Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76585cae-748d-3993-bbd0-aa4fe3ee381b.roa
File:                     76585cae-748d-3993-bbd0-aa4fe3ee381b.roa (raw, json)
Hash identifier:          RPwkYowYZwuVuhXlUB4OVXENRa997FM/NOI5Yu91w8k=
Subject key identifier:   9D:D7:F4:F3:07:DD:75:D0:0D:B5:D4:F0:A0:17:86:03:EB:4A:56:2C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583A47D48A99F2575792BB895B60
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76585cae-748d-3993-bbd0-aa4fe3ee381b.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 19 Sep 2023 04:00:00 +0000
asID:                     49846
IP address blocks:        168.143.254.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:47:d4:8a:99:f2:57:57:92:bb:89:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Sep 19 04:00:00 2023 GMT
        Subject: CN=f8df6d60-78e5-4346-b5c3-f7566b0a5715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:44:0b:11:25:6e:9c:0f:b0:c8:f1:8a:51:
                    35:a2:7e:4d:78:fe:f1:98:3f:8e:4f:64:fb:fe:a2:
                    00:aa:4f:f0:a5:75:73:fd:82:cb:24:17:dd:32:53:
                    12:e0:5c:d4:0c:ab:ad:a4:62:c2:f2:b7:c6:99:0d:
                    c0:ae:15:68:ff:b3:9e:a9:a8:71:9b:9d:ed:27:58:
                    42:ba:4e:87:c2:46:13:8d:b6:80:90:e0:38:02:45:
                    f2:9f:25:d9:1f:bc:91:f4:c3:a9:47:6b:ff:fc:c6:
                    78:20:8a:10:b9:48:ed:60:0d:79:0c:03:3f:fa:cc:
                    31:ce:1f:88:d1:db:b5:92:df:70:47:fb:67:5c:a0:
                    6b:54:bc:29:6c:d5:86:67:7c:d3:5a:2e:7b:d1:55:
                    12:23:4d:f6:ce:18:7d:db:0a:76:8d:82:1c:32:3b:
                    54:e3:ea:c7:70:a1:de:ce:98:fe:44:b2:97:a3:9e:
                    2d:0d:3b:b6:ff:06:0e:ce:54:14:f0:dc:74:bc:9d:
                    d6:92:31:09:b1:32:df:3b:5a:7d:12:fc:9f:d1:5c:
                    fb:99:29:fa:ba:2f:c6:06:7a:4b:12:81:af:10:d3:
                    f1:c8:18:41:dd:cc:8e:6f:08:98:2e:61:47:1b:55:
                    24:3b:e8:02:fd:62:b4:86:75:2b:02:08:75:33:8c:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:F4:F3:07:DD:75:D0:0D:B5:D4:F0:A0:17:86:03:EB:4A:56:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76585cae-748d-3993-bbd0-aa4fe3ee381b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.143.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d1:0d:90:f9:c4:73:a7:8a:ed:e2:d8:ef:ac:6f:ce:34:a4:
         69:11:d1:8b:3a:bb:ce:7c:72:ab:d5:33:44:85:56:ee:1a:f0:
         fc:03:d3:37:4d:46:74:c3:79:a4:a0:85:e6:8f:44:bb:8c:df:
         9f:e4:ab:d9:55:73:e5:62:88:31:6d:47:df:36:0b:db:d2:91:
         9e:02:04:3f:55:c4:fb:af:26:88:ee:4d:4f:8f:94:f5:4f:f0:
         e4:a8:28:07:07:57:7a:08:46:9c:7b:9c:83:2b:ec:ef:4b:f8:
         51:b5:a0:e6:e7:0d:ac:c9:88:ce:5b:38:54:41:25:c0:69:1e:
         a7:47:ec:82:ca:2a:39:03:6d:8b:19:32:a4:97:02:07:4a:89:
         f7:18:c8:4a:64:a3:72:1d:be:15:f4:a8:f5:98:2c:c4:f0:b3:
         0d:46:76:02:3e:38:c8:e7:5c:20:54:ad:ff:47:7d:34:ea:2f:
         0d:9d:fa:fb:0a:05:e0:dc:0c:93:da:28:6e:5e:2f:06:29:ef:
         0b:2a:c2:c1:42:71:62:8e:d3:0d:bc:43:21:a9:3b:73:64:31:
         d9:f2:ea:06:a1:f4:bc:9c:e5:2b:39:ef:4f:d6:c8:10:44:05:
         f1:b0:cd:cb:6d:a8:24:f4:ea:c8:68:08:ca:64:e3:54:f7:bc:
         1e:a8:70:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpH1IqZ8ldXkruJW2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDA0MDAwMFoXDTIzMDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjhkZjZkNjAtNzhlNS00MzQ2LWI1YzMtZjc1NjZiMGE1NzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19BECxElbpwPsMjxilE1on5NeP7xmD+OT2T7
/qIAqk/wpXVz/YLLJBfdMlMS4FzUDKutpGLC8rfGmQ3ArhVo/7Oeqahxm53tJ1hC
uk6HwkYTjbaAkOA4AkXynyXZH7yR9MOpR2v//MZ4IIoQuUjtYA15DAM/+swxzh+I
0du1kt9wR/tnXKBrVLwpbNWGZ3zTWi570VUSI032zhh92wp2jYIcMjtU4+rHcKHe
zpj+RLKXo54tDTu2/wYOzlQU8Nx0vJ3WkjEJsTLfO1p9Evyf0Vz7mSn6ui/GBnpL
EoGvENPxyBhB3cyObwiYLmFHG1UkO+gC/WK0hnUrAgh1M4zdowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3X9PMH3XXQDbXU8KAXhgPrSlYsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzY1ODVjYWUtNzQ4ZC0z
OTkzLWJiZDAtYWE0ZmUzZWUzODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqI/+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXRDZD5xHOniu3i2O+sb840pGkR0Ys6u858cqvVM0SFVu4a8PwD0zdN
RnTDeaSgheaPRLuM35/kq9lVc+ViiDFtR982C9vSkZ4CBD9VxPuvJojuTU+PlPVP
8OSoKAcHV3oIRpx7nIMr7O9L+FG1oObnDazJiM5bOFRBJcBpHqdH7ILKKjkDbYsZ
MqSXAgdKifcYyEpko3IdvhX0qPWYLMTwsw1GdgI+OMjnXCBUrf9HfTTqLw2d+vsK
BeDcDJPaKG5eLwYp7wsqwsFCcWKO0w28QyGpO3NkMdny6gah9Lyc5Ss570/WyBBE
BfGwzcttqCT06shoCMpk41T3vB6ocH4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:16 2024 by rpki-client on console-fra.rpki-client.org