Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6220a5d7-9dd1-3ed9-acb9-59163cdebb2f.roa
File:                     6220a5d7-9dd1-3ed9-acb9-59163cdebb2f.roa (raw, json)
Hash identifier:          9F3DxOeFBQY1dhFA3TWC9fjFfbzA3GmC75zGQEydx/Y=
Subject key identifier:   8C:47:78:C7:96:E9:B3:9C:CF:7F:50:B0:32:51:CF:CB:67:B3:99:57
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BE6D56F1870954CA193B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6220a5d7-9dd1-3ed9-acb9-59163cdebb2f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:6d:56:f1:87:09:54:ca:19:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=fa35f65b-64c5-47b3-8d82-33ae648422eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:e4:88:c7:49:63:b0:ab:c5:bb:7d:64:13:
                    79:69:5b:e3:26:17:41:3b:34:e0:8c:78:76:f9:7e:
                    e1:de:98:81:21:c1:32:a7:39:cb:53:83:96:c9:41:
                    6a:3b:6f:f4:8e:ec:ce:f0:27:9e:4a:d4:95:7f:df:
                    af:74:f5:17:b2:0c:75:f5:81:84:f2:5f:65:3f:9b:
                    08:33:eb:6b:87:1a:16:42:5d:14:98:8c:20:db:d0:
                    14:61:13:b0:c2:91:06:0c:c8:81:0d:2e:03:22:ad:
                    48:a5:54:08:3b:eb:61:d8:25:d7:63:01:8d:b3:fe:
                    2b:58:25:46:32:1a:e1:f5:ec:8d:e6:29:ff:8e:cb:
                    8c:86:4e:0d:31:88:37:d6:1d:d6:f5:51:7a:d1:e0:
                    42:7d:50:3b:d9:21:94:61:fb:5a:6b:02:29:ee:f5:
                    30:71:7b:19:b8:06:e0:05:96:f5:3b:ed:1f:8c:79:
                    d1:7b:1c:db:f3:38:e1:13:ed:fb:7a:86:ed:6d:1e:
                    cd:ce:f2:08:df:a8:be:31:9d:45:cf:76:e4:17:9b:
                    52:0f:6c:8d:d5:04:cc:5c:85:36:98:81:3b:11:e6:
                    0e:02:04:43:b9:20:05:75:a1:b5:10:6c:c4:ac:7e:
                    7a:73:89:49:d4:f3:88:ca:74:0a:38:68:2e:8f:ee:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:78:C7:96:E9:B3:9C:CF:7F:50:B0:32:51:CF:CB:67:B3:99:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6220a5d7-9dd1-3ed9-acb9-59163cdebb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:db:25:a2:50:c7:02:ff:62:9f:c1:cd:58:6a:ba:fe:7d:4e:
         c3:13:ad:da:01:5b:75:6c:b7:c9:d9:99:d7:f8:e2:c1:c2:6e:
         ef:81:6d:1f:3c:a3:f1:b1:9c:47:7f:d8:42:37:16:3b:96:2f:
         15:e4:9a:e4:cb:aa:25:09:37:c4:7a:a8:6f:85:cc:50:64:18:
         b3:d6:c0:62:bd:ff:f1:86:74:39:03:be:f2:42:8a:2c:d6:37:
         4f:d1:23:1b:d3:4a:e7:d5:40:d5:13:13:73:33:b2:28:ec:49:
         ea:ad:c4:4a:5c:96:d1:e7:21:45:f1:df:5a:7a:ae:b8:ce:40:
         7b:5b:e7:c1:f0:52:2e:93:9b:ae:60:de:76:61:e4:7e:74:d7:
         63:0c:15:1e:b2:66:c2:bd:15:e8:0d:2c:d4:f4:10:f7:b8:25:
         e5:1f:57:22:34:9d:0d:ca:8f:e9:a3:41:56:6f:80:f5:be:53:
         ca:a4:5b:77:b7:d6:51:68:36:18:00:d3:34:c5:ba:0d:ae:7f:
         1a:52:34:13:b3:7e:cc:d2:6b:e4:58:1d:11:53:21:55:72:26:
         e6:a5:b8:d0:a4:67:0f:67:58:76:2e:bf:c8:99:8b:29:60:b1:
         87:52:3e:03:c1:3e:c1:b2:23:f9:01:53:48:f3:0c:6d:fa:cc:
         72:fb:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org