Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10933df5-c832-3e94-9537-ce997a3cb171.roa
File:                     10933df5-c832-3e94-9537-ce997a3cb171.roa (raw, json)
Hash identifier:          55E4KRA0Q/rE56CV4yehOS05k050dzgxZpwZcSuryT4=
Subject key identifier:   21:B7:9B:8A:F0:E9:7D:42:9A:C8:0B:9E:6D:40:AD:61:42:BC:6A:66
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858450C202D35AA891B81F9956B60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10933df5-c832-3e94-9537-ce997a3cb171.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     209854
IP address blocks:        107.164.124.0/24 maxlen: 24
                          107.164.148.0/24 maxlen: 24
                          104.253.215.0/24 maxlen: 24
                          107.164.101.0/24 maxlen: 24
                          104.253.72.0/24 maxlen: 24
                          104.253.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:2d:35:aa:89:1b:81:f9:95:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=abf54d9f-4976-4c60-a73b-1ad03d634de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:bf:a6:5e:ef:c9:9e:8f:3e:b9:9a:f1:09:
                    6d:93:b5:35:2f:23:f4:a8:27:53:87:64:34:a4:70:
                    50:2a:90:56:46:9a:27:b1:2f:81:b2:ea:a7:ab:cf:
                    90:11:f6:f4:37:5f:be:60:7d:57:ec:32:d9:4d:8c:
                    12:f5:73:56:1b:90:5c:8b:fd:72:d8:62:b0:68:8d:
                    9d:2c:f0:61:79:25:60:54:95:af:a7:54:e6:d8:07:
                    8c:c2:75:7d:0e:5e:25:36:0a:5c:af:6b:30:8d:b2:
                    96:3d:e9:37:f4:1d:9c:26:79:45:64:6e:fe:19:79:
                    d6:2b:f0:9e:c1:8a:d2:27:42:b0:9a:42:37:fa:c6:
                    37:55:da:9e:29:1c:6b:05:58:5b:31:bb:23:4d:ef:
                    09:76:27:b7:03:78:05:37:5f:3a:d9:44:f6:5a:2b:
                    41:2f:9e:96:4e:ad:f1:bd:42:e0:95:33:ab:dc:39:
                    e3:d6:7d:8c:4b:cb:02:52:eb:d1:d9:2e:71:64:b4:
                    77:70:18:99:20:cf:7b:82:d6:5a:77:1c:04:6d:0f:
                    f8:26:49:b8:05:4f:b1:5d:15:d4:d4:34:d2:2e:93:
                    f4:4a:3f:66:2a:a1:94:47:23:51:5d:b0:8d:6a:a5:
                    2c:dc:16:20:4c:c3:0d:d9:0c:8c:20:92:1b:3b:d2:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:9B:8A:F0:E9:7D:42:9A:C8:0B:9E:6D:40:AD:61:42:BC:6A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10933df5-c832-3e94-9537-ce997a3cb171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.72.0/24
                  104.253.202.0/24
                  104.253.215.0/24
                  107.164.101.0/24
                  107.164.124.0/24
                  107.164.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:d6:ea:ae:5a:ad:22:fa:3f:0a:f9:34:26:a2:8b:df:5e:
         95:76:ce:24:df:f1:52:98:7e:47:96:dd:cd:9e:fc:52:15:cb:
         29:13:f7:fb:22:80:d2:6e:6e:91:52:9b:c5:91:b9:d8:ec:c6:
         f6:ea:ab:fe:f1:2e:c4:98:3f:f7:78:03:12:56:25:6c:ac:56:
         cf:b0:87:92:b7:cc:63:d5:e3:4b:62:b4:1a:20:1d:3b:55:11:
         ac:fc:20:d9:e6:3f:3a:38:31:46:16:95:09:78:d2:1a:32:17:
         00:2f:8e:b4:00:95:0e:f3:09:d4:0e:03:8c:94:1e:63:04:6a:
         93:3e:f9:39:45:98:3c:1f:6c:23:60:35:c6:a2:33:94:b5:ba:
         99:18:33:e4:af:93:d3:67:57:65:00:8e:09:b7:a7:de:cd:fc:
         b5:38:74:1e:fb:7a:b2:0c:89:ef:cd:06:e9:9d:42:5f:b4:63:
         cc:be:d8:b5:d6:cd:f6:ce:07:25:32:3e:e6:c2:6b:52:d0:5a:
         cf:ab:89:db:88:98:47:2a:42:72:60:58:c3:05:4c:0e:9f:f5:
         d1:cb:71:ba:44:94:a5:05:4a:05:41:a0:d0:82:58:ea:56:5a:
         9f:d9:c5:3a:2f:72:0d:9c:06:32:f0:c5:f0:44:2b:03:17:be:
         78:c5:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:18 2024 by rpki-client on console-fra.rpki-client.org