Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d6d7749-4012-368f-bfb0-7a68a8c72599.roa
File:                     8d6d7749-4012-368f-bfb0-7a68a8c72599.roa (raw, json)
Hash identifier:          LkQ8/uogiFJuh8gHHGo/AJo3NIVNhp7oaBE+G6BWVqQ=
Subject key identifier:   B1:08:9F:F8:DD:5F:00:6F:B6:40:73:51:CC:2E:D3:BE:18:3A:93:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285842EB9EE947D30F27BE8A467880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d6d7749-4012-368f-bfb0-7a68a8c72599.roa
Signing time:             Fri 18 Aug 2023 01:00:23 +0000
ROA not before:           Fri 18 Aug 2023 01:00:23 +0000
ROA not after:            Thu 16 Nov 2023 02:00:23 +0000
asID:                     60721
IP address blocks:        172.252.212.0/24 maxlen: 24
                          172.252.170.0/24 maxlen: 24
                          172.252.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:eb:9e:e9:47:d3:0f:27:be:8a:46:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 18 01:00:23 2023 GMT
            Not After : Nov 16 02:00:23 2023 GMT
        Subject: CN=d3bae899-1d8d-4a92-b407-501d45519e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:e1:5a:1e:27:06:b1:ae:75:85:6f:74:31:
                    ae:9a:8c:0a:87:87:a6:c5:85:2d:7b:9f:32:30:23:
                    4f:90:0f:45:90:77:ae:ee:9d:2c:df:6b:e1:05:78:
                    44:11:25:ae:14:ae:c6:30:f1:cb:eb:63:e4:8e:0f:
                    1e:e2:73:f7:40:6d:80:17:38:80:8a:c3:c7:95:0a:
                    6d:e7:a7:93:b0:1c:a9:00:11:4d:f4:a3:a4:f4:87:
                    d4:36:56:55:c1:46:24:45:83:a4:a2:6a:8a:f3:f5:
                    d4:31:1b:80:4a:06:d2:f4:af:4d:e3:ce:98:93:dc:
                    a2:d5:d1:d0:9b:37:7a:42:79:7e:e0:6f:1f:ad:de:
                    b0:96:87:84:a9:3b:ca:79:a9:79:20:c5:3c:24:c2:
                    e6:09:55:97:3b:c7:53:0c:ad:a0:f1:b2:28:ef:49:
                    8c:7e:a6:f3:0a:4e:fb:d2:05:31:d1:d1:04:67:99:
                    60:1d:48:b6:30:1d:64:c9:61:2e:31:50:92:81:1a:
                    2e:3b:39:f8:91:f1:c8:7c:d0:09:ef:80:35:1e:4e:
                    bc:6b:22:79:d8:80:4b:79:5f:a4:f5:58:7c:30:f3:
                    96:33:58:99:4b:89:1a:a8:65:8d:82:58:78:ca:22:
                    95:f6:76:ce:ef:75:6e:73:09:a0:5e:f9:d5:83:a4:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:08:9F:F8:DD:5F:00:6F:B6:40:73:51:CC:2E:D3:BE:18:3A:93:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d6d7749-4012-368f-bfb0-7a68a8c72599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.162.0/24
                  172.252.170.0/24
                  172.252.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:33:8e:6e:22:0f:9d:32:96:95:90:bb:e5:b6:02:a6:fb:69:
         c0:37:b3:4e:9a:67:47:65:a9:d8:96:8c:52:dc:e0:92:eb:71:
         f5:c8:9d:92:58:ed:0f:6e:7a:c9:d8:79:3e:42:aa:6d:d7:d7:
         b5:59:c2:65:57:83:0e:91:52:ab:29:a9:82:6a:52:f5:32:b8:
         0c:78:53:83:06:19:97:2c:5e:03:6e:10:4f:58:e1:4e:17:0f:
         35:32:f2:f1:ad:ec:dc:26:39:fd:b8:c2:50:dc:c3:6f:56:5f:
         53:cf:d6:f2:ba:9e:c8:05:19:62:ab:66:18:ca:df:f3:c6:42:
         95:cf:5d:f7:d2:32:69:81:8f:85:61:ab:42:5f:6d:cf:e3:9e:
         6f:43:d3:ab:18:e9:52:6a:3c:f4:f8:e7:c4:0a:fb:17:f4:d6:
         7e:fa:fe:ca:04:d2:8e:f6:ae:00:ba:04:1d:73:df:7c:f6:2c:
         e3:01:8e:68:65:d5:14:eb:a4:0d:6b:9c:eb:55:2e:a5:58:0c:
         c1:0c:4b:c8:a8:5f:3f:b9:af:c9:2e:6c:a9:cc:3f:02:b6:65:
         5c:0e:af:cf:9b:ad:51:bf:92:f3:67:a8:f2:ff:00:d1:22:25:
         50:df:c3:f7:bf:3a:d6:bc:68:4e:21:cf:a3:6b:c0:e8:40:1d:
         83:6c:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:27 2024 by rpki-client on console-fra.rpki-client.org