Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/bed543f7-2edf-3dbc-b18e-6b23194986f8.roa
File:                     bed543f7-2edf-3dbc-b18e-6b23194986f8.roa (raw, json)
Hash identifier:          Guaz60bB+8EZdOCATAy2rLdhXDzOjWjAFrl+6jFrZhQ=
Subject key identifier:   FA:EF:1A:94:B2:EC:27:20:BB:B8:E0:B6:CE:11:9F:22:2B:03:F9:F1
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F432858440183C131A9D3B312EC7E2FC0
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/bed543f7-2edf-3dbc-b18e-6b23194986f8.roa
Signing time:             Sat 25 Nov 2023 14:00:21 +0000
ROA not before:           Sat 25 Nov 2023 14:00:21 +0000
ROA not after:            Fri 23 Feb 2024 14:00:21 +0000
asID:                     13768
IP address blocks:        66.180.145.0/24 maxlen: 24
                          66.180.150.0/24 maxlen: 24
                          66.180.146.0/24 maxlen: 24
                          66.180.156.0/23 maxlen: 24
                          66.180.154.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:01:83:c1:31:a9:d3:b3:12:ec:7e:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Nov 25 14:00:21 2023 GMT
            Not After : Feb 23 14:00:21 2024 GMT
        Subject: CN=49c86d3d-b660-4df2-91dd-ed8702af64bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:92:03:8d:22:b8:03:1e:68:b5:f2:07:9c:
                    89:22:9b:c2:49:f3:7a:fa:df:2f:04:ea:bb:2c:bc:
                    57:59:6f:5b:d2:05:a8:ca:d8:2a:57:d0:b0:9a:05:
                    75:b0:40:14:30:c9:ee:d2:a9:52:12:fb:8b:cc:28:
                    bd:56:87:69:31:84:6c:5e:05:a2:6d:d6:2c:9b:85:
                    8b:c5:2e:dd:fb:18:94:b9:00:04:9c:32:67:27:a5:
                    6f:4b:a1:f1:f1:ea:65:35:71:e2:a3:62:fc:4c:3d:
                    40:bd:05:52:43:2c:20:4a:e2:26:55:04:73:0b:e4:
                    58:84:1f:7d:91:e0:c9:a6:b9:1c:db:cc:a8:15:97:
                    aa:eb:c9:ac:44:bf:82:1e:8e:89:f5:37:b2:1e:3a:
                    24:39:b1:73:54:fa:19:01:01:a2:63:94:09:76:62:
                    7b:33:86:47:5c:0a:3f:6a:e3:10:e0:f3:c3:c3:d7:
                    c1:61:76:9b:ed:42:94:69:71:37:fa:e6:2d:c0:0b:
                    4c:e8:01:ee:65:08:95:f9:7e:1a:05:79:b7:bd:bb:
                    9c:1f:03:a0:82:8a:6c:91:38:95:be:a5:6f:f2:4e:
                    7e:87:a3:93:8e:cc:32:5e:1d:14:c5:bd:f2:e4:14:
                    e1:60:fe:10:09:80:83:f1:32:96:7a:0e:ce:c6:46:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:1A:94:B2:EC:27:20:BB:B8:E0:B6:CE:11:9F:22:2B:03:F9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/bed543f7-2edf-3dbc-b18e-6b23194986f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.145.0-66.180.146.255
                  66.180.150.0/24
                  66.180.154.0-66.180.157.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:43:83:61:ba:a3:e9:8f:ac:a6:31:bf:8f:80:d8:8e:3a:3b:
         ad:82:eb:8e:39:d2:21:fc:e5:39:e4:b1:b1:05:07:3c:89:ef:
         1d:92:e8:19:14:30:ac:b6:2c:6f:9a:97:4d:a7:71:87:15:4d:
         37:89:9e:31:3d:ea:7e:ff:0c:0b:11:2b:00:fc:6d:c3:66:37:
         3d:9e:a8:d7:86:ba:e8:3c:48:37:2d:ae:69:8f:a1:d8:53:25:
         09:62:11:9e:d8:5f:94:fb:fd:ce:a1:c6:7e:fb:d1:4b:4d:6a:
         43:82:44:dc:70:f0:97:b2:18:ea:b4:fb:60:bf:09:b4:b4:0a:
         6a:91:f3:d4:38:2c:73:1b:b0:cc:64:7d:cf:14:ef:d7:48:50:
         6f:61:19:06:74:53:6a:89:66:fd:a1:66:ca:3d:56:c0:77:62:
         21:b9:42:c1:8a:3e:88:07:b9:b5:d6:d0:b2:0c:e5:06:0e:fe:
         30:c9:0a:07:23:47:c8:53:c1:12:73:b1:8d:9b:1e:f3:58:fb:
         64:84:fa:b2:11:c1:73:71:05:ca:ca:aa:88:13:18:9b:79:cf:
         e3:b7:a8:ba:75:82:8c:4e:b2:c3:e6:08:9f:2c:d0:7f:53:c6:
         84:a6:08:25:36:01:48:63:1d:cb:50:9d:f6:71:1c:06:2e:a5:
         de:f9:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:22:32 2024 by rpki-client on console-ams.rpki-client.org