Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/142c0e08-78ad-3156-90df-80cb53168064.roa
File:                     142c0e08-78ad-3156-90df-80cb53168064.roa (raw, json)
Hash identifier:          lqEdkgrlcvENN2Xpe3k29cNBBjHIlF1waUOhHfZQ8M8=
Subject key identifier:   F0:E9:A3:B3:A8:23:03:93:07:C0:C8:2C:1B:05:5F:0E:2A:D5:3C:DD
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F432858429ED916FBE8A65EC665DAA500
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/142c0e08-78ad-3156-90df-80cb53168064.roa
Signing time:             Fri 21 Jul 2023 13:00:19 +0000
ROA not before:           Fri 21 Jul 2023 13:00:19 +0000
ROA not after:            Thu 19 Oct 2023 13:00:19 +0000
asID:                     35913
IP address blocks:        23.133.5.0/24 maxlen: 24
                          202.5.30.0/24 maxlen: 24
                          23.133.1.0/24 maxlen: 24
                          162.245.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9e:d9:16:fb:e8:a6:5e:c6:65:da:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jul 21 13:00:19 2023 GMT
            Not After : Oct 19 13:00:19 2023 GMT
        Subject: CN=549356c4-ac05-411e-b85b-9847bc59decc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:53:73:2b:32:41:49:5e:bf:45:a5:c5:f0:
                    72:d6:6f:ee:d7:b1:9c:18:f7:98:8c:75:56:5a:f6:
                    1b:59:bf:d5:14:41:84:b2:8b:0d:4e:b1:6a:2e:4e:
                    2a:ef:89:b4:a7:7c:d7:8f:a1:82:9e:9d:f5:6b:65:
                    a6:8a:b3:8b:c3:69:87:4f:80:5a:23:07:f8:fe:57:
                    c1:a1:db:6a:a0:09:ab:54:5d:c5:d4:77:19:89:da:
                    68:6f:2b:0f:c8:82:ad:23:cb:4c:74:79:d4:b6:80:
                    bf:de:0a:8d:7d:b9:33:d0:76:5a:64:16:43:41:47:
                    92:5c:8b:05:75:01:23:6a:05:47:77:89:96:db:5f:
                    ba:4a:fc:0f:01:54:e1:0a:7b:a7:7f:ba:b3:7a:d0:
                    dd:15:b9:34:1a:24:56:ec:cd:bc:84:57:50:61:59:
                    bb:54:fd:94:69:9a:f7:1e:e3:5e:09:2d:77:8c:6d:
                    2a:33:3a:39:d0:7b:f1:5c:c7:b8:45:47:37:b1:69:
                    65:b3:28:9e:ed:07:6f:4a:d7:e6:bf:5b:ae:e1:fa:
                    06:b3:07:d3:57:c9:56:9f:be:34:3b:ac:b3:d3:4b:
                    d0:7d:92:7b:ea:8a:a4:38:9a:5f:76:ac:76:df:b8:
                    52:35:7f:f4:c2:f8:9d:1f:3a:97:b8:32:9a:a4:f2:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E9:A3:B3:A8:23:03:93:07:C0:C8:2C:1B:05:5F:0E:2A:D5:3C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/142c0e08-78ad-3156-90df-80cb53168064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.1.0/24
                  23.133.5.0/24
                  162.245.218.0/24
                  202.5.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:e4:fb:33:81:1a:d8:8a:26:af:ec:9b:ab:22:b3:58:79:
         ee:a0:62:c7:ab:62:26:bb:45:ba:d1:5e:69:eb:19:e8:fb:4e:
         f6:82:7d:c1:af:a6:0a:2e:c4:69:0b:42:fb:c7:8f:3e:26:53:
         31:d1:b1:a2:89:b9:a8:a6:c3:c9:41:b9:f0:38:37:5c:ef:ed:
         c6:a5:62:4b:97:23:e8:b7:56:a2:87:bd:cb:93:12:f7:78:14:
         f2:d4:38:4c:6e:9b:b0:e4:36:c2:ba:72:c1:b9:d8:08:cd:2d:
         e4:23:56:55:d2:fc:5d:f5:03:cf:60:f1:44:6e:48:b0:00:f7:
         48:f8:bb:60:bd:9d:18:c9:69:d1:69:aa:dd:0d:e0:a7:77:34:
         db:d0:24:c4:0a:e9:90:f6:16:25:21:14:a5:4d:e1:42:89:bd:
         86:b8:a1:54:98:d7:ae:0f:8c:3e:2f:a2:10:e1:2e:34:95:42:
         d3:36:02:cd:ba:90:db:21:d1:68:ae:37:81:0f:8d:f6:16:99:
         f0:d0:ca:3d:37:0b:16:8a:e5:80:86:d7:e0:38:f0:05:3c:dc:
         91:bb:dd:b6:77:65:ff:e4:41:ab:3b:9e:84:3c:ca:d3:c5:dd:
         30:5a:1e:7f:f1:17:88:4e:9a:04:59:3d:0c:c7:e9:2b:0f:1f:
         c8:d1:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:03:35 2024 by rpki-client on console-fra.rpki-client.org