Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/43fc89fb-5625-3a0c-a351-1205fd0c36ee.roa
File:                     43fc89fb-5625-3a0c-a351-1205fd0c36ee.roa (raw, json)
Hash identifier:          h9Y+xMmp/CmMSdOYg4Y7uOW2tfpjVbqzM7T+1QTol4c=
Subject key identifier:   64:54:67:10:F6:F8:15:75:B0:17:D5:B8:FB:00:2C:15:FE:21:31:85
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F432858388601D8CE2D633FFDE7D1DC00
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/43fc89fb-5625-3a0c-a351-1205fd0c36ee.roa
Signing time:             Wed 01 Jan 2020 05:00:00 +0000
ROA not before:           Wed 01 Jan 2020 05:00:00 +0000
ROA not after:            Tue 11 Apr 2023 04:00:00 +0000
asID:                     62695
IP address blocks:        155.254.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:86:01:d8:ce:2d:63:3f:fd:e7:d1:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Jan  1 05:00:00 2020 GMT
            Not After : Apr 11 04:00:00 2023 GMT
        Subject: CN=0d12f49a-c6ea-4be2-be2c-16053c89a75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:4c:37:97:93:3d:95:58:c5:8b:90:91:8c:
                    a4:7c:32:32:ae:3b:61:ee:fd:92:0f:01:ed:42:b1:
                    6c:e1:13:75:e1:2d:6e:2f:ae:a5:fd:14:80:43:3a:
                    68:e5:f7:fa:ea:30:c0:69:15:7f:bd:8e:aa:7c:39:
                    4e:8b:0a:61:a7:13:41:71:c2:82:50:66:31:4e:02:
                    68:cf:5a:f3:e2:b8:ce:99:62:4d:cb:9a:45:a9:bf:
                    dc:9b:5e:22:aa:a6:d5:7d:61:53:dd:b2:64:10:82:
                    94:82:c0:69:a2:70:87:15:61:6c:ad:3f:8d:da:b7:
                    ce:33:d5:35:68:63:42:f9:3f:1f:29:68:a9:8a:8f:
                    05:bd:57:77:02:b6:a8:48:97:63:5b:2a:7a:1a:c6:
                    ea:25:91:c4:49:a2:a9:2c:a4:e5:b0:c6:22:96:94:
                    67:32:28:80:5c:e5:a6:74:c4:09:4f:55:1b:d4:83:
                    48:da:66:46:1a:6d:1b:07:80:f8:7b:65:ce:16:e1:
                    05:42:fa:71:a2:a5:93:ac:e7:da:95:17:d8:d5:85:
                    db:cd:9d:e7:d7:ab:1a:16:05:f9:0e:97:ca:44:2f:
                    d1:5a:5b:85:ec:84:1d:1a:df:0b:06:41:b4:82:09:
                    b5:6a:d7:be:51:7d:d9:89:ef:89:62:df:f2:fd:9e:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:67:10:F6:F8:15:75:B0:17:D5:B8:FB:00:2C:15:FE:21:31:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/43fc89fb-5625-3a0c-a351-1205fd0c36ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:5b:e1:fc:4c:db:92:1a:e1:a1:4d:b9:c0:67:26:e4:4b:e4:
         04:a8:c5:b0:17:2f:6f:45:43:dc:38:d3:02:39:df:83:8a:4c:
         02:f1:65:7c:1b:82:47:cb:22:ab:7a:8d:de:66:8e:19:f1:11:
         30:ca:34:9b:ec:2c:8d:fe:b1:dc:d7:a3:45:32:ae:56:26:3a:
         c6:05:aa:b4:f6:01:97:2b:c8:4c:45:93:3f:e9:e1:9e:8b:c3:
         0a:6d:94:a7:d2:be:f4:77:dd:91:e7:8d:cf:76:f1:39:66:af:
         66:fa:9f:d7:1e:59:6b:ea:3e:b0:17:e6:b1:8a:db:68:8a:ef:
         cb:91:76:82:2b:c3:43:5f:45:62:81:50:1b:3b:85:80:fa:7f:
         7d:18:5a:65:63:95:00:22:e9:e4:9a:74:49:1d:35:50:ef:41:
         1d:74:a0:57:bd:5b:3a:50:cc:42:68:ec:fa:6c:79:4f:79:ee:
         68:0c:62:96:9f:3f:d5:e7:04:a5:fc:bb:03:83:75:55:ca:2a:
         13:49:e2:fb:ec:bd:e9:99:73:70:f9:bb:26:03:20:47:89:0a:
         f7:3f:ac:31:59:5f:78:3a:1e:f5:2c:d3:ca:ff:c5:81:30:fb:
         f1:50:57:23:9a:8e:c5:ea:02:73:2e:52:15:88:f8:1b:44:9f:
         e2:3e:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org