Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63ae1054-6035-3cb6-bd08-42721f37f50d.roa
File:                     63ae1054-6035-3cb6-bd08-42721f37f50d.roa (raw, json)
Hash identifier:          oGtP5Ej1ugrf7bWP5pOnMiRibYA58gkSj1UCC6W1hhQ=
Subject key identifier:   20:E4:DB:DF:37:3E:1E:D1:8B:68:A7:48:71:86:5F:D4:32:40:DB:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584461D44C44C30DBC27B24F80A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63ae1054-6035-3cb6-bd08-42721f37f50d.roa
Signing time:             Sat 30 Dec 2023 02:00:15 +0000
ROA not before:           Sat 30 Dec 2023 02:00:15 +0000
ROA not after:            Fri 29 Mar 2024 01:00:15 +0000
asID:                     54500
IP address blocks:        107.164.14.0/24 maxlen: 24
                          104.253.160.0/24 maxlen: 24
                          104.252.160.0/24 maxlen: 24
                          104.164.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:61:d4:4c:44:c3:0d:bc:27:b2:4f:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 30 02:00:15 2023 GMT
            Not After : Mar 29 01:00:15 2024 GMT
        Subject: CN=fba08b00-49c0-49a4-90fa-9fcdb337af46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:5b:47:e4:81:dc:9b:47:dc:b4:9e:05:73:
                    50:c4:32:82:98:af:86:45:39:9c:5d:26:71:08:30:
                    81:60:ae:7e:39:c1:40:c6:0c:13:57:2b:d8:19:b0:
                    57:4a:1f:bd:7a:58:bc:42:2d:55:93:de:78:9e:db:
                    97:71:82:bc:a0:d9:01:4f:ec:53:ed:88:41:76:6d:
                    10:8b:c9:3b:43:70:7c:d9:86:d6:1f:7e:bc:23:49:
                    02:76:45:b9:bc:78:b7:df:06:14:b7:12:11:52:24:
                    ec:bb:f9:45:bb:83:c9:d9:ab:37:2a:7f:94:ec:6a:
                    d0:ae:f0:7f:60:e9:c1:b0:f2:f7:63:33:1b:63:a0:
                    b1:57:cc:0b:56:6e:7d:74:0b:2c:c5:71:fc:f9:06:
                    7a:43:54:60:07:c9:ad:54:d5:ab:bf:a2:a4:d0:df:
                    ae:cf:67:80:5f:19:3f:06:8b:f7:d0:26:3d:d1:d8:
                    1f:91:45:7c:a0:7b:80:d0:b5:34:45:42:d3:1a:77:
                    fe:e9:95:51:1c:71:0f:a7:f4:54:52:b9:f2:24:6f:
                    b0:29:a0:2d:5e:bf:19:a7:1e:78:95:f9:9d:f5:0c:
                    38:b3:fb:f1:f3:04:4e:c8:87:eb:9a:fc:46:49:3b:
                    c4:c0:ca:7f:73:86:b1:8f:6c:39:c8:5e:17:de:8d:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:DB:DF:37:3E:1E:D1:8B:68:A7:48:71:86:5F:D4:32:40:DB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63ae1054-6035-3cb6-bd08-42721f37f50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.151.0/24
                  104.252.160.0/24
                  104.253.160.0/24
                  107.164.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6a:ef:a1:e7:68:87:30:19:30:35:50:1d:b9:96:e1:e4:03:
         d5:f1:fe:fb:09:4d:7a:71:5f:4e:3e:e3:c5:a6:80:65:8e:2c:
         da:ca:32:46:6c:cc:95:7e:0e:06:a7:94:3c:b1:e9:51:88:0f:
         26:5f:42:e9:cf:83:67:cf:7e:b6:66:f3:9a:5e:0a:15:b4:5d:
         04:aa:7e:99:28:3d:04:83:c6:6c:09:ce:e2:7f:0a:84:38:95:
         12:db:74:93:ff:69:47:47:31:54:14:f3:ac:d7:97:86:25:fc:
         6f:5d:15:1b:58:ba:73:6f:9b:1a:34:11:94:00:c1:e4:3a:77:
         7a:f9:42:0e:3e:3d:9a:6c:75:f6:8b:be:1b:bc:a7:1f:71:11:
         d6:26:5f:9c:25:92:48:83:fd:16:75:7c:e5:82:0e:68:b0:96:
         cd:04:61:21:b3:d0:3a:ea:aa:3c:14:f7:56:0c:a5:4f:5c:95:
         b2:43:2d:a7:9c:d3:73:13:95:14:87:a2:77:1c:df:82:39:b1:
         f4:aa:72:db:b0:38:36:8b:12:59:6a:90:73:75:b8:0e:23:c9:
         49:0a:59:10:77:75:af:0c:c6:17:a9:08:e7:22:8a:e0:b6:56:
         a4:ad:83:9c:ae:c0:ae:2f:3c:6e:d2:76:76:4e:1e:c5:70:3a:
         e1:1a:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:07 2024 by rpki-client on console-ams.rpki-client.org