Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c75aa70b-eaf9-3ca4-a932-0d4f7d413383.roa
File:                     c75aa70b-eaf9-3ca4-a932-0d4f7d413383.roa (raw, json)
Hash identifier:          o8hO15VyWKUJmmXiRev13aW9Avjy8YvcV3K+/pscQ3U=
Subject key identifier:   1A:61:23:53:C2:9E:6F:4A:4B:87:F0:CA:50:15:99:5C:63:60:A0:2C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314CD54055E7397BB741980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c75aa70b-eaf9-3ca4-a932-0d4f7d413383.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     12132
IP address blocks:        199.243.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:cd:54:05:5e:73:97:bb:74:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=6b7639af-1404-4a5d-9b43-b3f00db219f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:03:8a:56:92:d4:00:7e:a1:04:ca:58:72:
                    0f:f4:13:a3:54:06:ce:0a:a4:ee:3b:29:5a:79:63:
                    1c:04:17:1d:f6:15:3b:b7:9b:09:18:a8:28:e8:da:
                    67:ff:cc:d6:1a:ba:61:ad:13:58:39:32:a3:17:bb:
                    ba:76:f6:16:80:73:d4:67:aa:0d:f6:ef:2e:db:23:
                    0c:fb:dd:de:58:e1:44:f0:8f:b2:d5:40:48:05:d3:
                    da:22:d7:c7:5c:2e:6b:a5:a2:6f:ce:7b:d6:a8:33:
                    89:a1:b3:36:c5:f1:69:6d:1b:a1:b7:c1:46:73:de:
                    43:8f:75:a2:d2:0c:49:ae:6f:8b:e8:ce:62:0b:17:
                    41:90:8e:0c:49:3b:5e:46:bd:65:2c:c2:43:9b:7c:
                    da:25:82:9b:9f:f4:c4:c3:52:e4:6a:70:62:66:13:
                    1f:58:e7:d8:25:7a:92:1a:b2:79:40:9a:05:8c:7f:
                    fa:44:68:48:b6:22:68:a7:bd:af:63:67:99:2e:43:
                    6a:2f:f2:ff:98:ba:ce:1c:92:62:ad:ce:64:f9:e0:
                    dd:5b:41:ec:0b:67:6a:f2:8f:37:bb:6c:1a:de:eb:
                    35:e4:c4:e6:7d:ab:89:a1:3a:db:0d:75:8e:a5:5d:
                    49:6a:c0:16:d4:d9:a1:ec:76:57:6d:73:b5:44:d7:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:23:53:C2:9E:6F:4A:4B:87:F0:CA:50:15:99:5C:63:60:A0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c75aa70b-eaf9-3ca4-a932-0d4f7d413383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:3e:1d:69:6a:74:f4:a5:c9:78:10:0b:bc:bf:f9:26:83:
         d4:32:5b:fd:24:2c:7a:d3:45:ba:79:85:0e:22:60:28:d1:f7:
         93:66:38:56:ca:b3:a1:19:a2:99:28:6c:3e:aa:6c:e8:3b:e0:
         71:ab:6a:22:4d:5a:b4:0c:5b:4e:23:a8:39:e4:51:54:07:76:
         fe:45:e3:d8:4e:fe:e5:a2:fc:b0:85:16:71:01:76:7d:3c:88:
         c8:8d:0a:a7:24:09:ca:56:36:1a:b5:8c:40:a5:3a:67:06:29:
         06:86:21:a1:6c:38:51:7d:01:e8:24:22:7d:76:a8:2a:28:bc:
         0d:62:a8:1b:22:70:b1:df:85:8a:dd:fb:72:77:80:e6:6f:b2:
         31:4b:e4:0e:18:b5:0e:b0:be:25:e6:12:91:88:a1:e6:e7:5a:
         13:65:77:74:07:7e:7f:95:47:dc:44:20:15:aa:3a:32:a8:b9:
         26:14:04:4e:3a:ce:85:4b:27:98:d5:ef:eb:74:40:d2:56:a8:
         32:c5:8f:c3:8b:03:e4:eb:e7:02:8a:cb:de:ca:98:d4:32:5a:
         58:24:2d:d0:1e:53:f2:06:97:7f:28:33:c2:82:58:75:b3:a9:
         c6:62:80:c0:85:98:9c:85:43:9a:fa:9f:de:16:c0:88:c0:59:
         7c:02:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org