Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c16ce72-9196-399b-886a-a8246808ecec.roa
File:                     0c16ce72-9196-399b-886a-a8246808ecec.roa (raw, json)
Hash identifier:          xUdO11kdQTtiqNJO/DUh7bbb/509IQDiGTNEHBhGop4=
Subject key identifier:   56:F3:96:B5:AD:83:30:81:C2:20:08:50:E2:75:93:D0:78:E4:CC:B8
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842D979776988AB061B82616300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c16ce72-9196-399b-886a-a8246808ecec.roa
Signing time:             Fri 11 Aug 2023 13:00:24 +0000
ROA not before:           Fri 11 Aug 2023 13:00:24 +0000
ROA not after:            Thu 09 Nov 2023 14:00:24 +0000
asID:                     35913
IP address blocks:        104.250.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d9:79:77:69:88:ab:06:1b:82:61:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 11 13:00:24 2023 GMT
            Not After : Nov  9 14:00:24 2023 GMT
        Subject: CN=3796c5db-ffdc-43fa-b885-858c6b302cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:c3:39:f2:eb:68:5c:8b:e2:17:2a:47:b7:
                    64:19:a3:4f:b4:3f:8a:6a:92:97:a3:9d:00:1a:7b:
                    59:0a:ff:82:14:80:91:bf:d1:98:93:c1:7b:6c:8a:
                    4c:ac:00:fc:8c:a3:01:9d:fe:04:6f:04:11:af:72:
                    84:75:3e:33:ae:c6:c5:c6:92:03:cf:34:a7:41:f7:
                    ee:36:14:f3:7a:3b:0c:20:e7:38:98:da:47:c2:76:
                    fe:76:3d:e5:a6:04:2a:21:4d:38:51:e2:c8:1a:cc:
                    f4:c7:7d:b6:b2:65:dc:4a:c4:49:7a:6d:de:9b:1a:
                    5d:c9:af:a3:6d:95:c2:dd:f6:20:0d:8e:03:a1:80:
                    40:8c:70:82:0d:6e:82:31:4e:53:b3:67:f7:31:75:
                    d2:cf:88:95:75:32:7f:87:72:1f:29:ac:9f:4d:15:
                    8a:eb:80:b9:31:28:17:89:85:27:6e:1d:63:68:db:
                    51:a1:e1:67:18:26:85:54:b0:40:c4:d2:31:90:3b:
                    f3:8e:6e:cc:fa:07:5a:a1:51:f3:59:6e:ac:c8:ef:
                    8c:82:ac:4a:22:0f:5e:0c:03:f8:12:08:bb:0f:38:
                    6c:3d:a9:80:59:a7:25:7f:c6:6b:10:2b:98:49:03:
                    71:44:7d:57:44:16:4a:94:f2:62:05:8d:78:8e:16:
                    d7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:96:B5:AD:83:30:81:C2:20:08:50:E2:75:93:D0:78:E4:CC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c16ce72-9196-399b-886a-a8246808ecec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:1b:9a:0a:0f:a9:77:79:79:3a:eb:78:72:2a:da:67:e6:
         ba:3c:46:0a:47:ca:54:86:9a:d6:da:f4:af:80:75:8e:8f:14:
         f1:f7:da:8a:15:81:3c:06:dc:bd:ba:2f:d8:cc:ef:61:fb:79:
         08:20:19:04:7c:51:c7:81:92:d8:90:74:29:64:3f:67:b1:ca:
         ac:e5:98:2b:ad:60:9e:a8:0f:f3:c7:f4:ba:2f:d7:46:76:5e:
         7a:b6:8e:07:55:9d:14:c1:4d:f8:b7:65:ed:8b:77:d7:19:84:
         6d:5e:81:f5:75:0d:82:7a:4f:7c:be:2c:99:35:26:44:e3:b6:
         16:09:7d:4c:d1:70:89:ad:02:e4:91:8f:1f:9a:07:df:93:e8:
         15:26:84:6e:41:a8:ac:8d:26:30:44:ad:df:81:24:32:ab:c8:
         31:4c:e8:95:95:00:bf:b5:35:c9:2a:73:63:f5:c0:b6:1b:cc:
         89:99:01:81:24:7c:ba:c5:ec:89:eb:36:ce:62:68:ce:a1:b7:
         6e:58:86:2e:c8:dc:d7:13:d5:31:63:da:a4:4d:ef:30:f3:1b:
         c1:27:b4:66:d3:0a:68:a3:de:a1:a8:35:99:64:c4:6e:c1:33:
         a1:0d:ae:62:39:1c:ad:d0:d5:6f:b4:be:b2:ee:61:07:5d:fe:
         14:d7:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org