Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/3eef3639-28f5-3cda-a71a-ec629b177e6f.roa
File:                     3eef3639-28f5-3cda-a71a-ec629b177e6f.roa (raw, json)
Hash identifier:          224gRc4THwXWBMxB1XZ8Evjb+6i3Xc5mgsUcWQ1kruM=
Subject key identifier:   93:B0:93:DE:08:42:B8:4B:25:91:F3:4B:06:87:5E:45:8F:D1:E5:E7
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F43285844ED6A917C904ACF3F18160600
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/3eef3639-28f5-3cda-a71a-ec629b177e6f.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     7029
IP address blocks:        68.170.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:91:7c:90:4a:cf:3f:18:16:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=4c2cb413-ed79-429b-9557-c3e17a1845b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:df:ff:80:64:e7:9d:ce:a0:84:74:f7:c2:
                    ca:e3:6f:9a:6c:9c:1a:5d:08:0d:b9:ee:d9:7c:eb:
                    50:c9:a1:b0:20:a9:dc:20:7c:ea:24:0e:b9:55:19:
                    e3:90:38:00:10:cc:e5:07:c9:9b:3f:ac:ba:70:71:
                    b0:0d:8c:b1:38:a1:93:9d:45:ec:14:0d:3d:33:1d:
                    08:27:63:e6:c7:5c:77:48:70:b0:a8:6c:24:44:c5:
                    ae:97:d1:2d:b9:11:2b:23:b0:dc:5d:2a:45:2b:47:
                    0f:9a:e9:6f:38:07:6c:ff:0f:90:e2:a5:df:67:14:
                    fc:4b:5e:cc:5d:3e:9d:3d:d3:18:e4:8f:40:d7:01:
                    f8:b3:32:38:41:33:57:c1:d3:da:ff:c9:8c:87:c7:
                    fe:0f:b0:13:3b:fe:1a:70:9e:3e:44:9b:a8:5c:a7:
                    8a:41:bf:10:eb:9f:93:a8:d6:47:fb:48:5d:56:ad:
                    4e:7a:07:58:c4:ef:d3:43:54:7a:2a:d4:ba:03:88:
                    1a:16:66:08:5f:9f:84:74:c7:cc:ec:ec:23:0c:14:
                    b9:83:d6:fd:f6:26:4b:4b:f7:2d:7c:84:3f:6c:88:
                    7e:54:44:15:ac:ad:92:7b:4d:77:1b:fb:82:9e:60:
                    e3:97:70:8a:24:35:3c:1f:d3:3f:0b:56:21:bb:30:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:93:DE:08:42:B8:4B:25:91:F3:4B:06:87:5E:45:8F:D1:E5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/3eef3639-28f5-3cda-a71a-ec629b177e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:31:e4:8e:51:19:41:4f:ad:9c:24:3c:be:a4:a6:72:ca:
         f4:f1:18:6f:c0:fa:68:ae:2a:2b:60:17:3e:2d:39:1a:a9:ce:
         28:f1:4f:d3:33:ab:18:67:65:da:ad:34:ef:b6:28:ab:92:34:
         87:ef:15:1b:7a:bb:5f:f9:7c:07:6f:48:7f:2d:1f:d2:ee:cd:
         07:17:cf:93:c5:32:d9:b9:d8:0a:ac:d1:36:5b:77:7d:11:0c:
         93:7e:9f:22:78:30:4c:41:ad:73:04:e9:0c:a2:46:83:af:46:
         54:11:d1:24:7e:bd:1a:ea:17:45:30:23:ac:3a:15:9b:94:d7:
         23:cd:ec:c4:a4:89:a1:c0:25:6c:bc:ca:f0:46:58:8e:ce:88:
         f9:7b:9c:b9:7e:0b:1f:25:15:09:20:33:88:88:99:68:20:fb:
         2a:6b:fe:63:17:e5:f2:31:5b:eb:5c:aa:fb:cd:96:67:05:e7:
         1a:6a:27:25:48:d2:20:02:be:52:a7:90:0d:8a:9a:78:81:95:
         f2:56:e5:af:92:39:aa:c5:e8:bd:2b:93:ef:4e:c0:fb:bc:84:
         01:94:03:18:31:13:a7:e4:0a:46:db:1e:ef:1f:14:fa:df:69:
         28:96:07:d9:e1:a9:99:ea:a2:87:b9:e9:65:36:30:f7:2e:a6:
         3c:7a:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org