Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f27c5cc-b8f2-32f4-94ee-2fe4af426b6a.roa
File:                     6f27c5cc-b8f2-32f4-94ee-2fe4af426b6a.roa (raw, json)
Hash identifier:          J13TLLilFyINUdiS8jaSC/qi0bkItRUwBPDtm11WXu8=
Subject key identifier:   E0:40:80:F6:76:C1:4E:FA:DE:D2:63:07:90:F6:B1:14:2D:49:9E:64
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE49C21A201939615DED928
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f27c5cc-b8f2-32f4-94ee-2fe4af426b6a.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.134.176.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:9c:21:a2:01:93:96:15:de:d9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=81d65168-1e01-4698-908f-c536a014da23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:b7:d2:41:8b:56:e8:d8:85:b3:70:bf:16:
                    d3:ec:e5:ec:50:1e:34:bc:c8:31:3b:8e:d0:33:fd:
                    67:fd:d0:1d:0d:57:3e:a9:9d:89:81:14:c7:89:dc:
                    d9:c9:95:ca:3b:91:46:bf:21:f7:c5:d1:d9:4e:89:
                    6b:ff:b6:14:61:82:dd:fc:fc:e4:f2:fc:4a:c2:bc:
                    b3:f6:c0:8d:b4:7b:5e:85:d2:10:64:c9:7f:12:1f:
                    08:93:bc:f2:60:47:26:74:b8:99:32:84:18:48:de:
                    96:85:11:d1:e6:fe:97:e6:52:16:f2:89:08:5a:c7:
                    6b:ed:81:81:e3:43:4b:f0:98:57:7c:09:a7:d6:68:
                    b9:57:19:27:f4:fa:d9:5b:aa:51:69:69:4f:8e:f6:
                    e8:7e:5b:a3:cd:8f:57:f8:fe:43:7b:7d:34:6f:4e:
                    ab:65:79:48:fd:cc:a2:60:4c:25:98:54:9f:f9:66:
                    65:ba:9f:b5:69:43:64:44:9c:47:56:d9:ec:c3:d7:
                    c1:96:1d:ca:a5:09:82:c9:ea:29:e2:ab:fd:c8:f5:
                    59:ea:8b:b7:56:4e:91:b5:24:85:5d:e9:8f:77:6e:
                    c6:a5:c1:9e:74:cb:ad:4a:30:00:23:2a:70:b5:5c:
                    6f:e9:6c:76:15:9c:74:8c:c0:d2:92:0a:db:ae:e6:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:40:80:F6:76:C1:4E:FA:DE:D2:63:07:90:F6:B1:14:2D:49:9E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f27c5cc-b8f2-32f4-94ee-2fe4af426b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:54:62:c8:c5:d6:31:4b:ea:38:f6:a6:4d:fb:90:5c:0e:dd:
         d3:1d:fe:25:7b:39:8a:02:c0:fe:18:83:df:a0:d1:f0:f6:f2:
         c6:62:2b:d0:dd:86:dd:da:28:63:c0:fa:20:68:95:f2:4b:16:
         db:45:06:11:c5:e6:58:17:44:67:bb:c8:b8:81:8f:c7:19:68:
         5b:37:8d:8c:34:62:e7:e9:d9:4e:9d:75:ab:49:57:af:c1:35:
         d7:b9:c4:bd:81:eb:e7:5a:43:2f:c4:dc:8f:b7:09:bb:3d:7a:
         39:c7:c5:45:17:b0:5a:60:05:b7:2e:ad:b3:da:c5:c0:e7:55:
         f6:0a:32:20:04:04:4c:91:2e:24:20:50:8a:a3:07:d9:51:1f:
         b1:04:40:41:5e:55:88:67:08:fa:10:6c:32:e7:13:75:07:cd:
         1d:67:ed:6f:58:98:fa:de:ae:f9:8c:1e:c8:c2:72:56:45:13:
         1f:a7:8c:61:d9:da:09:a8:d7:cf:85:ce:09:3d:a4:e4:db:73:
         f9:4f:28:8e:8a:08:66:25:81:40:03:af:c1:ac:8f:d0:22:c8:
         8d:8e:85:cd:d4:2d:fc:7c:a0:bf:00:32:73:b1:3b:44:59:72:
         75:b4:fb:ba:53:37:cf:1b:62:d3:69:40:0e:24:08:37:b4:a2:
         bd:90:45:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org