Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/fb500bf7-8e38-39fa-8a32-efd6d453b678.roa
File:                     fb500bf7-8e38-39fa-8a32-efd6d453b678.roa (raw, json)
Hash identifier:          oHa5VV4RvZO2URMMKUomk+NLMJB74bw21cpQdfb9Dms=
Subject key identifier:   E8:C6:57:22:77:78:06:43:04:3C:1B:03:D9:AA:08:F6:91:9E:A4:F0
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584221384E9615E7614A0E7767CA
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/fb500bf7-8e38-39fa-8a32-efd6d453b678.roa
Signing time:             Tue 06 Jun 2023 13:00:19 +0000
ROA not before:           Tue 06 Jun 2023 13:00:19 +0000
ROA not after:            Mon 04 Sep 2023 13:00:19 +0000
asID:                     13638
IP address blocks:        65.254.144.0/21 maxlen: 21
                          65.254.144.0/20 maxlen: 20
                          65.254.152.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:38:4e:96:15:e7:61:4a:0e:77:67:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Jun  6 13:00:19 2023 GMT
            Not After : Sep  4 13:00:19 2023 GMT
        Subject: CN=e38e95d7-5962-445b-a064-eeab3e86d9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:32:44:a9:f7:91:ed:ba:df:40:66:b2:86:
                    57:19:51:c1:de:18:df:48:48:1b:7b:e7:4d:44:79:
                    a6:bd:7d:48:6c:c0:57:42:26:bc:85:c5:61:2c:c6:
                    07:1e:fd:08:00:a7:ea:d2:df:52:b9:a1:9d:c5:b5:
                    a5:f2:d0:af:80:7a:f4:9a:c9:1e:4a:0c:af:c8:d9:
                    41:dc:ba:f7:a1:a4:50:a8:2a:0b:8a:5e:c8:44:a8:
                    a7:0e:d8:98:50:46:eb:0d:26:a8:06:a1:8d:d6:65:
                    7e:c8:5b:e6:da:85:39:bb:af:ee:c7:13:4f:ab:df:
                    11:de:5f:20:c7:37:3a:0b:59:e9:ec:ab:92:dd:e9:
                    02:4b:0a:82:49:4c:40:99:8c:bb:f8:87:c6:04:10:
                    7c:49:fb:ab:c9:3b:26:32:c8:e4:9f:97:2d:57:cf:
                    fb:69:7e:c4:69:2a:55:0c:51:d8:36:94:f3:34:c0:
                    f8:34:da:0d:cc:98:de:23:ee:98:d9:ed:c6:31:c3:
                    5e:93:c7:e5:62:5b:36:4e:cd:03:b5:80:76:58:d2:
                    88:e0:4d:36:ff:e0:95:d9:d9:e2:4d:5f:38:99:54:
                    2b:6d:e3:5f:40:ef:28:19:b6:72:e3:5b:46:9e:fc:
                    73:d8:f9:7f:47:49:db:e4:82:ce:a3:2d:aa:59:e2:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C6:57:22:77:78:06:43:04:3C:1B:03:D9:AA:08:F6:91:9E:A4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/fb500bf7-8e38-39fa-8a32-efd6d453b678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:32:8c:29:3c:a7:39:6d:59:e3:d0:71:b7:99:af:77:8f:
         bf:4a:94:17:dc:59:98:f1:a4:0f:64:a1:52:70:3a:cf:b4:a2:
         e1:38:01:83:29:3c:6c:f9:9e:00:68:cd:03:ad:af:08:17:55:
         15:c4:95:1a:15:87:0c:bb:4e:c2:21:4d:af:e0:a2:1d:45:18:
         9c:e0:2e:e6:a4:af:f6:17:56:01:3a:38:2f:bd:e3:10:8f:5b:
         19:1b:9f:2e:d6:fd:cf:da:02:f0:cc:37:49:a8:26:73:4e:94:
         0b:6a:f8:05:0d:c2:68:6b:f6:18:31:2b:20:2f:d9:34:f0:2a:
         94:19:eb:c8:9a:40:59:88:d2:15:0b:46:de:04:ca:60:ea:7d:
         b6:c8:6c:39:f1:22:3b:44:38:46:a6:46:1e:9a:0d:b5:f4:30:
         99:70:a5:b2:52:ac:5a:60:17:17:0a:7b:b7:22:52:de:21:fb:
         02:b2:99:8e:bd:cc:9a:1b:15:6f:50:1d:8f:65:ad:6e:87:0a:
         29:cb:47:0e:74:9d:46:1b:d9:e5:31:38:f4:ed:b5:8e:51:c5:
         d3:f7:48:a2:df:f8:ab:4d:8e:81:a7:1e:50:c2:50:e4:e2:84:
         bf:bf:4e:85:2a:3b:d7:de:6b:6c:bc:9c:f4:6c:b4:01:9b:ef:
         fa:b1:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:13 2024 by rpki-client on console-fra.rpki-client.org