Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dab3f3e9-bedb-3f91-84d8-848fc5931550.roa
File:                     dab3f3e9-bedb-3f91-84d8-848fc5931550.roa (raw, json)
Hash identifier:          atjW+UyzUVErmSl3lIyqPc8xD64qlqDt4qRppi41h9g=
Subject key identifier:   F6:B6:BC:EA:5D:DA:31:72:27:EB:B3:48:B3:07:33:B3:08:05:A5:04
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB002B7509DF50F477D7400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dab3f3e9-bedb-3f91-84d8-848fc5931550.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        204.101.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:02:b7:50:9d:f5:0f:47:7d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=bbf79a3b-4bd3-4c60-a7fa-480bca750bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:53:a5:b7:ba:f0:87:3d:9e:ee:b6:f4:33:
                    43:22:35:0a:54:37:39:e3:c9:d0:4e:7d:12:43:8b:
                    20:c4:77:25:aa:5d:e5:4a:f9:8f:ad:33:b9:83:f4:
                    7f:e4:28:5b:4a:c7:23:2f:63:c1:e4:10:bf:39:a0:
                    0d:4d:db:56:05:aa:d3:06:99:d1:7e:65:19:b9:56:
                    56:16:e4:df:da:69:b2:2f:bc:f9:e1:19:5c:fc:b2:
                    ba:9f:64:61:1c:2e:c5:3a:b1:be:e5:db:ff:53:66:
                    62:1b:6b:0c:ba:6a:22:c9:34:01:4a:b2:b6:69:f7:
                    ca:9b:87:0d:ef:dc:05:99:52:64:ae:6c:8c:fb:bd:
                    84:a6:5f:c5:7e:0a:77:e2:c8:98:b4:09:cd:70:bd:
                    c9:7e:92:8c:af:3d:ae:6d:9b:81:6b:32:42:e4:c6:
                    68:cd:31:0b:f9:49:27:e1:c5:7a:0c:3d:26:dc:69:
                    63:36:63:29:f2:5e:ab:b0:2f:c1:46:7b:9a:c1:de:
                    85:2d:5d:2e:8c:52:2d:50:29:00:05:e8:2a:a6:a2:
                    c7:70:08:07:6d:ac:2e:ba:ab:c2:04:95:06:b5:6b:
                    dc:9b:e7:0f:b4:8c:29:9d:63:c7:a7:30:f9:93:b1:
                    3c:31:cf:58:60:51:5a:66:f4:ed:2f:e6:44:fe:ce:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:BC:EA:5D:DA:31:72:27:EB:B3:48:B3:07:33:B3:08:05:A5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dab3f3e9-bedb-3f91-84d8-848fc5931550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:2b:55:a7:7a:cf:df:15:c9:dc:c7:d4:13:5e:c3:53:57:
         88:bb:85:9d:65:a1:f8:0a:d3:29:3e:42:92:a2:3f:0a:95:12:
         6c:8f:a1:93:88:75:07:7a:6c:2f:fc:e8:00:7c:0a:60:bc:c2:
         b6:e9:73:f0:99:b7:bb:08:a3:1f:ed:b9:a3:02:af:6b:42:24:
         22:e5:e1:7c:93:99:46:41:f8:e9:6c:4d:9d:6a:cc:9c:19:d3:
         5e:ed:bb:85:2f:37:83:10:bb:b2:35:ce:e7:da:dd:e8:32:04:
         96:72:ee:26:76:59:ed:0a:aa:85:93:e3:87:2e:be:25:fb:4f:
         60:75:20:da:68:c6:7a:7c:f8:a6:93:63:e8:b1:1e:f1:2a:f4:
         16:69:f2:c5:63:a4:f4:4d:7d:46:cf:fa:f9:d3:e2:df:0c:6e:
         22:1d:1c:8d:07:dc:55:21:87:f7:e1:b9:99:39:a2:48:f0:ee:
         a5:ff:e1:7e:22:bf:50:c0:f2:bb:23:a9:b2:a3:a7:af:d8:13:
         a1:8d:8e:96:9d:ed:dc:36:e8:2e:d8:c9:20:ab:ee:ec:7a:05:
         e8:8f:96:7e:e0:63:76:ff:44:a0:86:95:23:97:be:ec:a9:36:
         54:0a:f4:12:3b:c0:4d:7c:fd:4f:25:5e:bd:bc:bb:a8:74:82:
         65:a6:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org