Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bcd3413d-dd07-373f-948e-d91060dbf938.roa
File:                     bcd3413d-dd07-373f-948e-d91060dbf938.roa (raw, json)
Hash identifier:          npyvZ1LHH+bSQU1uJP3dY0D9n/J4LrZwYYkkfrlNT2g=
Subject key identifier:   BE:91:E1:E0:93:04:39:C9:F0:44:19:87:FD:97:5C:69:6F:40:F8:76
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285838743821FCC35E8F8755133D50
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bcd3413d-dd07-373f-948e-d91060dbf938.roa
Signing time:             Wed 30 Dec 2020 05:00:00 +0000
ROA not before:           Wed 30 Dec 2020 05:00:00 +0000
ROA not after:            Wed 05 Apr 2023 04:00:00 +0000
asID:                     14537
IP address blocks:        198.37.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:74:38:21:fc:c3:5e:8f:87:55:13:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Dec 30 05:00:00 2020 GMT
            Not After : Apr  5 04:00:00 2023 GMT
        Subject: CN=ac876b15-2a07-42b9-a68e-75f79ce6c73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:a7:8d:ec:3f:17:61:78:3d:d6:7f:09:0c:
                    5b:fc:03:b2:b0:ab:87:f8:44:47:23:eb:5f:0d:21:
                    fb:33:d7:b6:f9:f4:2b:2a:cd:33:5d:3d:bc:a2:7e:
                    5e:47:8f:b4:a2:48:e8:a7:03:c0:22:33:ca:0f:62:
                    e3:45:c6:e1:4f:b9:a3:67:b5:13:8f:2a:e7:f0:6c:
                    07:24:e9:b2:84:73:3b:13:af:2f:3f:d1:68:15:87:
                    45:0d:8f:72:b7:c1:7c:8c:44:e9:d9:64:c1:f7:f3:
                    5d:fc:eb:9d:0c:6c:c5:a6:b4:b3:ca:eb:db:be:21:
                    23:95:ec:3f:e7:5e:21:1c:4d:f7:01:f1:7d:a0:7d:
                    95:a2:2d:90:8b:01:50:17:60:79:a8:44:d9:33:36:
                    5b:77:00:1e:b5:56:8c:7c:34:6c:54:cb:23:fe:fc:
                    cd:a0:1b:92:a5:85:03:62:dd:dc:e6:51:14:ff:2a:
                    c7:68:d0:2a:e4:f3:40:33:81:03:2a:c9:fd:69:4b:
                    5b:27:6e:89:ac:a6:54:b2:1d:10:d6:a6:d5:4a:f0:
                    79:50:c2:03:ab:c8:61:9b:c8:74:52:93:f6:fb:d4:
                    b2:d5:7b:2a:2b:99:db:f0:b2:c2:f7:f8:fc:81:5d:
                    67:4c:98:1e:6e:5f:2e:77:37:c0:dc:d5:87:a6:63:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:E1:E0:93:04:39:C9:F0:44:19:87:FD:97:5C:69:6F:40:F8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/bcd3413d-dd07-373f-948e-d91060dbf938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:10:c5:54:88:0e:24:ae:c9:27:da:13:c8:a5:2b:e6:05:
         71:4a:85:65:c3:d0:93:fb:7e:91:00:5e:6a:6a:77:f6:8e:af:
         04:7e:94:da:51:d2:76:fc:c3:09:49:59:b7:3b:71:7a:e5:ed:
         6d:4c:c5:35:3e:03:6b:40:b4:83:5d:07:23:6c:44:43:25:48:
         34:8b:4e:10:2c:39:8d:56:e0:76:57:3b:f8:b1:d3:4d:5e:c5:
         06:b1:c9:c8:d6:4f:ac:55:a2:8b:03:44:77:6c:c7:57:eb:e9:
         2b:7e:d6:e8:eb:8b:ea:dc:4d:38:6c:38:05:db:2b:a9:8a:1c:
         d5:66:92:df:18:74:78:fa:f0:7e:29:2b:33:c7:a6:18:bd:ab:
         1f:31:28:fd:82:c3:02:9f:b1:a5:eb:8c:17:7e:79:4a:ee:42:
         ee:36:5d:fb:57:b9:44:dd:9f:49:90:95:b1:41:4e:83:70:ea:
         17:0b:0c:36:42:25:4b:4e:b7:83:92:54:01:08:ae:89:24:80:
         6a:a8:2c:17:59:c7:e9:51:22:c9:56:c3:7d:bd:18:2b:47:51:
         58:5d:b0:20:0f:70:cb:7b:1c:d6:ce:d8:97:e6:c4:b3:e7:5b:
         b7:ef:cf:ba:59:c5:5c:c1:80:72:3c:31:91:9c:7b:ae:ec:7e:
         25:04:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org