Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/44d91c10-4514-37fe-8997-6d09d0ec77fe.roa
File:                     44d91c10-4514-37fe-8997-6d09d0ec77fe.roa (raw, json)
Hash identifier:          IvEdCxy5AhmDH4mTTY4qyj4yar9iuI1dsFCECBP5FGs=
Subject key identifier:   56:C6:A3:86:83:A7:0F:19:A3:35:F5:50:14:69:20:F7:41:6E:36:70
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285845230CE4F34A11152E40A0AB00
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/44d91c10-4514-37fe-8997-6d09d0ec77fe.roa
Signing time:             Fri 08 Mar 2024 07:05:21 +0000
ROA not before:           Fri 08 Mar 2024 07:05:21 +0000
ROA not after:            Thu 06 Jun 2024 06:05:21 +0000
asID:                     33548
IP address blocks:        104.254.100.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:0c:e4:f3:4a:11:15:2e:40:a0:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Mar  8 07:05:21 2024 GMT
            Not After : Jun  6 06:05:21 2024 GMT
        Subject: CN=e48a008a-f2d9-4366-af33-92b6e2b30666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:33:25:be:ca:82:82:03:6b:76:07:a0:6c:
                    72:67:13:f5:9e:49:39:2d:91:47:1e:db:16:e2:63:
                    c3:18:e6:14:9e:1c:bd:8f:e9:e0:2e:c3:98:c3:00:
                    a7:cd:45:66:33:a9:d7:b8:7f:fc:68:7a:2f:d6:c4:
                    74:c9:25:e8:cd:04:df:8b:2c:31:6d:18:e8:b9:04:
                    1a:19:88:a8:2a:1a:a4:20:3e:97:e7:bf:5e:79:19:
                    f3:cf:d9:6f:0e:9d:93:cd:14:a2:f7:e2:ca:ee:7c:
                    20:9f:90:cd:c9:35:20:99:de:11:c8:9e:00:6e:00:
                    e0:7c:35:ae:cd:e3:d1:46:8f:63:12:96:33:4b:80:
                    54:9a:eb:8f:fa:08:a0:10:e1:89:29:de:14:1a:24:
                    62:c2:20:45:86:15:26:a8:5d:9d:4d:bf:62:d2:1c:
                    0b:b8:64:16:73:67:f3:2a:fc:9d:32:ef:52:02:c3:
                    ac:55:96:f1:cf:4d:f3:0d:f6:00:cb:d0:3b:61:f0:
                    2c:ac:b8:4d:9f:e9:74:5e:e2:fd:7d:55:67:74:c1:
                    e9:ab:65:a9:38:ab:6e:c9:e6:89:68:ca:93:2e:e0:
                    fb:f6:8b:82:e9:b6:4f:b2:15:39:ba:80:56:13:96:
                    86:da:f2:39:a1:64:ba:9b:d6:63:3c:48:2e:e5:52:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:A3:86:83:A7:0F:19:A3:35:F5:50:14:69:20:F7:41:6E:36:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/44d91c10-4514-37fe-8997-6d09d0ec77fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:87:f1:8d:6a:d9:d1:09:c2:5f:b5:04:5f:34:f9:31:1a:
         aa:d4:0f:11:bf:d7:bf:cf:c5:dc:68:5e:83:55:8c:95:2e:49:
         2a:66:7d:68:b0:0e:82:e5:c7:d8:29:48:72:ac:35:b9:e7:ea:
         e1:71:d6:01:33:e2:13:47:98:7c:d4:fe:a6:45:42:55:0c:0a:
         41:01:94:6e:a7:06:5e:2d:f9:78:ae:05:ed:09:c0:f1:01:71:
         57:d4:03:05:10:fb:9d:f9:63:32:dc:69:11:77:cd:a4:f6:89:
         74:29:d8:54:03:1b:c8:2d:d6:88:7c:d7:99:b1:6a:e4:95:b3:
         03:9a:cd:79:74:39:f7:c5:1a:c3:5f:02:85:61:1a:2c:77:f2:
         ab:23:8c:02:3d:42:8d:89:ec:c4:ce:fc:01:6d:de:3b:72:34:
         cd:ab:33:fc:0a:a7:54:c3:38:44:7e:40:de:ae:3a:89:07:7f:
         ef:1b:33:fc:6d:f9:95:0a:19:4a:20:21:1b:5d:8e:1a:ec:54:
         84:4c:39:aa:ea:6e:f5:05:ac:fe:c8:f2:2d:57:0c:8a:52:ef:
         9e:d8:3b:38:eb:60:28:7c:d0:f3:0c:f2:c8:15:42:dc:c1:ea:
         9e:dc:89:cb:48:c0:92:6b:ed:65:82:82:76:65:88:f8:c7:a0:
         b1:03:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:04 2024 by rpki-client on console-ams.rpki-client.org