Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2dc19765-eb2d-3391-b4b5-0a1b1f32f7c3.roa
File:                     2dc19765-eb2d-3391-b4b5-0a1b1f32f7c3.roa (raw, json)
Hash identifier:          WoznmkIsh1YWH5WPv2RNOQ1gYBaLPBCd3HC6lhYOspU=
Subject key identifier:   86:6E:BF:45:50:BD:FD:73:6C:0A:DC:07:CC:8E:7A:22:66:00:83:B8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7A8E69C6EA50159ED3D85C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2dc19765-eb2d-3391-b4b5-0a1b1f32f7c3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:e6:9c:6e:a5:01:59:ed:3d:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0e8efda9-b2ed-4acf-888e-fa0860974e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:97:ab:4e:29:b4:be:56:84:54:22:6e:25:
                    16:05:e5:cb:18:83:eb:7e:23:27:16:70:2e:98:59:
                    8e:23:cc:a4:ec:92:1e:7f:2e:9a:a9:a1:db:b2:d5:
                    b7:38:9d:ba:30:72:60:ff:4b:f1:bd:5f:4c:2d:63:
                    89:49:c9:38:2a:52:e4:7e:95:df:5b:bd:ea:9e:8b:
                    5b:b6:6e:a5:88:5c:05:4a:5a:2c:9a:86:0b:0a:b2:
                    95:24:ec:cb:c4:40:8a:5f:e7:92:6b:a7:4a:fb:0f:
                    54:0b:a7:d4:79:67:a2:17:15:35:26:f0:16:2a:d8:
                    0c:da:0a:aa:ba:42:3d:4a:c0:2e:18:3f:54:e1:82:
                    05:21:28:26:ed:64:e7:e2:3f:1f:f6:5b:51:e7:fe:
                    f5:55:21:01:89:49:fe:e6:bf:41:3a:2a:d3:5c:1f:
                    fd:3b:68:de:08:71:b3:0e:b3:2e:e6:ba:a6:d8:3f:
                    88:bd:a5:b7:e0:c0:12:20:1d:da:8c:41:60:9d:a0:
                    b4:b6:83:c5:d1:55:b2:6e:74:06:92:ec:fe:9d:40:
                    a4:4f:a2:62:98:36:fa:ae:aa:3f:87:68:9e:7d:5e:
                    bc:fa:7f:0e:7b:3c:4a:c8:fa:3d:c4:a0:71:85:44:
                    9b:63:1e:82:17:10:14:74:67:a2:4d:8f:5c:40:7e:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6E:BF:45:50:BD:FD:73:6C:0A:DC:07:CC:8E:7A:22:66:00:83:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2dc19765-eb2d-3391-b4b5-0a1b1f32f7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:40:ad:13:8f:6c:8f:e6:28:b9:44:2b:a6:62:a5:97:35:2b:
         ce:24:41:d3:a5:81:81:40:25:54:4f:09:ed:dc:e6:f8:8a:21:
         b8:35:14:42:57:89:6b:e0:26:a5:38:2e:94:d3:db:1f:d8:8a:
         a0:8b:79:85:f0:da:86:5e:57:a1:26:10:29:5c:bd:48:89:a6:
         52:c7:02:12:cf:7a:de:99:06:47:df:a9:1f:67:86:7d:73:58:
         38:bf:ba:e4:b2:4d:78:d5:57:45:ef:5b:3b:24:41:5c:f5:ff:
         a0:a0:55:0a:0c:9c:22:bf:c4:18:05:f7:6f:94:7a:6b:79:11:
         10:0b:72:26:19:df:b4:cd:83:16:f5:3c:ab:81:97:30:36:9b:
         fa:7f:55:cf:5a:fa:9b:17:25:1e:a4:49:ba:7a:da:dc:65:0f:
         53:b7:49:5f:58:7b:df:7f:50:45:30:91:e8:bb:49:af:d7:2a:
         56:a7:2b:95:ab:92:3d:4c:26:8d:06:64:7c:37:50:66:7e:c9:
         5a:ef:b3:f2:22:e1:c6:62:71:e9:e2:82:94:3a:ee:be:ac:f7:
         2f:d7:e5:19:3f:85:3a:06:dc:a4:4d:30:fc:cb:7d:a1:06:29:
         e4:41:7f:d6:a8:d8:bb:03:8f:ec:3d:43:cb:25:f4:f2:b6:b0:
         0a:45:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org