Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc8b778-b53f-3228-b735-c5c9ce2065ee.roa
File:                     cdc8b778-b53f-3228-b735-c5c9ce2065ee.roa (raw, json)
Hash identifier:          fj0wh+zSExvcmW2gt5E+Yqhdjp5zTjglMUtvNlop+2U=
Subject key identifier:   A3:D9:39:6A:FC:85:96:D8:96:A5:39:A7:D3:AF:29:71:66:1A:59:08
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285844347AAE0E3B7D5398CDBD00C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc8b778-b53f-3228-b735-c5c9ce2065ee.roa
Signing time:             Wed 13 Dec 2023 20:08:21 +0000
ROA not before:           Wed 13 Dec 2023 20:08:21 +0000
ROA not after:            Tue 12 Mar 2024 19:08:21 +0000
asID:                     64267
IP address blocks:        172.252.233.0/24 maxlen: 24
                          192.177.33.0/24 maxlen: 24
                          192.177.82.0/24 maxlen: 24
                          192.177.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:34:7a:ae:0e:3b:7d:53:98:cd:bd:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 13 20:08:21 2023 GMT
            Not After : Mar 12 19:08:21 2024 GMT
        Subject: CN=5a7ac723-2636-4d02-9c7d-df9535d4e796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:03:8b:36:f5:4d:82:26:33:12:30:70:f4:
                    89:40:1d:e9:73:2a:29:53:f9:24:31:53:e5:7f:a8:
                    fe:3a:5e:3b:7b:2b:a1:58:21:50:9c:1f:22:5a:8d:
                    ea:cb:9e:61:91:8e:d3:6c:85:14:27:9b:7b:db:ef:
                    54:29:d5:0b:f4:a9:d6:96:a5:c8:f4:5f:95:a6:0e:
                    14:2b:50:18:04:12:8e:5e:a9:87:d1:94:05:1a:cb:
                    c9:7e:a8:4f:5e:7a:8e:7f:81:a1:02:6c:8b:94:ca:
                    2e:d2:af:b9:42:60:0b:29:d7:29:a4:3a:94:33:f1:
                    24:01:aa:eb:f6:ff:4e:23:df:bf:29:53:d7:0e:6d:
                    ad:81:f0:ec:59:40:0e:2d:a8:2b:b0:aa:c1:90:d2:
                    0c:69:58:01:17:97:87:a3:50:d1:5b:b1:2e:90:3f:
                    86:94:ae:43:e1:2c:06:92:47:c8:b3:cf:9b:1e:fb:
                    83:ec:8e:11:27:f4:f6:62:a7:1b:b9:e0:d9:8f:50:
                    56:a7:0f:b2:e6:35:dd:02:72:86:3c:93:74:4c:53:
                    e4:fb:dd:38:0e:d7:d6:9e:03:fe:e7:50:46:d6:25:
                    0f:d4:69:93:17:39:5f:20:ef:d7:2e:e6:a9:bb:e6:
                    3f:e9:2a:b7:de:6a:d4:05:67:7d:7f:91:d3:1f:28:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:39:6A:FC:85:96:D8:96:A5:39:A7:D3:AF:29:71:66:1A:59:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc8b778-b53f-3228-b735-c5c9ce2065ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.233.0/24
                  192.177.33.0/24
                  192.177.82.0/24
                  192.177.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:94:b5:ad:07:e1:69:3a:42:f3:c9:71:54:ce:0f:8c:83:4f:
         9c:04:d7:75:a6:5e:6a:18:98:6c:08:ef:ab:24:bc:47:f8:bd:
         6e:dc:21:2c:23:5d:67:e4:c4:eb:ca:34:ff:84:b0:4e:fc:9e:
         2f:76:29:9e:cf:90:97:8d:2a:88:ab:52:ec:13:cc:0e:ba:0d:
         e2:da:f9:2b:23:a2:24:01:89:93:06:04:07:b8:5e:e1:ca:3c:
         63:88:02:b5:c4:3a:1a:50:75:4c:32:93:2e:90:ba:55:28:08:
         c6:52:4a:bb:35:4a:91:b0:37:df:e0:2a:f7:70:e9:a6:b4:f6:
         0c:9f:40:f2:50:5c:13:08:ca:36:ed:a5:79:7b:18:1f:e6:db:
         dc:bc:4f:a3:d1:7d:9d:43:23:ac:5e:c2:3d:52:06:80:91:17:
         4a:dc:20:3d:f5:62:8e:75:ff:16:26:61:da:53:c7:f5:75:0a:
         fa:2e:ab:6f:5c:38:32:91:35:41:05:41:b1:68:3e:51:4d:4e:
         a3:02:b2:46:9c:85:fa:10:d3:65:21:8d:99:b0:d5:c9:7a:35:
         6d:c3:d9:34:27:a9:0d:c6:34:e9:66:2f:a2:4e:b9:ca:bd:88:
         6e:c1:5f:5b:6c:27:c4:cc:6f:c4:7e:82:cc:8f:c0:4f:67:35:
         85:4b:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:32 2024 by rpki-client on console-fra.rpki-client.org