Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2fac67d9-e808-3fa7-b160-cb0ad824359b.roa
File:                     2fac67d9-e808-3fa7-b160-cb0ad824359b.roa (raw, json)
Hash identifier:          kVqLpQYM62VrQ0+/Zsi1mw9b+9zSC2tSS77+ll/QjYI=
Subject key identifier:   D1:D8:04:BA:30:54:B6:95:0A:A8:1E:5E:A0:CB:F7:6D:02:9F:D7:86
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328583DEEDE509684E9DE915CB16400
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2fac67d9-e808-3fa7-b160-cb0ad824359b.roa
Signing time:             Wed 11 May 2022 12:00:00 +0000
ROA not before:           Wed 11 May 2022 12:00:00 +0000
ROA not after:            Fri 12 May 2023 04:00:00 +0000
asID:                     36268
IP address blocks:        162.218.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ee:de:50:96:84:e9:de:91:5c:b1:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: May 11 12:00:00 2022 GMT
            Not After : May 12 04:00:00 2023 GMT
        Subject: CN=118904b0-6881-4b53-bf63-0d699c8c31be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:ff:e9:f6:ad:7d:fb:8f:ff:2a:9a:3b:99:
                    de:66:a1:70:cd:37:2b:03:fe:01:61:a1:1d:5c:6a:
                    77:7a:8d:a2:17:31:6c:87:c6:de:44:e6:4b:a7:41:
                    1f:3b:25:be:8e:b7:3c:cc:8e:fb:0a:5f:4b:76:a4:
                    ad:70:c8:fe:d7:27:b5:76:f0:49:9a:2b:ff:4b:ec:
                    30:dd:5f:b4:b9:73:c3:0d:51:c2:d9:bd:11:70:d3:
                    99:aa:6a:c4:95:3f:73:36:7b:c3:2a:d6:41:0a:22:
                    68:a5:b6:b2:7d:b7:d3:cb:a0:2a:ca:58:8d:9e:1a:
                    ee:0f:44:74:b6:60:5b:67:45:9d:4b:ac:83:96:8e:
                    84:3a:8b:69:ba:8a:8c:b9:b4:53:3f:1b:3f:de:b5:
                    1e:a7:43:06:b9:25:bf:47:69:96:b3:8b:16:27:52:
                    a6:34:a1:42:16:69:80:cd:1a:67:96:5c:67:2b:05:
                    ee:44:39:6d:6c:65:7c:54:4b:e8:10:ad:00:48:58:
                    91:51:24:c8:12:e6:8c:3d:18:aa:b6:9b:7d:07:ab:
                    10:8d:a1:46:f4:e1:7a:f9:52:f4:b2:2a:68:99:6e:
                    3a:48:b9:1e:f0:8e:42:1a:76:21:11:b2:3f:8d:30:
                    6e:4d:ff:7d:e2:c8:fe:ed:3b:9a:7c:03:8a:24:b0:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:04:BA:30:54:B6:95:0A:A8:1E:5E:A0:CB:F7:6D:02:9F:D7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2fac67d9-e808-3fa7-b160-cb0ad824359b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:96:56:f6:91:64:73:84:53:c2:db:fa:25:9b:d5:83:20:
         0f:31:39:10:21:8c:48:cc:f6:06:03:ab:a8:2a:cb:da:53:4b:
         1d:af:1b:30:36:13:a4:57:54:7f:24:0f:7c:13:51:da:ba:33:
         15:2b:23:fb:de:16:cf:de:c5:63:8f:13:87:ac:fa:e8:63:85:
         ec:9c:6e:57:34:48:74:62:b5:41:41:2e:32:cd:6b:2e:e0:20:
         e5:5b:2a:ff:8f:1c:a6:20:e7:95:4f:b3:1d:97:1f:b8:5e:c2:
         25:2f:0f:9f:d9:44:6e:aa:42:69:4a:0b:e5:5f:4c:9d:fe:88:
         46:59:4e:c9:b3:87:d3:94:6b:8c:53:1b:63:54:8f:69:8b:b7:
         e1:50:1c:ed:58:6d:45:5d:8a:47:46:df:ee:31:f2:5e:93:ac:
         bc:45:02:f3:9d:8c:ac:83:dd:d4:d6:0c:55:67:cb:15:18:66:
         53:d4:f4:cd:63:7b:54:24:a5:88:df:7d:c3:b5:14:2d:f6:51:
         04:53:b4:04:22:b7:2d:58:5b:5d:29:2a:8a:98:83:8b:5e:d9:
         0e:bf:98:19:ef:bd:89:5a:9e:60:22:e1:bb:eb:fc:00:9b:69:
         23:22:bc:21:c6:8f:53:0e:84:64:78:d9:36:03:65:ae:44:0f:
         24:18:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org