Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/fc500ddd-9b71-3692-b125-1baa618cb7fb.roa
File:                     fc500ddd-9b71-3692-b125-1baa618cb7fb.roa (raw, json)
Hash identifier:          BASRu57741z/Or803Z80iasV2o4Cf5X7pczNP9hypSc=
Subject key identifier:   2B:DC:D1:1E:B1:0D:CB:5D:40:67:65:B2:43:FA:12:27:EF:F9:DB:86
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285841E46DE44D3BA415ADF194AB00
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/fc500ddd-9b71-3692-b125-1baa618cb7fb.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 09 Aug 2023 08:39:15 +0000
asID:                     61317
IP address blocks:        173.249.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:e4:4d:3b:a4:15:ad:f1:94:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  9 08:39:15 2023 GMT
        Subject: CN=e313014c-3214-4b66-81e8-a88400a57d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:76:94:48:5b:c6:bc:fa:4d:d9:33:cd:a1:
                    7e:b1:12:69:00:1e:d8:76:43:1a:44:d5:a0:35:55:
                    a6:a9:32:76:1f:eb:2c:99:84:90:a8:27:da:1a:9a:
                    eb:13:fd:e4:9e:c9:5d:e6:13:2f:e9:e9:c3:6c:79:
                    38:60:c0:e2:a8:d6:8d:b1:e3:70:1e:ec:fa:aa:e7:
                    b8:7d:62:40:b7:35:49:ad:7f:90:2f:1e:47:a1:83:
                    5e:82:bd:28:06:0c:f6:19:6f:89:7a:17:14:5c:ff:
                    8c:a7:28:3d:d4:3a:75:58:9c:32:11:de:24:84:ac:
                    ea:49:1a:b7:d3:4c:f0:71:02:77:48:e8:14:0f:42:
                    0b:2c:f9:c5:2a:17:75:b9:f7:2c:67:25:11:78:b0:
                    ad:5d:9c:76:59:17:40:79:d3:8b:45:76:0b:0f:12:
                    74:ea:6f:c8:b1:fe:a8:9f:55:bb:9d:37:42:8b:2e:
                    92:5e:6d:1d:7f:fc:cd:99:4d:28:fe:f4:49:22:37:
                    e7:e8:f3:e7:47:75:f5:bd:d7:f9:43:f9:63:64:0d:
                    ec:e0:54:d1:38:63:c6:e4:9f:59:76:03:da:07:7d:
                    07:60:26:57:3b:d2:94:b7:5c:62:26:07:15:b1:5b:
                    35:77:7d:35:9f:1b:47:b9:92:19:44:8b:27:9c:af:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:D1:1E:B1:0D:CB:5D:40:67:65:B2:43:FA:12:27:EF:F9:DB:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/fc500ddd-9b71-3692-b125-1baa618cb7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:74:9e:62:87:ef:6c:32:b7:32:c3:7b:de:82:fa:07:ed:
         e2:87:68:47:f7:0b:aa:3e:97:95:fd:5f:90:8e:82:ae:e5:e9:
         1b:56:c6:e2:4f:44:a4:96:bd:55:79:7d:24:c3:ad:9a:21:57:
         e8:67:c2:91:a1:48:4a:7c:53:d2:7b:8b:0c:71:a5:26:64:0f:
         42:69:3f:7d:d1:73:8c:9b:3e:73:e3:5a:e1:21:8e:c8:73:d7:
         7c:f4:15:36:37:d6:37:34:50:f6:d4:23:45:21:f4:a2:59:88:
         03:aa:7d:9e:ee:b5:6e:0c:dd:f9:81:0f:92:c4:20:ee:fd:7b:
         0e:1f:f1:bc:7a:7d:dc:6f:11:db:eb:61:d6:c7:cb:b8:5a:84:
         0d:59:b7:db:73:93:a9:54:60:44:dd:26:24:be:29:3e:7b:90:
         5d:0c:19:3b:ca:c3:98:67:23:88:26:70:8c:86:02:55:39:20:
         67:5d:2f:d4:48:0c:70:0b:da:72:42:42:4e:41:54:a1:73:6e:
         a3:4b:96:80:59:c9:95:d6:8d:31:9e:8d:e3:48:4b:25:e5:8e:
         95:80:a7:80:a0:bd:40:c1:29:bf:ed:76:50:9a:83:75:44:95:
         7f:08:99:1a:e7:15:1b:3c:11:89:ed:d3:41:3c:11:9d:11:c2:
         00:a6:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org