Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/83db6525-9921-3048-8cc2-77710dcca745.roa
File:                     83db6525-9921-3048-8cc2-77710dcca745.roa (raw, json)
Hash identifier:          +jyedd7mxDG9a5/2TUnBA/+WesTl/PH6U/TdrdH1iHo=
Subject key identifier:   55:E8:22:9A:F3:2B:ED:B1:87:62:4B:76:5B:B6:CB:A6:19:A1:0E:7A
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584510D578881217ABDC6F1748C0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/83db6525-9921-3048-8cc2-77710dcca745.roa
Signing time:             Fri 01 Mar 2024 18:29:08 +0000
ROA not before:           Fri 01 Mar 2024 18:29:08 +0000
ROA not after:            Thu 30 May 2024 17:29:08 +0000
asID:                     4213
IP address blocks:        76.8.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:d5:78:88:12:17:ab:dc:6f:17:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar  1 18:29:08 2024 GMT
            Not After : May 30 17:29:08 2024 GMT
        Subject: CN=0ff89194-a7ad-4068-bd34-b1d2f5e40020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:97:19:2b:ba:e5:95:64:3b:14:2d:cf:35:
                    ed:79:b2:ce:14:61:c8:e2:44:72:e2:22:13:3e:ab:
                    89:8d:fa:2a:3c:30:24:f6:25:a3:96:98:47:58:34:
                    af:5e:fb:b5:49:32:26:4c:87:d7:01:aa:bc:ac:59:
                    27:bd:d3:6f:2c:ff:8e:b2:7a:05:db:ee:2b:26:a6:
                    00:db:33:5c:e3:8e:fc:4b:8f:b5:5f:5d:25:11:3f:
                    e1:62:df:0c:94:cf:82:8e:57:9d:3f:5e:50:fa:98:
                    30:c1:7f:52:8d:c6:a4:0a:cf:6e:c4:11:5d:c1:70:
                    45:f6:b8:83:8b:e4:79:28:5e:12:66:84:53:2f:ca:
                    de:3a:f5:db:20:de:37:0a:9b:d9:a3:60:33:72:90:
                    2a:ee:e4:7d:a8:1f:da:46:c0:71:64:de:4e:f7:31:
                    1b:80:1d:d1:45:42:6d:0e:96:c7:30:48:22:0d:a1:
                    f6:ad:e0:0f:f4:27:47:78:ca:3b:46:03:26:c8:79:
                    42:ba:29:54:38:1f:ef:75:31:38:04:52:87:4e:83:
                    62:44:95:9f:55:ba:4a:44:00:d1:fe:ca:de:7b:41:
                    24:4a:c1:42:86:c7:ae:b5:f3:10:ab:67:ad:6d:35:
                    e7:22:05:b5:75:23:52:27:ca:0f:f6:5c:3f:03:cd:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E8:22:9A:F3:2B:ED:B1:87:62:4B:76:5B:B6:CB:A6:19:A1:0E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/83db6525-9921-3048-8cc2-77710dcca745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:01:62:6d:5e:2d:c1:26:06:a8:08:be:16:9a:c5:14:a7:
         43:25:5f:62:5f:26:99:81:fc:e1:0f:57:2e:53:f7:81:92:75:
         33:3d:66:9d:3d:ee:a2:7c:56:d1:75:9c:08:4d:39:d9:81:d0:
         d1:bf:a7:66:0b:2d:76:14:a1:3e:bd:2f:da:8b:d3:77:dc:f4:
         16:a5:43:9f:8f:fa:28:13:59:c7:f8:dd:48:53:72:b4:f2:7a:
         b5:b8:7b:9c:72:79:11:b4:ca:7c:52:01:0e:b9:e9:81:c9:31:
         b8:49:dd:76:fa:f4:75:98:46:76:a1:7e:d7:e9:a0:8e:a0:f0:
         b8:27:de:71:ef:5b:42:09:44:d2:fb:38:66:f4:c3:e5:27:f4:
         ba:05:c0:4f:30:08:83:63:5a:b0:e9:a2:b2:8f:d9:2e:41:1b:
         be:65:69:ba:6e:f3:12:2e:2e:49:ae:c9:06:bd:54:94:4d:94:
         b8:f0:80:37:35:ef:24:dc:50:10:4f:ff:e2:4a:e4:70:d8:02:
         11:78:2e:db:c4:cc:ef:35:1f:7e:55:a8:35:71:29:6d:23:a8:
         c2:d3:f4:67:5c:43:96:72:27:7d:28:82:bd:cc:1a:df:b6:8e:
         9f:05:80:66:d3:60:49:3f:e7:3f:d3:3f:b8:de:14:91:b4:d8:
         41:15:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org