Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/144d333b-6786-368c-9bf5-0a483bef1763.roa
File:                     144d333b-6786-368c-9bf5-0a483bef1763.roa (raw, json)
Hash identifier:          bI0ZlMJus1/s+LSWnlrgb2WgppG/j6dPciFSegOzIN4=
Subject key identifier:   D9:5B:85:94:51:1F:0F:0C:FA:45:0B:A3:0C:F6:B9:33:9C:B1:C7:D6
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F43285844511430D8CDD85D9CBD56E140
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/144d333b-6786-368c-9bf5-0a483bef1763.roa
Signing time:             Sun 24 Dec 2023 02:00:16 +0000
ROA not before:           Sun 24 Dec 2023 02:00:16 +0000
ROA not after:            Sat 23 Mar 2024 01:00:16 +0000
asID:                     6128
IP address blocks:        173.229.64.0/18 maxlen: 24
                          209.140.32.0/19 maxlen: 24
                          192.208.120.0/21 maxlen: 24
                          162.216.56.0/21 maxlen: 24
                          107.188.0.0/17 maxlen: 24
                          50.29.0.0/17 maxlen: 24
                          47.16.0.0/14 maxlen: 24
                          63.143.128.0/17 maxlen: 24
                          63.142.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:51:14:30:d8:cd:d8:5d:9c:bd:56:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec 24 02:00:16 2023 GMT
            Not After : Mar 23 01:00:16 2024 GMT
        Subject: CN=ed0a44dd-53e9-44fd-8d4b-7a6095ee7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:a3:72:d9:33:05:59:15:66:be:3a:eb:20:
                    76:f7:51:bc:7f:7e:2a:68:d9:66:e4:03:03:65:d2:
                    2d:6f:d1:0f:54:83:f3:52:cf:cc:57:37:80:88:44:
                    da:27:56:a2:b4:be:fe:3a:ac:22:06:45:4d:8c:f5:
                    77:70:8e:d8:cf:9f:fe:a0:88:64:fc:72:b5:33:8f:
                    a1:b5:e3:3b:70:a2:38:98:42:06:8b:2a:ed:e6:df:
                    b9:10:34:5b:3e:89:23:aa:42:f8:0f:35:16:21:85:
                    90:96:4a:a5:ac:71:03:e9:e5:62:e2:20:d0:18:9b:
                    15:07:c6:ca:51:f6:de:84:91:34:91:1d:f8:ed:51:
                    01:e6:e2:74:31:50:83:f6:ad:1a:e9:cc:9a:37:29:
                    ec:6c:15:42:0f:71:8d:27:93:33:d7:70:2d:c6:df:
                    37:6b:85:9e:57:1f:80:e4:d3:91:ab:7b:cc:f9:ea:
                    d0:08:41:3d:6b:9c:94:c1:ba:93:a3:48:cd:83:81:
                    00:2b:3e:73:97:48:26:85:a3:70:0d:f5:9f:99:53:
                    9d:22:fe:64:c3:5e:4c:ef:fa:a7:73:fb:5f:6b:e1:
                    88:df:85:e8:97:86:cd:f7:3f:34:08:7c:33:70:c2:
                    a0:32:f6:7d:0d:f3:47:ba:fc:4c:bc:36:35:88:26:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5B:85:94:51:1F:0F:0C:FA:45:0B:A3:0C:F6:B9:33:9C:B1:C7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/144d333b-6786-368c-9bf5-0a483bef1763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.16.0.0/14
                  50.29.0.0/17
                  63.142.16.0/20
                  63.143.128.0/17
                  107.188.0.0/17
                  162.216.56.0/21
                  173.229.64.0/18
                  192.208.120.0/21
                  209.140.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:20:df:47:42:2a:5d:ad:c6:dc:67:dd:1e:d8:fc:6a:6b:
         22:af:85:5c:f7:4b:88:fe:c2:59:72:a8:e1:1b:cb:e8:44:4c:
         c3:0e:6b:79:cb:f0:44:d9:38:14:4f:1e:09:a3:2c:9d:91:50:
         3f:2f:4e:8f:77:09:6b:85:72:99:04:cd:ae:ee:fb:12:dc:9d:
         f5:94:e9:a6:a6:25:49:1b:c9:76:12:91:1c:b4:cb:c0:94:06:
         ad:23:b7:d5:c7:fe:1e:37:a5:e5:29:0e:bc:7d:9b:06:e8:b8:
         81:ad:54:4e:f5:af:fe:40:93:1a:ff:29:e9:22:5e:dc:d4:ce:
         53:2f:90:9f:b2:99:a9:19:52:a3:c5:9a:b6:b3:8e:db:b2:c2:
         e8:c3:f6:45:02:96:0f:a4:7b:ce:77:83:dc:72:cb:0c:09:78:
         58:d5:5b:08:cf:00:32:4f:f9:63:ca:0a:4e:2b:74:d4:c3:15:
         0b:c9:9c:29:fe:ba:da:82:ce:d3:2f:f2:36:6a:56:e6:9e:26:
         fb:c9:9c:0f:6c:9f:48:a0:ac:4e:ce:71:d0:31:d3:ac:88:e2:
         00:53:23:c1:f6:6f:35:e4:62:5f:95:06:d0:0a:f7:2e:00:d5:
         b2:e9:bb:8b:23:bf:81:c7:5b:d1:e8:26:b6:91:4a:e9:47:44:
         92:4e:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:06 2024 by rpki-client on console-fra.rpki-client.org