Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96a2aef2-0238-362b-b498-8654a905fe8d.roa
File:                     96a2aef2-0238-362b-b498-8654a905fe8d.roa (raw, json)
Hash identifier:          zLR8b0EaUnI7t2GC6iGUwDbDNfSJ76/RxDQ5n07JiDQ=
Subject key identifier:   81:DF:98:18:E9:7A:10:FC:AB:26:93:3F:07:8F:AF:AF:1A:06:D3:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7B199CE4A7E116D71511100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96a2aef2-0238-362b-b498-8654a905fe8d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.134.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b1:99:ce:4a:7e:11:6d:71:51:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c69e340a-b2fd-4925-b895-198f5b3c349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:5c:d0:03:cc:89:33:19:cd:33:90:84:52:
                    19:0f:46:63:2c:4f:db:26:83:7f:4d:be:d5:7d:55:
                    a2:3e:d5:fe:f3:c2:37:fe:52:84:23:27:d1:e5:2d:
                    0d:2f:13:3c:9c:9b:91:67:98:52:8c:bb:38:f9:5a:
                    d2:74:b2:33:e8:36:97:c4:97:cc:eb:05:5d:d3:6e:
                    f1:9a:08:f2:1c:a9:5d:03:70:01:0f:8d:e9:40:c1:
                    78:66:d5:de:63:c0:19:14:33:4c:7c:39:1b:4f:b1:
                    46:9b:a8:70:d5:4a:b2:79:34:7f:2a:06:e4:b3:fc:
                    55:96:24:17:84:3e:1c:cc:da:f2:bb:06:be:a8:c1:
                    92:23:e5:2e:92:fc:a9:24:b4:67:62:0b:2b:b5:ab:
                    8e:84:f0:27:d2:b3:df:20:5a:04:28:09:3c:80:fa:
                    15:82:dc:85:36:3a:29:86:99:c0:6b:cc:4b:0d:86:
                    80:6b:1c:20:9b:ba:c7:7a:09:7e:54:14:12:37:f2:
                    b8:fb:b0:b9:a3:0f:a8:13:c6:b7:63:04:0a:18:a5:
                    5d:ac:88:8e:c3:13:ec:12:c4:e7:af:80:80:fe:75:
                    84:77:a6:d8:8c:62:d9:b8:39:98:66:af:13:d6:fd:
                    79:c9:cc:7c:28:62:07:38:4b:0a:92:a1:c2:49:36:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DF:98:18:E9:7A:10:FC:AB:26:93:3F:07:8F:AF:AF:1A:06:D3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96a2aef2-0238-362b-b498-8654a905fe8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:28:ce:98:35:cc:b8:6d:c4:c1:8d:a4:df:2f:c3:d7:61:e4:
         df:ec:a3:f9:3d:2b:7f:c0:d7:a8:37:a9:6a:5e:1c:84:6c:f3:
         55:f1:e6:c9:4e:1e:12:82:8b:82:78:ec:b0:b5:de:22:90:7e:
         3e:06:82:81:56:08:e0:ee:29:66:ec:67:08:d1:e5:92:3e:3e:
         70:7d:fb:da:ba:82:39:f3:b5:76:3c:64:fc:12:ca:85:e5:64:
         93:41:e5:05:4d:50:81:16:8f:dd:c8:1d:e2:16:24:cf:85:92:
         ed:15:d6:5a:7f:f0:e7:5d:51:f8:d1:71:6f:bb:71:17:61:a2:
         5f:d5:27:18:ea:91:10:26:be:a7:54:7e:29:1f:49:8c:08:ab:
         ba:35:1c:75:8e:1d:4a:81:82:cc:e2:27:08:88:f5:23:9b:62:
         d2:70:6f:d3:12:05:cf:e4:f4:6a:d4:80:8f:56:a6:06:8f:33:
         5d:28:16:44:94:49:bf:c7:28:75:24:0a:14:5e:eb:1f:2a:30:
         13:5e:31:85:40:7f:fb:97:41:85:0c:d0:b7:7e:f2:18:cc:0b:
         b0:41:c9:67:89:f4:6a:ed:45:55:ad:da:11:bc:34:84:6f:84:
         40:48:0c:71:f7:c0:e8:3f:f6:23:36:b5:26:cc:a8:08:55:a0:
         a8:df:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org