Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/c1f18148-310d-3beb-85dc-45691848a622.roa
File:                     c1f18148-310d-3beb-85dc-45691848a622.roa (raw, json)
Hash identifier:          FLiO7ugyxOLEQ9qaVRlxrv4aLlQusEKWYHogXXQ499M=
Subject key identifier:   D3:DF:EC:6C:AE:3A:48:65:21:7D:6E:0E:86:3D:2D:9C:9C:E1:F4:23
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F43285842B95E8E8B85974046B34A1980
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/c1f18148-310d-3beb-85dc-45691848a622.roa
Signing time:             Mon 31 Jul 2023 01:00:17 +0000
ROA not before:           Mon 31 Jul 2023 01:00:17 +0000
ROA not after:            Sun 29 Oct 2023 01:00:17 +0000
asID:                     400384
IP address blocks:        66.245.166.0/24 maxlen: 24
                          66.245.167.0/24 maxlen: 24
                          66.245.164.0/24 maxlen: 24
                          66.245.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b9:5e:8e:8b:85:97:40:46:b3:4a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Jul 31 01:00:17 2023 GMT
            Not After : Oct 29 01:00:17 2023 GMT
        Subject: CN=0a06c08c-15f2-4beb-88c2-a34b733ba691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:aa:7a:23:7a:4b:28:d1:51:2b:8b:3b:7c:
                    30:ac:35:b0:5a:aa:f6:f1:de:f5:6d:20:9b:dd:d0:
                    e9:f4:a4:8f:db:c2:4f:26:bf:90:9d:90:33:7c:6e:
                    32:ec:ff:91:3c:13:d5:ff:4d:41:0f:38:57:91:72:
                    7c:c5:63:ba:c3:93:e5:ff:6c:a9:10:29:c6:25:d0:
                    df:b3:25:4d:b9:55:f4:ba:25:bf:2e:37:25:f9:83:
                    aa:cf:6c:af:94:9c:26:91:e7:3b:74:0b:d4:02:19:
                    d4:2f:c8:b6:90:6b:fd:ae:c4:21:c0:af:e2:8b:24:
                    a6:04:79:bc:eb:a1:6c:08:2d:9c:22:e4:e8:f0:bf:
                    3d:a9:11:40:31:ad:05:da:e4:ca:e8:2b:46:82:5e:
                    77:f3:02:cc:b2:32:e0:35:42:5c:bb:8c:1d:c8:e0:
                    db:50:ca:2a:91:e7:3b:64:a8:02:74:af:05:12:7a:
                    82:21:b8:1e:ab:a0:31:ec:5a:58:47:c5:fd:30:ee:
                    5c:04:f3:30:05:94:a6:d9:a7:92:8b:bd:76:de:c9:
                    45:41:17:11:b4:52:96:cb:b7:89:56:71:04:00:8f:
                    30:0b:8d:a2:07:b6:9e:e4:fa:44:bf:4b:3c:06:10:
                    c6:04:cf:96:4a:02:3a:de:f2:bb:5f:37:28:67:55:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:EC:6C:AE:3A:48:65:21:7D:6E:0E:86:3D:2D:9C:9C:E1:F4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/c1f18148-310d-3beb-85dc-45691848a622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e9:bd:62:ed:2f:9b:7c:b0:01:17:02:e9:1a:00:ab:9a:8a:
         af:f7:92:99:a4:6f:0f:79:bb:d3:2f:94:a6:94:36:7e:39:91:
         57:05:14:64:1f:11:88:d0:80:12:c9:11:e9:fa:4b:58:3e:1a:
         a6:6d:ff:33:7d:d1:e2:cf:d8:05:0c:55:35:be:e7:33:19:99:
         08:f8:12:9d:60:0d:43:3d:c5:aa:ca:24:40:4c:40:bc:7f:49:
         f8:17:82:d0:a9:16:53:3d:54:9b:c1:65:33:19:45:9b:db:f5:
         08:3e:ee:61:ec:84:a3:c2:df:b8:b5:1f:c7:3a:77:04:27:e1:
         70:6d:6b:f0:9d:30:23:83:bf:a6:8d:5b:d7:66:5d:af:b5:6d:
         70:42:22:cd:14:5e:d6:e1:52:f9:1b:d8:c2:3e:66:11:56:bd:
         d6:e6:4d:3d:19:b9:25:5e:85:55:49:c3:46:b5:07:f3:04:23:
         17:b0:a9:b5:59:d9:af:db:13:a9:f1:9a:eb:f3:8d:4e:d1:48:
         e1:d2:17:e2:9c:86:b6:91:31:35:d6:2f:9a:41:eb:81:0b:15:
         1b:91:08:e2:4e:d8:2d:b6:54:9c:59:0b:e0:cf:9e:53:c9:26:
         7f:28:90:a7:9d:52:ef:52:3a:43:2a:b6:e4:b1:89:a4:8d:c8:
         83:23:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:06 2024 by rpki-client on console-fra.rpki-client.org