Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/ab9491fc-3697-3c5a-98bb-f394d9b52e74.roa
File:                     ab9491fc-3697-3c5a-98bb-f394d9b52e74.roa (raw, json)
Hash identifier:          KMVDUHl4kRvpA2OVioctVIlw4pqccV2tCYgS58/WmS4=
Subject key identifier:   7F:0A:CD:B0:95:A8:5A:2A:21:09:EC:F6:9F:8D:31:BE:54:23:83:D5
Certificate issuer:       /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
Certificate serial:       010D0C9F432858389CB94C51BC96C708FC501E00
Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/ab9491fc-3697-3c5a-98bb-f394d9b52e74.roa
Signing time:             Thu 14 Jan 2021 05:00:00 +0000
ROA not before:           Thu 14 Jan 2021 05:00:00 +0000
ROA not after:            Wed 19 Apr 2023 04:00:00 +0000
asID:                     15317
IP address blocks:        162.221.224.0/22 maxlen: 24
                          162.252.20.0/22 maxlen: 24
                          173.214.240.0/20 maxlen: 24
                          192.133.136.0/21 maxlen: 24
                          199.182.160.0/21 maxlen: 24
                          216.172.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:9c:b9:4c:51:bc:96:c7:08:fc:50:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Validity
            Not Before: Jan 14 05:00:00 2021 GMT
            Not After : Apr 19 04:00:00 2023 GMT
        Subject: CN=0c6b66a3-1279-4366-9b29-81c80c8382c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:84:3d:d1:24:41:71:8a:e2:34:46:a9:28:
                    19:f0:f1:94:4e:43:61:22:ac:f8:85:6f:d9:0e:1b:
                    4c:18:4f:13:21:07:18:c5:8f:29:a6:3e:5e:1d:c3:
                    39:23:aa:24:51:51:dc:dd:79:74:8b:d0:fa:6f:46:
                    d9:55:a2:e0:a2:ba:ff:d5:75:c3:c1:be:fa:03:3e:
                    b8:8a:e8:f5:03:0c:cf:77:f6:63:e0:07:2e:c3:06:
                    9d:d4:bb:ba:29:42:45:58:f4:73:66:22:f2:a2:59:
                    87:93:df:5c:84:fa:8c:ff:d9:8e:75:62:89:38:64:
                    35:9f:0c:82:53:4e:3a:54:53:bd:46:d0:8a:32:a5:
                    77:8c:c8:ac:30:22:39:b3:4a:cb:15:9a:af:54:1f:
                    3d:d7:a8:6d:08:7e:55:49:e1:ee:02:a4:bd:78:bd:
                    b4:5b:8d:c0:8a:07:c9:45:a9:85:4e:f6:3c:c9:c8:
                    39:1b:ff:b8:13:8a:41:60:c1:55:66:0e:62:52:56:
                    be:4b:64:d9:28:3d:1a:10:ca:01:c7:c9:df:58:1c:
                    bd:33:e1:67:0e:aa:dc:b2:fd:b9:b0:6b:67:03:29:
                    64:76:69:b1:f0:ed:4f:08:ae:c5:c8:9e:57:51:e5:
                    5b:d1:42:03:9d:31:a2:67:9d:80:28:0e:9a:1a:93:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:CD:B0:95:A8:5A:2A:21:09:EC:F6:9F:8D:31:BE:54:23:83:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/ab9491fc-3697-3c5a-98bb-f394d9b52e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl

            X509v3 Authority Key Identifier:
                keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:1e:d7:5b:30:04:77:25:5c:c3:cf:7c:be:6e:80:ec:33:
         bb:39:3d:2b:23:88:e1:a7:7b:15:2d:bd:e1:54:59:fa:1b:94:
         51:e4:2f:e8:9e:6f:4e:9f:ba:8b:a0:04:0e:59:30:ca:30:d3:
         60:82:7f:42:79:28:e0:55:f3:16:19:a9:e9:eb:92:ea:95:7e:
         0f:28:37:1d:15:97:04:ab:90:bb:bb:d3:41:34:c1:05:7d:e8:
         65:ac:ea:70:29:0b:27:28:78:d2:dd:76:c4:2b:b4:ac:8f:01:
         ce:6c:4d:98:16:ce:83:88:96:8b:ca:cf:5c:64:6e:92:60:10:
         1d:67:30:8e:15:67:06:e0:00:a1:6c:17:83:8c:08:34:8b:2f:
         52:53:95:f4:13:90:df:11:70:a5:2e:7b:43:78:8b:49:1e:8e:
         cf:b4:a5:50:d7:66:39:8d:36:a6:d1:82:6d:94:9b:31:56:28:
         97:12:53:d3:a8:70:fe:63:90:67:20:3e:b5:96:df:89:66:1b:
         a1:4f:9e:cc:eb:47:51:af:d4:b8:70:c4:2a:29:42:28:6d:ca:
         64:d4:36:d5:24:34:b5:8f:d1:66:08:da:05:8c:fe:c8:ce:e0:
         21:1e:e5:c2:a0:f7:f9:35:67:65:be:f2:82:c5:75:5f:ac:99:
         08:21:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:46 2024 by rpki-client on console-fra.rpki-client.org