Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e465dbf3-359f-37e6-8864-aea4c1c7f321.roa
File:                     e465dbf3-359f-37e6-8864-aea4c1c7f321.roa (raw, json)
Hash identifier:          pD88/xP9u+ZX8xPIRPI+T5Raqv5Cjr3/NuvYr44TYEM=
Subject key identifier:   6B:5D:46:1E:D5:A8:0D:51:1F:EF:73:55:3B:5D:C9:DF:92:4D:8A:0A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285844DAB86F25F78D2B218EA59020
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e465dbf3-359f-37e6-8864-aea4c1c7f321.roa
Signing time:             Sun 11 Feb 2024 09:16:58 +0000
ROA not before:           Sun 11 Feb 2024 09:16:58 +0000
ROA not after:            Sat 11 May 2024 08:16:58 +0000
asID:                     397630
IP address blocks:        138.229.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:da:b8:6f:25:f7:8d:2b:21:8e:a5:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 11 09:16:58 2024 GMT
            Not After : May 11 08:16:58 2024 GMT
        Subject: CN=450e1f72-130e-4811-8aaf-c1d9d4288272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:6a:6c:15:c4:8f:be:f9:e2:20:54:82:a3:
                    51:a1:17:a9:67:0e:0a:27:19:3f:70:cb:27:90:b9:
                    83:57:eb:56:15:fd:f7:4d:42:04:bd:79:fb:97:45:
                    2e:40:74:a8:94:35:38:5c:9b:f1:a3:84:7c:ce:e5:
                    88:87:98:20:bb:60:49:8f:84:15:09:f5:8a:32:92:
                    54:da:85:6b:15:d3:28:64:a5:6d:38:14:54:8c:f3:
                    5d:c1:b8:0b:aa:75:6a:92:fe:78:5c:d4:6f:18:01:
                    2b:d1:11:a5:cd:28:7c:f7:bc:e2:ea:23:94:e1:09:
                    8a:c9:be:fa:6a:da:c0:ac:98:5c:a0:b8:34:0c:31:
                    00:eb:8c:d3:f2:bb:ef:5d:ef:b9:a1:02:7b:32:06:
                    df:35:8c:e1:51:f6:21:42:4c:c6:25:6d:33:8e:ed:
                    f8:b5:bc:a8:01:71:97:69:a0:4a:26:23:6a:b1:eb:
                    2f:54:c5:16:80:c4:34:ad:42:c1:86:1f:8c:44:16:
                    6a:bd:6f:df:ed:e8:51:f2:40:b5:9b:8b:db:b9:40:
                    e1:8d:55:91:7e:38:9d:22:37:a1:d7:d5:38:d3:cc:
                    34:8a:80:8b:ab:e0:4e:0f:91:95:24:b3:34:96:da:
                    cf:a1:57:43:59:80:fd:dd:c3:6f:ab:f4:d3:da:58:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5D:46:1E:D5:A8:0D:51:1F:EF:73:55:3B:5D:C9:DF:92:4D:8A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e465dbf3-359f-37e6-8864-aea4c1c7f321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:40:eb:14:09:89:5c:9b:d0:14:25:68:7e:77:d5:c2:f0:23:
         e3:0e:84:97:8e:22:07:15:7c:b7:37:4d:3e:6b:4b:b6:ee:f5:
         c8:5d:0d:34:6d:c2:a2:5e:20:f2:4d:9c:4b:99:f6:66:68:eb:
         a6:55:11:b3:30:99:57:1b:dd:0a:91:3f:36:a1:f9:7d:97:50:
         98:a1:bb:bc:a3:5d:13:9a:7b:fb:b0:e3:3a:4b:a9:14:43:32:
         c8:85:34:90:1e:af:fb:c3:88:f3:40:ea:86:40:ce:32:f4:c4:
         08:8e:47:67:db:ce:ad:67:98:90:a3:bf:34:cd:b6:4a:43:73:
         83:26:64:c6:eb:d2:89:8c:84:2d:52:1f:e8:c8:06:cb:9e:15:
         d1:65:e2:ec:dc:11:fa:41:8a:5a:a9:7f:4a:c3:07:c6:2b:93:
         22:62:fe:12:93:44:f4:29:c4:03:41:e0:75:51:6c:8a:39:b7:
         19:fe:3b:75:f3:45:8c:a8:49:37:f0:6c:cb:9d:3b:67:8b:d1:
         26:e5:cd:33:df:71:b8:cc:81:39:28:c7:94:5c:51:80:7b:90:
         ab:b7:de:98:48:89:89:4c:89:45:9f:9d:f2:89:53:6a:55:dc:
         7d:9e:ce:ff:b3:31:b3:19:44:88:b1:8f:fc:33:cb:35:b4:e8:
         46:07:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org