Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/24aa3477-deac-31ca-bd53-7a6f0f13617d.roa
File:                     24aa3477-deac-31ca-bd53-7a6f0f13617d.roa (raw, json)
Hash identifier:          TvjS2JvgzkvUIrCCNFmdmIcTCqp6FW5fdwCCNokmEzg=
Subject key identifier:   E0:D5:01:F0:24:9C:B1:63:E0:BE:DC:3D:E3:3B:A3:24:BB:32:0D:46
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F4328584285B8ECBB703E71310C810E93
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/24aa3477-deac-31ca-bd53-7a6f0f13617d.roa
Signing time:             Wed 12 Jul 2023 13:00:19 +0000
ROA not before:           Wed 12 Jul 2023 13:00:19 +0000
ROA not after:            Tue 10 Oct 2023 13:00:19 +0000
asID:                     400212
IP address blocks:        63.133.216.0/23 maxlen: 23
                          63.133.219.0/24 maxlen: 24
                          2602:fbd9:400::/38 maxlen: 38

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:85:b8:ec:bb:70:3e:71:31:0c:81:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Jul 12 13:00:19 2023 GMT
            Not After : Oct 10 13:00:19 2023 GMT
        Subject: CN=a2dae517-484e-4ed4-8319-d9364df9adba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:dd:e4:09:b6:31:69:66:f2:9f:d4:f9:11:
                    7b:be:0d:69:f6:7c:4d:14:e9:d3:70:c0:1e:cd:eb:
                    f3:b9:d5:f6:76:99:4d:a0:50:11:e6:b5:bd:97:95:
                    d6:9d:ef:5c:46:c4:58:2a:f1:f6:02:dd:aa:b9:cd:
                    b2:1c:3a:47:e4:45:c9:5b:30:f2:c1:e0:a7:64:ba:
                    5d:a3:1e:ce:19:c8:0a:5e:9f:8f:ff:98:86:63:f4:
                    9f:30:c3:8b:aa:0a:df:5d:39:54:62:b2:77:77:b3:
                    c9:7b:b7:da:fa:da:cc:56:25:f9:c7:07:ef:ec:15:
                    99:27:b6:d8:6d:8e:96:e7:f0:8a:56:31:49:bc:f9:
                    bf:b9:ce:05:95:f8:e6:59:34:39:d4:da:2b:c6:ac:
                    2b:5b:f3:98:c7:99:2c:dc:05:0e:26:84:d3:55:6d:
                    59:69:e5:35:f9:70:9b:e8:33:fb:80:49:91:51:24:
                    c0:8b:df:1f:f3:19:c3:c0:d2:f2:89:50:1e:57:b0:
                    14:95:e5:00:3c:e8:56:09:b4:5c:b2:76:dd:89:9b:
                    82:ae:56:fc:b7:ba:c3:a1:62:73:3f:2e:95:b9:5d:
                    3c:a9:92:ab:11:fc:39:e0:f1:95:ee:6c:c7:9c:fd:
                    20:c1:b0:f6:a0:2d:4e:71:e9:1c:14:2d:87:c9:da:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D5:01:F0:24:9C:B1:63:E0:BE:DC:3D:E3:3B:A3:24:BB:32:0D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/24aa3477-deac-31ca-bd53-7a6f0f13617d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.216.0/23
                  63.133.219.0/24
                IPv6:
                  2602:fbd9:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:f9:c3:e0:66:42:07:f0:9b:55:24:09:b5:78:a2:42:45:
         11:58:5e:f3:45:a5:5d:36:51:d9:51:51:b5:86:52:fd:6b:c4:
         31:5e:06:e5:48:94:0a:48:48:b4:9f:7b:9d:37:60:9c:6e:70:
         e3:a3:9b:06:e1:4a:70:d8:a8:15:14:dd:01:81:f5:9e:03:03:
         08:3f:9f:bb:71:d2:6a:20:dd:04:cd:6a:f7:37:75:47:9f:bb:
         d6:93:bb:be:81:6b:82:e7:25:1c:25:27:dd:b8:26:f6:76:8d:
         ca:13:f5:f5:38:40:01:5f:b7:b1:52:fa:a1:d9:bb:87:7e:94:
         c4:64:b1:f1:be:5e:31:93:54:e0:9c:dd:ba:de:3a:58:eb:86:
         4c:52:14:53:30:fa:fb:e8:4e:b7:20:be:34:a4:d7:f2:0d:25:
         b2:81:c4:df:9b:46:62:14:f4:0b:1e:b0:60:de:92:aa:7d:01:
         3c:35:a3:82:4a:05:83:e6:c8:c4:ff:c1:b2:ca:af:c6:af:42:
         10:37:63:2a:a1:7c:be:5b:d0:e5:d0:9b:1a:6e:e7:e5:1c:7f:
         0b:f0:9f:c7:82:c9:ac:04:a6:a4:a3:19:a7:be:55:03:99:d8:
         c2:27:4d:95:09:2b:dd:88:a0:d1:81:9d:94:75:86:a6:25:0d:
         23:3e:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:00 2024 by rpki-client on console-fra.rpki-client.org