Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/307fb805-f917-38aa-86d5-f040b55b70ed.roa
File:                     307fb805-f917-38aa-86d5-f040b55b70ed.roa (raw, json)
Hash identifier:          Nx74Y/GYoBZf/UcB0+NaZEbD77RkG2NBfbaB8ZXxMCY=
Subject key identifier:   E3:A1:AD:E7:66:05:F8:2A:07:32:85:BE:15:AF:19:13:ED:09:AB:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285842ADE14AF592DA61F4824DFDC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/307fb805-f917-38aa-86d5-f040b55b70ed.roa
Signing time:             Wed 26 Jul 2023 22:14:03 +0000
ROA not before:           Wed 26 Jul 2023 22:14:03 +0000
ROA not after:            Tue 24 Oct 2023 22:14:03 +0000
asID:                     212768
IP address blocks:        104.165.81.0/24 maxlen: 24
                          50.118.248.0/24 maxlen: 24
                          104.165.73.0/24 maxlen: 24
                          104.165.78.0/24 maxlen: 24
                          104.165.83.0/24 maxlen: 24
                          104.165.91.0/24 maxlen: 24
                          104.165.107.0/24 maxlen: 24
                          104.165.109.0/24 maxlen: 24
                          104.165.114.0/24 maxlen: 24
                          104.253.11.0/24 maxlen: 24
                          104.253.12.0/24 maxlen: 24
                          104.253.29.0/24 maxlen: 24
                          104.253.57.0/24 maxlen: 24
                          104.253.63.0/24 maxlen: 24
                          104.253.96.0/24 maxlen: 24
                          104.253.141.0/24 maxlen: 24
                          104.253.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:e1:4a:f5:92:da:61:f4:82:4d:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 26 22:14:03 2023 GMT
            Not After : Oct 24 22:14:03 2023 GMT
        Subject: CN=c03f9ab9-8979-4d28-be5e-39be0f954ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:ba:ba:c8:3a:5d:21:ec:96:bf:b5:51:9c:
                    57:93:14:27:6c:3e:d4:10:83:21:ba:54:91:91:dd:
                    29:2f:c7:44:23:b7:de:b8:e1:0c:6c:56:1e:28:fc:
                    5a:89:89:1f:ba:14:78:aa:be:e0:43:bf:7c:1d:26:
                    fe:73:55:b9:06:4f:bf:38:c3:b3:1d:4c:fa:fb:40:
                    45:92:18:89:09:d4:60:c0:cb:67:aa:0c:d8:89:ab:
                    d1:86:f7:14:5b:65:20:8e:5b:df:8e:60:dd:ed:5b:
                    90:26:66:cf:b9:5c:f6:84:4a:7a:b8:37:3f:8d:ba:
                    d9:74:bf:34:8b:2c:67:d8:ac:f2:21:5b:6c:59:df:
                    29:1a:33:8c:09:04:7b:ae:89:32:a7:55:60:ca:91:
                    1b:56:b4:92:3b:c7:2b:49:c5:fb:ce:4b:91:99:d7:
                    3b:70:c3:6c:b7:61:59:16:db:4a:6f:e2:87:10:f5:
                    48:03:97:25:5d:1e:4d:1a:2c:79:df:20:49:d9:47:
                    1c:4c:fd:00:ed:86:3d:5e:a8:a4:c1:2d:bb:9b:e4:
                    71:50:59:86:b7:41:50:d1:b7:a0:77:cf:9a:84:ee:
                    6d:51:9b:c8:18:59:de:0e:ea:eb:8c:cb:ea:9d:eb:
                    98:2b:d4:db:d9:94:e1:2c:90:d9:65:cd:10:49:37:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:AD:E7:66:05:F8:2A:07:32:85:BE:15:AF:19:13:ED:09:AB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/307fb805-f917-38aa-86d5-f040b55b70ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.248.0/24
                  104.165.73.0/24
                  104.165.78.0/24
                  104.165.81.0/24
                  104.165.83.0/24
                  104.165.91.0/24
                  104.165.107.0/24
                  104.165.109.0/24
                  104.165.114.0/24
                  104.253.11.0-104.253.12.255
                  104.253.29.0/24
                  104.253.57.0/24
                  104.253.63.0/24
                  104.253.96.0/24
                  104.253.141.0/24
                  104.253.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:29:26:2c:97:ed:64:7d:98:05:92:de:3c:11:93:e4:cd:
         0e:51:61:f5:a9:4c:93:65:0d:e4:14:6b:83:a1:7a:0c:97:d2:
         72:a2:91:fc:b0:f2:33:f0:a5:42:06:4a:e7:63:76:2a:ac:04:
         bb:fd:ae:41:c6:26:24:78:8e:f9:93:af:50:85:41:01:ef:b8:
         a5:f1:c1:43:42:2e:4c:17:f5:e6:14:fc:18:26:aa:60:b2:22:
         61:0e:9f:6f:26:af:aa:b2:be:e5:da:c7:f3:8e:98:3e:f6:fd:
         3a:3e:36:51:f5:4e:56:75:e6:dd:79:ec:6a:2b:a5:4d:b1:86:
         ae:3f:53:e7:60:e7:aa:76:37:e4:40:3f:d6:e0:e1:6d:16:e9:
         c0:b7:4d:12:c5:9a:0c:42:39:ee:44:08:82:8d:7c:ed:d5:4e:
         6a:de:29:38:b9:e6:8f:13:13:99:9f:fb:17:1b:32:f5:24:f4:
         f1:52:ca:22:e7:f9:e7:04:dd:29:79:a0:15:4e:3c:8a:18:f1:
         84:62:81:2b:3f:a4:68:b9:a9:4f:dc:87:1b:02:9c:94:bf:7b:
         6c:22:90:90:66:36:90:4c:b3:79:b5:df:87:6d:c9:63:e8:d9:
         e5:f2:37:3d:b0:90:ae:59:31:c4:c5:47:4f:bc:22:4a:7b:cc:
         35:bb:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:05 2024 by rpki-client on console-ams.rpki-client.org