Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4bd43cf2-16ae-3ef6-a78d-2ae3402e386b.roa
File:                     4bd43cf2-16ae-3ef6-a78d-2ae3402e386b.roa (raw, json)
Hash identifier:          IJcXEz1SSTxzl8r0bkg85vpkUPH+RnsuA/XgHlEzkjo=
Subject key identifier:   C1:0C:F9:7C:B2:C3:78:69:F5:0E:2C:3D:52:C9:B9:66:0E:80:5C:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858428BB6849798E60CDC8DFE5DDC
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4bd43cf2-16ae-3ef6-a78d-2ae3402e386b.roa
Signing time:             Fri 14 Jul 2023 16:30:22 +0000
ROA not before:           Fri 14 Jul 2023 16:30:22 +0000
ROA not after:            Thu 12 Oct 2023 16:30:22 +0000
asID:                     834
IP address blocks:        45.38.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8b:b6:84:97:98:e6:0c:dc:8d:fe:5d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 16:30:22 2023 GMT
            Not After : Oct 12 16:30:22 2023 GMT
        Subject: CN=6edc2939-4020-4b67-8ccd-e13fa780313d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:c3:e7:65:55:e0:37:4c:b9:08:dc:88:f0:
                    60:a0:24:4b:63:71:e2:41:c8:3b:92:7b:16:f2:bb:
                    3f:62:ff:47:40:48:1a:43:19:10:89:fa:e3:7a:48:
                    65:85:22:67:bb:d0:91:40:d4:57:55:00:19:68:18:
                    eb:2c:07:c0:6f:90:14:65:b2:cd:93:0d:53:f7:3f:
                    38:57:70:a6:5a:86:93:02:db:42:3e:82:51:0e:16:
                    64:62:70:38:d7:f7:e1:13:ec:14:03:17:d9:50:0e:
                    43:17:f7:6f:bb:9d:85:2e:7c:60:33:ad:4a:8f:4b:
                    b5:57:1c:10:b2:ef:6c:24:f0:2b:e7:ac:33:fb:d3:
                    25:82:1b:2d:e5:d1:24:64:f5:1a:d3:23:b2:2c:12:
                    e8:bd:b7:24:62:32:fe:25:7a:04:d9:50:25:bd:18:
                    f8:9f:f9:f5:60:24:ed:42:f5:e1:7b:d0:d4:39:f6:
                    f6:6d:08:09:6f:18:4d:c7:08:79:93:ef:11:de:d5:
                    74:41:57:06:42:b4:e3:ef:11:95:46:0f:ec:e5:c2:
                    14:37:13:b3:04:74:08:59:1e:9b:21:fe:6c:35:b8:
                    35:19:13:04:21:35:e5:2c:b1:28:88:4b:8f:aa:47:
                    51:27:7d:dc:9e:ff:39:ef:48:11:e7:89:5c:1e:e6:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0C:F9:7C:B2:C3:78:69:F5:0E:2C:3D:52:C9:B9:66:0E:80:5C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4bd43cf2-16ae-3ef6-a78d-2ae3402e386b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:73:b6:ff:07:aa:bb:d9:d7:fb:98:79:67:0f:5f:65:f3:
         b1:fb:11:d8:ab:1f:bf:d3:90:f1:e9:ed:97:d4:6c:eb:a7:82:
         2d:b2:f5:08:c9:32:5a:52:5f:57:34:3e:5f:5c:3b:97:44:21:
         cd:c7:a3:ac:40:e9:e6:06:51:be:a4:b0:74:d9:2d:51:ec:a9:
         76:6b:be:f0:bb:14:8a:e8:4a:7c:79:16:d0:40:a8:96:f2:63:
         18:57:6e:34:e6:59:9c:37:99:1b:96:d2:3d:ed:11:3a:c4:27:
         04:9c:8f:ae:3f:ba:22:35:23:57:ed:bf:2e:3c:f6:73:05:6a:
         50:c1:ba:3b:8f:48:0a:db:7e:0f:02:30:aa:20:ed:89:dc:21:
         fe:af:55:d1:fe:65:10:87:b7:bf:2b:60:64:95:06:da:a8:9e:
         64:91:9c:7f:f8:53:9b:75:07:e7:f7:cb:f9:4a:92:09:d5:8e:
         e0:e5:54:b3:ca:92:a2:1b:52:51:b0:78:3f:20:3f:8a:ae:e4:
         bc:b5:a3:41:40:f7:fe:1f:c7:82:ad:f1:7c:95:fb:f2:42:f7:
         46:91:f2:51:64:93:d6:10:f2:3c:bd:f3:50:a2:b0:28:ef:2e:
         f4:bb:ff:cc:08:1f:1e:f3:64:c0:56:f9:a0:f2:ba:ca:9e:0b:
         35:1e:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:22 2024 by rpki-client on console-fra.rpki-client.org