Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/805b2387-e09a-3e44-88fd-5d3c50c28add.roa
File:                     805b2387-e09a-3e44-88fd-5d3c50c28add.roa (raw, json)
Hash identifier:          gURVchQ9bSv5TKY5/g4lGg/IuaTkNlFbr0JJ8BzQnJQ=
Subject key identifier:   48:B8:44:03:86:F6:33:5B:CE:A2:DA:44:C4:54:2C:66:53:69:BD:9F
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F43285842B2BC505906AB92BE5A4C6D00
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/805b2387-e09a-3e44-88fd-5d3c50c28add.roa
Signing time:             Fri 28 Jul 2023 15:58:35 +0000
ROA not before:           Fri 28 Jul 2023 15:58:35 +0000
ROA not after:            Thu 26 Oct 2023 15:58:35 +0000
asID:                     14103
IP address blocks:        199.21.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b2:bc:50:59:06:ab:92:be:5a:4c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Jul 28 15:58:35 2023 GMT
            Not After : Oct 26 15:58:35 2023 GMT
        Subject: CN=105d3548-3e41-457e-b675-ceb27a845d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:be:1c:08:0e:25:e0:93:38:99:1c:9a:a0:
                    87:b7:23:91:e6:a9:0f:fa:1f:c2:2b:e8:b3:4f:cf:
                    da:1c:64:0e:29:eb:b7:8d:ae:ae:28:3d:d6:2c:fe:
                    46:44:20:29:e9:97:40:2c:5e:f9:ab:05:07:67:b1:
                    14:da:1a:50:a1:6c:2e:e7:1b:d9:63:2c:a1:a2:94:
                    61:64:0c:d7:91:ca:51:e0:7d:9e:b1:2a:f6:b3:0a:
                    40:40:af:a8:41:8b:a0:c9:63:84:35:86:f2:01:1a:
                    3c:16:0d:e7:ad:f5:fa:db:10:d5:e6:ba:ef:fa:61:
                    73:f7:c6:d6:05:34:1e:ea:ec:59:b8:12:ad:62:31:
                    71:ef:c3:2c:15:7f:0e:6d:24:7a:58:8c:9b:d1:85:
                    f5:b0:be:50:b7:da:6e:ab:93:30:7d:d1:1d:cd:fd:
                    21:17:16:f8:f8:36:4e:70:c3:98:fd:59:e0:ef:74:
                    ef:57:46:1d:c7:55:ca:60:b3:5c:33:88:c9:91:e8:
                    01:c2:2d:95:58:27:09:bb:e7:79:1e:ab:6b:da:f8:
                    6e:67:6b:83:7d:fd:e3:c8:82:11:91:a0:de:fc:55:
                    c7:9b:db:e0:40:07:55:1e:41:0f:c1:e3:9d:9f:05:
                    81:67:fc:a4:0c:79:60:02:54:a8:51:50:0b:a0:46:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B8:44:03:86:F6:33:5B:CE:A2:DA:44:C4:54:2C:66:53:69:BD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/805b2387-e09a-3e44-88fd-5d3c50c28add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:57:4d:89:b8:5a:3a:bf:df:c4:24:e1:d6:25:e5:c7:1c:65:
         00:84:5e:3d:db:31:9c:90:76:92:d7:92:86:a8:da:50:a5:fe:
         c1:63:95:cc:87:d4:02:d4:8f:5d:69:27:23:b7:4f:74:89:a0:
         94:ed:a3:cf:c2:bd:51:73:97:a9:1b:d1:35:80:61:fc:62:52:
         4f:90:36:ba:0a:d0:2b:d4:39:89:f2:3d:17:33:7a:a7:00:82:
         2f:e8:4d:ad:02:e2:f3:7f:5a:b7:28:7a:ea:7d:32:72:6d:20:
         c0:dd:e3:06:18:45:c2:17:26:85:4b:78:99:2e:88:a3:14:4e:
         b5:14:4a:c6:5b:cc:4b:cd:96:ad:1f:fd:d7:15:96:2d:10:1b:
         cb:96:ad:c7:f3:ee:62:16:c2:09:2f:61:fd:f8:6f:77:6e:38:
         6d:a9:66:a6:d8:ec:15:74:33:5b:e9:6e:59:b4:ea:f1:02:6e:
         70:2f:9d:6e:7f:58:d2:a7:19:77:4e:e4:7f:4c:17:08:db:f0:
         2f:79:0a:ea:65:b6:ba:d0:32:e3:7a:46:df:07:d5:3d:2e:9e:
         01:07:cb:ce:89:1a:d3:40:ea:fd:fa:69:21:47:0b:9d:4d:f6:
         5d:9d:40:da:24:fa:ba:aa:b7:1c:05:76:b1:89:47:5d:41:a4:
         45:7a:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:54 2024 by rpki-client on console-ams.rpki-client.org