Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2624a230-0101-359a-9a32-193a21c202f2.roa
File:                     2624a230-0101-359a-9a32-193a21c202f2.roa (raw, json)
Hash identifier:          zquYv0GSVZpY1qSCAUBk7Xs1bZCJLh2tWe2lgRRy620=
Subject key identifier:   28:3A:83:6D:C8:B9:97:12:CB:5D:7C:F3:27:DF:E9:6F:35:FB:90:DD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583ACD2C9C96ACFEE1A46A9CF900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2624a230-0101-359a-9a32-193a21c202f2.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Mon 06 Nov 2023 05:00:00 +0000
asID:                     60311
IP address blocks:        69.46.90.0/24 maxlen: 24
                          205.164.35.0/24 maxlen: 24
                          205.164.36.0/24 maxlen: 24
                          205.164.43.0/24 maxlen: 24
                          205.164.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:cd:2c:9c:96:ac:fe:e1:a4:6a:9c:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Nov  6 05:00:00 2023 GMT
        Subject: CN=15ebfef6-f3c4-4016-9a6d-1d25532e92ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:45:0c:74:88:c9:3b:4a:55:60:ce:40:2a:
                    58:da:21:dd:01:12:6b:b6:e2:ee:84:a8:e2:07:02:
                    07:30:79:28:76:d1:14:f4:ea:b4:bd:29:ff:aa:5f:
                    f7:79:8f:78:31:9b:20:d5:eb:b5:75:32:d7:1f:fc:
                    4f:d0:9c:7b:3b:53:ad:5b:db:f8:5e:97:d3:a5:f0:
                    a5:86:c4:bf:91:18:7e:ae:30:87:50:2b:3a:eb:d2:
                    39:06:3e:a6:d4:11:a9:9a:c6:28:f4:4a:8e:e0:5d:
                    41:64:09:d7:3b:72:a8:11:f2:08:06:3b:41:3c:c6:
                    b0:f2:cd:65:0c:6c:9b:4f:cc:c8:eb:30:4d:35:52:
                    4c:34:8a:21:77:5c:69:72:22:36:c9:09:c7:53:20:
                    e6:3e:53:a3:c2:2e:7d:c7:82:28:e1:e0:91:7c:3f:
                    fe:6d:66:2b:33:ec:29:2c:7e:bf:01:39:61:71:20:
                    e8:f6:41:e1:ee:97:a2:cc:0a:9d:d2:05:f8:49:4b:
                    cb:d5:ef:12:eb:35:0b:1f:3d:1b:09:9d:8e:d4:92:
                    98:c2:95:56:27:e5:ae:da:42:b8:d7:40:85:cb:e1:
                    d1:d0:ed:8b:4d:2c:ef:2e:6c:fa:42:9f:ee:e4:b1:
                    e7:74:c9:2f:1e:c6:f9:0a:46:fe:49:b5:b5:8d:d6:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3A:83:6D:C8:B9:97:12:CB:5D:7C:F3:27:DF:E9:6F:35:FB:90:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2624a230-0101-359a-9a32-193a21c202f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.90.0/24
                  205.164.35.0-205.164.36.255
                  205.164.43.0/24
                  205.164.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:91:d5:70:29:6c:d3:33:53:6b:45:7e:b1:ab:04:c5:a2:
         00:d4:a0:09:b6:fe:05:05:85:08:ca:65:2a:be:ae:22:e7:2e:
         77:22:b5:7f:40:ce:81:76:40:c5:86:69:63:cb:28:76:c6:35:
         d6:96:08:25:07:f9:47:ba:b6:fa:7d:a6:a5:f9:97:c5:d9:ab:
         ad:98:ab:3e:63:a9:9a:98:ea:ca:13:35:0c:b9:db:11:c4:95:
         b3:4b:54:56:29:ab:b2:8d:2e:4a:5b:58:84:cc:4c:7c:19:71:
         9a:e1:1c:e7:23:0c:41:4b:b2:f9:70:87:3a:ab:d6:0f:e6:77:
         8a:ce:e6:d1:e9:4f:6e:06:d1:06:aa:a0:67:09:c8:dd:dd:7d:
         b3:21:36:3f:6c:2d:3f:fe:06:6f:95:3a:e9:9a:d3:d5:aa:0a:
         b2:a7:f2:dd:a4:2a:e5:c0:dc:da:87:a1:f9:82:87:da:fd:c9:
         f8:ff:ee:f0:0f:0f:bd:76:fb:e8:23:6d:75:77:d4:a0:25:44:
         31:58:9b:71:17:40:4e:c2:6b:c0:5b:2a:c9:05:8a:fb:0f:fd:
         87:c2:39:4d:e2:cd:c8:a9:49:e0:79:ae:b4:d2:38:a3:d5:4a:
         7a:21:9e:07:2d:ac:9d:2e:95:bc:5f:f8:b8:7e:e4:68:1c:aa:
         c4:4f:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:04 2024 by rpki-client on console-ams.rpki-client.org