Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/732662bb-9af1-3365-8d14-9cbaf946be52.roa
File:                     732662bb-9af1-3365-8d14-9cbaf946be52.roa (raw, json)
Hash identifier:          Ty8ZSyb+ZSganunoyrzwG0gMYCK3grJxtyfNXbtLaUE=
Subject key identifier:   38:31:F1:36:39:1B:59:A8:C0:F5:24:E3:1D:47:9C:BF:BC:0B:DC:BB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842F76E3D532556199DEE329080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/732662bb-9af1-3365-8d14-9cbaf946be52.roa
Signing time:             Tue 22 Aug 2023 06:32:03 +0000
ROA not before:           Tue 22 Aug 2023 06:32:03 +0000
ROA not after:            Mon 20 Nov 2023 07:32:03 +0000
asID:                     9009
IP address blocks:        172.111.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f7:6e:3d:53:25:56:19:9d:ee:32:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 22 06:32:03 2023 GMT
            Not After : Nov 20 07:32:03 2023 GMT
        Subject: CN=3e551062-cd57-4997-8aa7-26f2d3ca9375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:42:7e:f5:f7:6c:ad:16:7d:0e:6e:49:b6:
                    54:6d:55:dd:fb:42:26:05:e2:1e:92:08:3b:ad:3c:
                    43:f0:9c:3e:9b:91:21:15:9b:56:fa:fe:5c:8e:30:
                    73:23:34:b1:f9:cf:f3:4e:81:ff:b2:97:a3:90:9f:
                    d3:71:dd:56:a5:4f:d4:b8:64:a6:83:89:fe:e3:27:
                    ce:9c:19:f1:18:98:e2:c8:dd:6e:46:f7:78:ea:ed:
                    31:d7:f8:88:03:35:59:6f:a1:6b:3f:36:a9:78:6b:
                    f3:93:d6:ec:9c:10:7e:61:b4:54:3d:5a:ff:eb:f5:
                    9e:86:03:37:f8:89:22:a2:d2:07:45:dc:33:50:80:
                    31:27:c8:10:3f:67:ba:a0:6f:ca:e0:10:27:f2:49:
                    72:39:03:b8:8c:ef:a7:fa:fa:cb:6f:45:37:8c:2e:
                    7f:05:9e:ce:35:45:fd:89:ac:a7:a3:02:ba:9a:84:
                    dc:54:87:13:4d:85:71:51:63:d1:f9:6a:83:56:9d:
                    74:5f:75:15:03:ea:27:46:97:ac:fa:28:27:88:74:
                    cd:e9:01:a6:fa:48:35:43:c5:23:0b:94:25:5d:b4:
                    cb:9c:bc:e6:3c:e8:ad:45:7b:6a:cd:68:97:db:12:
                    de:3a:ca:2d:12:af:63:83:9b:f6:27:d9:48:68:b5:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:F1:36:39:1B:59:A8:C0:F5:24:E3:1D:47:9C:BF:BC:0B:DC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/732662bb-9af1-3365-8d14-9cbaf946be52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:57:cd:e4:6a:89:c8:2b:6c:27:c3:3d:78:83:f6:58:09:
         e1:14:73:39:2f:bd:1e:32:4e:27:1b:8a:6e:73:7b:fe:a3:8d:
         9c:1e:18:9c:13:7c:b4:1c:7f:dc:91:4c:a1:41:2c:c8:7b:26:
         b6:a2:eb:42:ed:78:f0:6c:9a:e7:f9:a1:b7:c7:3a:ce:ca:85:
         9f:94:26:9f:e8:73:52:97:62:7e:80:bd:7a:24:84:17:60:7d:
         d6:6f:11:18:c7:27:b6:9e:01:d3:86:2e:83:99:4d:70:e9:9f:
         43:79:d8:cb:8a:60:e2:48:57:65:5f:a5:b4:a7:58:a1:72:32:
         e7:ce:fc:5b:94:f7:f3:93:75:a9:d2:9e:ba:6f:01:a6:35:c2:
         d4:17:99:a7:05:f4:54:0b:08:4b:73:40:f1:65:16:2e:7d:4c:
         fb:c6:02:f6:e7:49:54:73:e2:6c:43:4b:cc:bf:ee:e1:24:48:
         02:16:df:7a:bc:a9:0a:62:0a:0b:c8:86:91:f7:bc:6f:06:96:
         62:dc:f0:1c:4a:f0:0f:e7:9e:bc:1d:1d:a3:a2:95:05:fe:ae:
         a3:7e:35:8a:47:47:a0:db:f5:e6:d2:02:58:12:45:ab:bd:81:
         08:c8:88:9f:84:a0:84:33:f5:ff:3e:9c:fc:e2:5d:a9:f0:21:
         65:68:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org