Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/248fcba7-af74-3a9e-a7b4-56919ba56b97.roa
File:                     248fcba7-af74-3a9e-a7b4-56919ba56b97.roa (raw, json)
Hash identifier:          oZOE6fPcDdcJCMJIt4/7k0MJDvKtPcA4wyreUO4DICg=
Subject key identifier:   D8:31:94:23:2B:48:A2:3B:2D:19:18:EA:BE:AA:10:50:DB:7D:6D:E4
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F432858451B86E24E228E8FC4BD161680
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/248fcba7-af74-3a9e-a7b4-56919ba56b97.roa
Signing time:             Tue 05 Mar 2024 14:24:40 +0000
ROA not before:           Tue 05 Mar 2024 14:24:40 +0000
ROA not after:            Mon 03 Jun 2024 13:24:40 +0000
asID:                     23341
IP address blocks:        143.55.0.0/20 maxlen: 20
                          143.55.80.0/23 maxlen: 23
                          143.55.155.0/24 maxlen: 24
                          143.55.156.0/22 maxlen: 22
                          143.55.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:86:e2:4e:22:8e:8f:c4:bd:16:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Mar  5 14:24:40 2024 GMT
            Not After : Jun  3 13:24:40 2024 GMT
        Subject: CN=4840fc27-95a0-41a2-b825-cd1103cdcd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:8b:f9:d2:ad:c7:c9:7c:9f:47:6a:19:c6:
                    54:14:e3:4b:f6:3d:c4:26:af:56:11:f0:74:e8:5c:
                    29:9d:b7:4a:42:87:03:7e:82:35:90:9b:d2:03:28:
                    d2:97:f0:c7:60:0d:6b:7a:6c:1a:d7:d5:f8:b3:2e:
                    82:78:1f:ff:5f:95:76:25:2c:3b:14:e5:ce:fb:48:
                    81:94:25:76:41:2e:56:2a:7b:ac:f0:ac:8c:29:34:
                    f9:d3:19:10:43:e6:ae:2a:c5:04:e0:c1:f2:bc:6a:
                    6c:5b:fb:fc:8e:71:33:07:16:4f:80:d7:4e:a9:63:
                    c3:31:e2:5b:45:99:a9:ab:03:41:c4:ef:c3:82:6a:
                    6a:7b:f3:6e:a0:3e:fb:05:02:b1:13:c6:f7:82:e2:
                    71:8e:44:65:c4:61:57:7f:e6:31:1a:e4:15:c0:6f:
                    32:4d:ef:7f:f1:22:f4:d9:18:2a:e4:2a:16:43:d8:
                    3b:e1:40:82:36:a1:ec:30:44:4d:a2:00:ae:1f:06:
                    c4:c6:cf:a9:d6:97:d4:7f:54:7b:a9:ed:63:59:45:
                    6a:e2:4d:15:b6:69:1f:07:c7:29:d7:51:92:5c:15:
                    8a:ee:0b:28:d2:8a:45:f4:ac:e2:e3:05:07:30:af:
                    e4:50:b1:f0:f4:71:74:ab:63:2f:06:fc:f6:e6:72:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:94:23:2B:48:A2:3B:2D:19:18:EA:BE:AA:10:50:DB:7D:6D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/248fcba7-af74-3a9e-a7b4-56919ba56b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.0.0/20
                  143.55.80.0/23
                  143.55.155.0-143.55.175.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:b6:c1:1f:44:3b:ff:c0:18:d0:30:15:bf:3f:aa:7c:ef:
         a5:c9:ad:ef:33:87:f0:23:c1:cd:06:18:cc:22:c9:34:c4:bb:
         bf:ea:66:a6:3f:8e:d5:e9:50:5b:3d:c8:a7:58:e8:88:d3:f0:
         68:00:42:b8:5e:16:8a:17:13:7c:b2:d8:88:bd:1a:6b:3c:2d:
         6b:84:15:15:43:5f:ea:04:66:1a:bd:d2:72:22:bb:98:5c:dd:
         bd:c8:7b:cf:95:04:79:22:2f:97:78:07:55:d7:e7:34:ec:80:
         16:52:3e:78:00:9b:83:ab:3b:4e:15:aa:2f:a0:c9:38:c5:27:
         1a:42:cf:b3:0d:18:a1:7a:96:c6:25:fa:87:14:fe:9a:c8:ae:
         85:27:f3:b8:ac:5c:7b:15:68:8b:d5:ec:f7:a7:11:e2:26:f5:
         8a:ec:35:27:07:b7:0b:51:9e:42:5b:32:7b:51:e0:d5:a1:fd:
         e4:c8:a7:42:e7:7c:65:db:49:a8:b4:6a:53:c4:2b:22:6a:99:
         d1:3f:91:e2:f1:f9:6c:d8:e3:60:93:d4:97:5d:39:9b:5b:4f:
         69:99:af:77:00:7c:81:f0:9e:a0:2b:f3:e0:e3:67:2e:9a:d6:
         e5:70:e2:e1:2e:7a:8a:5d:89:b0:a8:3b:4a:be:c1:33:60:b7:
         d5:38:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org