Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41ea2fb7-7540-3052-83cb-b0bd1a4270dd.roa
File:                     41ea2fb7-7540-3052-83cb-b0bd1a4270dd.roa (raw, json)
Hash identifier:          bB1D09vCxVr9jsKLwb18Ow9V8pGskL7XeX0Sup+gCf4=
Subject key identifier:   C3:01:94:F5:40:48:2B:DF:6B:C0:BD:5A:C8:66:8F:13:73:9F:39:93
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC17349B8C4AF
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41ea2fb7-7540-3052-83cb-b0bd1a4270dd.roa
Signing time:             Mon 13 Jul 2020 19:48:32 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     26114
IP address blocks:        165.254.12.0/23 maxlen: 23
                          165.254.230.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:b8:c4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=a1efc59e-845b-4563-bb66-011f2c73fd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:3b:d4:d6:52:52:dc:67:e4:3e:0c:ec:dc:
                    63:ad:23:f2:56:b9:1e:7a:ab:79:87:b3:d4:fc:14:
                    08:2a:84:6c:f9:c6:5a:41:25:62:5c:96:5b:43:f8:
                    b6:1b:39:43:d7:7f:19:a0:3c:d6:a0:a9:19:d4:85:
                    f2:49:59:46:c2:4e:d7:e0:97:2f:f0:9f:14:3b:67:
                    9b:2b:b4:22:9a:10:be:14:76:31:0d:e2:be:48:49:
                    91:c4:c8:70:4c:b5:f4:99:ba:aa:72:dd:82:7e:5d:
                    a4:5b:16:73:90:71:6c:3e:14:5b:9d:ed:0d:ff:f6:
                    ac:6e:2e:50:52:18:a1:b4:6e:0b:1f:dd:a9:b0:0f:
                    1e:1c:43:73:4e:6a:af:65:85:b4:ec:6f:97:45:01:
                    2c:ca:b9:de:6a:52:0f:8f:21:bc:0e:da:9c:58:3f:
                    c9:71:78:a8:0f:75:cb:e4:04:7b:36:3e:ce:a1:3c:
                    0b:50:8b:57:3d:9f:24:75:fb:54:82:38:39:51:ae:
                    8e:ef:54:53:9e:07:4c:4f:6d:20:8b:b6:ae:a9:c0:
                    ee:c3:4e:37:97:45:b1:87:7a:0f:d0:fa:b9:38:18:
                    9b:10:f2:6a:a0:cf:ca:98:c3:93:26:a4:88:4a:b3:
                    78:04:ec:a7:c0:7a:1c:e0:7f:62:3d:2b:cb:50:9d:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:94:F5:40:48:2B:DF:6B:C0:BD:5A:C8:66:8F:13:73:9F:39:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41ea2fb7-7540-3052-83cb-b0bd1a4270dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.12.0/23
                  165.254.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:c5:17:e9:55:74:50:97:2e:7a:26:1e:3f:49:78:98:7c:
         1f:fb:fd:ca:1c:a3:ec:96:dd:27:9a:67:76:60:de:50:ae:fc:
         18:0b:91:e5:9a:32:42:49:b8:83:02:fe:9e:02:43:79:75:d0:
         8d:59:fe:90:ee:77:10:bf:f9:b3:c6:30:0b:50:4d:0b:a0:a7:
         f4:73:b6:b4:a3:15:e9:14:61:e8:58:a1:56:c2:2a:9a:75:88:
         48:76:ea:6f:d9:14:b9:78:50:0e:e4:2b:6c:f0:a1:6c:9f:8c:
         ba:e3:0d:b8:a4:c6:f6:56:c6:a0:cf:f2:67:32:20:2e:5e:b0:
         c6:70:5b:10:13:9c:04:41:3b:5c:e8:98:b6:0a:aa:7b:c0:cb:
         ad:83:c9:ac:31:7b:89:c2:d6:11:62:17:48:e2:71:6b:02:d7:
         df:fa:7f:57:50:11:44:18:ee:79:f8:f4:00:47:ae:03:79:a6:
         a5:9a:b7:3d:ad:1c:0c:87:52:38:5b:17:0f:8e:b7:f9:ba:e3:
         8b:60:86:44:11:8f:52:45:f9:d7:02:80:98:02:1a:fc:07:2c:
         06:2c:47:86:0e:22:a9:6c:dd:59:8e:f4:e9:8e:20:bc:b7:80:
         b9:27:20:1c:74:1e:96:b8:80:9e:16:f6:80:66:eb:de:91:7c:
         e9:ad:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:24 2023 by rpki-client on console-ams.rpki-client.org