Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de4dc279-d688-3971-be42-07a71b95be81.roa
File:                     de4dc279-d688-3971-be42-07a71b95be81.roa (raw, json)
Hash identifier:          3vlqXh2hjWwU3Z/MiwPSm+18Ma+x7j1TrC2Pcu62RJY=
Subject key identifier:   A0:85:F5:97:10:48:5A:71:C9:D1:85:67:23:72:4B:C0:B2:C0:20:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858426FB8476EDDCA52B2C032EF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de4dc279-d688-3971-be42-07a71b95be81.roa
Signing time:             Tue 04 Jul 2023 15:51:17 +0000
ROA not before:           Tue 04 Jul 2023 15:51:17 +0000
ROA not after:            Mon 02 Oct 2023 15:51:17 +0000
asID:                     212238
IP address blocks:        45.38.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:6f:b8:47:6e:dd:ca:52:b2:c0:32:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  4 15:51:17 2023 GMT
            Not After : Oct  2 15:51:17 2023 GMT
        Subject: CN=87d32c7f-4b17-46fb-bebf-ed447a946d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:1c:1b:a5:40:3b:0a:02:03:7f:b6:e5:1c:
                    e7:4a:9a:d3:a3:5f:84:79:dc:06:07:37:ac:a0:b5:
                    1d:90:64:a3:e5:bb:f2:56:80:75:60:a5:6b:1d:73:
                    f2:3f:97:78:6f:19:64:d0:55:0d:32:f2:fe:f4:fc:
                    7f:68:2c:b2:b0:a0:8a:23:56:5a:98:15:08:97:f0:
                    97:50:c4:c8:80:19:66:fe:a0:a7:06:c7:ec:54:02:
                    bc:8a:f2:53:ab:43:b7:65:28:30:5c:2e:6a:39:21:
                    64:20:58:90:13:8d:99:34:76:ef:70:de:aa:55:9e:
                    7f:73:33:0e:cb:e8:0b:73:7a:db:f8:be:7a:66:ef:
                    c1:8c:9c:f6:47:49:c8:a9:22:79:47:19:6d:8a:69:
                    8e:33:01:34:0e:d0:8b:57:71:6f:95:0d:7f:24:42:
                    73:74:23:57:62:c7:9b:b1:b3:89:b3:08:a9:8e:ca:
                    5f:b7:6a:4c:4f:bb:16:b0:9d:25:2d:de:fb:7e:f1:
                    ed:15:54:0d:08:77:6d:c4:3f:f8:4a:9c:70:61:d1:
                    17:fa:89:3a:57:b7:7f:57:fd:13:6d:81:84:c2:bb:
                    88:72:6e:21:15:48:ce:4a:c7:38:64:fb:9d:c8:ef:
                    87:2f:c9:c1:9a:e6:68:70:0c:41:00:8d:09:54:13:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:85:F5:97:10:48:5A:71:C9:D1:85:67:23:72:4B:C0:B2:C0:20:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de4dc279-d688-3971-be42-07a71b95be81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:32:50:69:3a:14:4b:ce:a6:d0:63:41:1a:56:01:7a:45:00:
         40:14:55:57:83:d5:91:36:2e:50:2e:06:8e:3d:24:bd:33:d6:
         8b:e6:7e:94:40:7c:50:16:7d:20:08:3a:97:71:f6:6b:d0:1b:
         22:e7:5d:e0:67:62:40:05:90:b0:9f:fd:eb:04:a7:f6:87:ed:
         fc:46:57:6d:ab:7f:e0:4c:b1:08:3a:65:4a:90:32:4d:cb:b5:
         d9:97:df:31:1e:0f:5c:8e:ea:dd:00:89:36:68:8d:6a:33:e3:
         ac:06:f8:0f:62:a5:10:16:26:6e:07:50:a0:d4:d2:8d:96:19:
         88:50:30:88:7b:40:af:32:e6:3d:3f:60:ca:7a:24:cf:9a:4f:
         a5:51:3e:7c:9b:bd:28:58:d8:5e:17:0c:79:b6:00:56:a9:a7:
         4b:90:da:4e:ae:96:2e:d6:3f:51:ee:6d:c1:b9:c9:67:f7:07:
         58:7d:89:94:cb:73:96:58:31:94:c6:92:9c:22:a4:aa:41:95:
         b8:39:17:a1:ca:c1:ee:07:0c:43:21:4f:17:3b:dc:27:5a:6d:
         ff:c6:9e:83:3e:c5:dc:a3:67:07:67:d7:75:83:47:0e:f8:46:
         e7:2b:27:d5:38:56:dc:9b:9d:72:f4:a7:08:28:2b:55:f9:37:
         68:ff:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:12 2024 by rpki-client on console-ams.rpki-client.org