    1d:27:7e:c6:0a:77:ab:16:6b:3d:77:a5:3a:ec:b0:
                    88:1a:c6:02:f2:93:dd:09:94:b3:19:3c:0a:cf:4a:
                    dd:06:51:1e:55:4d:35:30:42:23:e7:8d:65:6a:10:
                    bd:9d:38:4c:9e:a8:d3:79:22:b9:22:69:f2:2e:48:
                    7e:3b:3b:c8:81:cc:ac:6e:0b:06:72:8e:86:20:8e:
                    a9:ce:c4:e3:f7:44:7d:ef:3a:ab:80:1b:49:5b:e4:
                    20:ad:8f:76:cd:84:7e:b5:01:05:32:21:44:71:a9:
                    11:c8:1c:19:56:ae:e8:cf:ca:5a:8d:86:91:06:8a:
                    fe:d7:c5:31:c6:22:d9:9d:d6:ed:75:7f:e0:13:46:
                    2b:c2:66:29:7c:b5:30:a5:72:3b:67:c3:0d:08:06:
                    c7:5a:be:5e:23:74:40:cc:86:76:c2:a8:d8:99:58:
                    4d:44:ad:d5:e2:c1:fe:ca:c2:c9:0c:f8:37:9d:7c:
                    e5:b3:f1:c1:d6:2c:66:9e:0c:13:a4:a5:26:b0:6c:
                    cd:03:75:2d:79:0e:22:37:79:4d:fe:e9:67:78:ab:
                    e0:78:17:b8:58:46:83:0e:9f:08:9a:0f:88:84:db:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:38:68:C6:CB:67:34:F2:54:F4:1A:97:E0:18:8D:DB:AC:2E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37666603-bd9b-3e60-9ca2-7d336f262e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:83:10:ab:ca:02:c2:c6:4a:26:4a:25:7a:35:5d:0f:fe:
         51:60:b3:95:83:db:d0:86:14:cd:f4:c0:da:f6:60:be:77:c7:
         ab:c4:9e:18:d8:ab:a9:10:b2:d3:30:e0:f9:71:c3:be:e2:f5:
         e9:10:d6:c6:7e:c7:65:c2:5a:64:cc:f9:32:0e:f3:77:5d:12:
         6e:96:cd:7d:2b:0d:9d:25:fb:51:dc:a5:b4:cb:01:57:d9:04:
         0c:aa:f2:93:68:b6:4a:36:2d:ae:76:7e:c4:d3:f7:70:28:95:
         45:ae:ea:fd:8a:27:80:01:77:21:24:68:57:bd:2a:7c:2b:60:
         8d:5f:b8:f0:2a:43:46:58:04:2a:3d:cf:6d:f3:99:c0:4e:fc:
         15:b6:fa:81:4a:bd:0f:db:10:68:4d:eb:ec:a3:ad:fc:d4:1e:
         ca:be:45:95:64:f8:7a:30:cf:7a:dd:c2:54:a3:01:56:e9:b4:
         98:b6:d4:b8:80:e4:49:b2:53:08:d8:fd:0d:35:12:5e:db:c4:
         9f:54:62:e2:ed:b7:5d:9f:ef:4f:ac:b3:d3:26:9b:ec:d7:0e:
         8f:07:cb:a6:e2:03:ca:6a:c6:b7:93:d8:e9:58:a1:4f:87:67:
         1b:18:c3:e8:72:52:cf:4d:d4:33:e8:34:a5:fd:b5:2b:5c:b3:
         d2:76:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org