Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/01eff668-eb77-39e5-a3af-a66afd565bab.roa
File:                     01eff668-eb77-39e5-a3af-a66afd565bab.roa (raw, json)
Hash identifier:          Jn0xo2Zi7/DCWCoyT6IENUMeTUuJsy1wXGVBF7iNvcA=
Subject key identifier:   B0:8C:25:69:E5:D4:27:AC:38:C0:B5:68:3B:E0:A1:0C:FE:6A:B9:66
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F43285844481B04C5EE9930C65545C500
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/01eff668-eb77-39e5-a3af-a66afd565bab.roa
Signing time:             Wed 20 Dec 2023 20:51:47 +0000
ROA not before:           Wed 20 Dec 2023 20:51:47 +0000
ROA not after:            Tue 19 Mar 2024 19:51:47 +0000
asID:                     15731
IP address blocks:        68.170.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:48:1b:04:c5:ee:99:30:c6:55:45:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Dec 20 20:51:47 2023 GMT
            Not After : Mar 19 19:51:47 2024 GMT
        Subject: CN=79be9e66-b2d0-4f67-a357-a355139e9057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:5a:c1:15:ff:ae:a9:36:a1:71:a3:de:03:
                    fd:2b:31:f3:09:1c:a7:4e:6e:28:1f:1c:33:53:93:
                    15:c8:ce:d2:07:2d:7b:e1:43:c0:68:3b:0d:84:c6:
                    0b:e2:ff:ed:ec:38:22:c4:4b:20:0f:ec:f9:b2:8a:
                    6b:1d:7c:63:b5:9a:f0:54:82:57:de:ea:78:b7:4a:
                    a3:74:98:bb:d5:51:03:d7:be:8a:e4:d2:bd:12:3e:
                    86:d7:08:6f:d9:10:6d:26:be:6c:19:ef:11:41:b3:
                    a5:a7:56:63:7b:cc:c0:13:a3:fc:35:4e:6d:bb:fd:
                    e0:4e:8d:c5:56:5e:28:05:29:6b:9e:59:6e:59:b5:
                    ef:46:b5:d5:fa:40:3e:dc:2b:25:98:18:4d:21:86:
                    ea:24:85:28:d5:d2:68:78:68:21:b3:2d:0e:be:54:
                    04:b9:5c:bb:47:66:3d:56:e1:de:2b:13:c9:41:13:
                    03:62:dd:b7:96:d0:e0:85:3a:11:2a:be:69:71:af:
                    52:1e:17:2f:ae:a1:53:f7:d0:a7:56:94:d9:a6:f2:
                    b2:86:94:f4:b2:07:fe:df:d4:02:57:89:d6:5e:e3:
                    18:05:fd:f3:51:fb:9e:10:02:64:c0:39:60:61:f5:
                    86:97:f3:77:22:30:cb:06:c3:66:58:9d:b0:03:31:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:25:69:E5:D4:27:AC:38:C0:B5:68:3B:E0:A1:0C:FE:6A:B9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/01eff668-eb77-39e5-a3af-a66afd565bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:61:b9:ca:85:6a:76:9c:b1:b7:79:40:9d:10:b1:4f:d4:
         8a:d5:87:1c:94:b8:f0:1d:cc:97:ae:d1:84:3d:9b:e3:7d:2d:
         f7:19:83:ef:bc:95:68:cc:ff:cf:50:5b:f5:9e:6f:b7:38:59:
         ff:89:aa:01:29:85:28:99:bb:f6:51:11:7f:a9:1e:b6:62:0f:
         68:87:0f:15:02:4d:93:d4:7c:d4:a1:44:66:f2:f3:59:8f:b7:
         dc:60:82:76:89:9a:63:fc:62:01:d2:30:08:54:19:dd:b1:be:
         63:c0:dd:ec:3b:14:d2:e0:1e:b4:4d:0a:a5:11:8e:82:d0:20:
         49:e9:79:61:19:15:e4:55:2f:18:00:1e:0e:b5:f5:4f:a2:67:
         b5:17:88:c3:55:ce:c8:13:2b:32:51:b4:4b:3d:8c:3f:3e:89:
         76:23:4d:65:d5:ea:bd:1e:40:f5:35:b5:bd:77:05:b7:b6:93:
         8c:53:65:4a:88:14:af:87:b2:21:65:1d:6c:e7:a3:05:f3:1e:
         00:22:cd:c1:59:50:3f:cd:84:17:c7:93:3f:c0:8e:f8:06:0f:
         b8:32:9d:3a:45:58:c3:77:b0:5c:d9:08:5d:10:1c:32:04:27:
         aa:cd:d4:d6:08:f4:25:6b:b4:06:38:27:e9:88:5a:60:bd:3a:
         7d:ea:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org