Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/1dd912cf-1b71-30d7-8f2e-70e216b486e6.roa
File:                     1dd912cf-1b71-30d7-8f2e-70e216b486e6.roa (raw, json)
Hash identifier:          VAyJFms1yOddlLQ00DN9YHW4NbezlUqJBl5u0j5kqGk=
Subject key identifier:   1A:F6:29:5C:EB:5F:BB:0E:6F:90:A3:65:EE:BC:68:9F:B8:D8:82:4C
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F4328584276BBB37998B4EB5B7610AC00
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/1dd912cf-1b71-30d7-8f2e-70e216b486e6.roa
Signing time:             Fri 07 Jul 2023 04:08:51 +0000
ROA not before:           Fri 07 Jul 2023 04:08:51 +0000
ROA not after:            Thu 05 Oct 2023 04:08:51 +0000
asID:                     44547
IP address blocks:        136.175.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:76:bb:b3:79:98:b4:eb:5b:76:10:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Jul  7 04:08:51 2023 GMT
            Not After : Oct  5 04:08:51 2023 GMT
        Subject: CN=2aa34094-9c1b-4b40-b9ec-3fa579c9b6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:ee:4f:0f:f5:86:8c:f2:c5:e0:f6:c7:b6:
                    e4:dc:90:2e:f5:d8:ae:bd:62:dd:77:38:45:9c:5b:
                    3a:13:45:1a:7b:40:35:97:95:a1:ba:ce:63:ec:d7:
                    42:8d:ac:dd:fc:80:76:fe:6f:ad:6d:20:f7:39:76:
                    80:6a:2c:ee:53:f8:95:60:3a:ac:cb:08:ca:77:28:
                    8d:2d:06:5e:5f:6e:6d:04:9e:cf:27:78:5d:fe:bb:
                    1b:78:10:af:11:21:6f:ea:2d:99:1c:98:86:4c:b4:
                    fd:87:dc:c3:0c:6c:26:d9:a1:94:38:f2:65:ad:1b:
                    f4:5c:a1:82:76:d7:31:ad:7d:55:fe:6b:dc:83:1e:
                    a1:9d:b2:e3:f7:e7:03:de:82:84:dd:3a:51:9f:f7:
                    03:d7:72:fe:91:cf:e4:f9:9f:f3:32:b2:84:a9:8f:
                    1f:9f:3f:52:92:de:dc:a4:05:77:dd:ba:2a:4a:8e:
                    5b:0f:5f:d8:39:65:df:49:a5:95:5c:f1:57:b1:e4:
                    34:3a:bf:b5:2d:6d:e2:d5:c3:3a:80:9e:53:4a:43:
                    64:b6:54:34:eb:ed:67:6b:c4:64:63:d9:f7:00:14:
                    62:9a:54:56:26:08:8b:b9:70:e0:11:79:ba:36:64:
                    f5:e9:e2:10:3f:76:1b:08:b0:12:b1:a3:86:a9:dc:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F6:29:5C:EB:5F:BB:0E:6F:90:A3:65:EE:BC:68:9F:B8:D8:82:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/1dd912cf-1b71-30d7-8f2e-70e216b486e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:02:99:48:46:dc:88:9c:25:3e:d8:e2:44:1d:2e:5a:a7:
         85:25:e9:a0:8d:87:44:67:dd:ea:2e:b7:a8:16:18:bb:b4:f3:
         c5:69:6d:49:bb:55:c4:6f:26:47:e3:ce:39:11:64:a1:da:28:
         8a:ea:e6:05:bf:df:d2:f8:25:67:c4:73:b6:ca:3e:7a:e1:7c:
         81:38:7b:60:f3:da:d5:a6:d2:f9:1a:92:3d:00:bd:36:8d:94:
         8e:d9:75:b9:82:cd:f8:15:0f:c9:2f:97:63:b3:82:8e:cf:4a:
         b9:25:79:6e:03:dd:60:5e:00:ed:9c:ae:64:59:f7:b2:16:ef:
         fc:80:3c:a4:5d:0a:37:fb:f1:1f:b4:9c:93:f7:cc:f9:23:a3:
         9a:b5:be:2c:0f:dd:6d:5d:30:4a:db:c5:5b:25:07:de:6c:cb:
         83:7c:0c:a7:0f:5e:50:0d:fa:d9:e2:e4:85:db:09:a1:fc:f9:
         f4:70:b1:a8:65:f4:89:98:22:50:0a:0c:c2:7b:93:08:a0:40:
         f0:0a:bd:1e:88:0d:9a:25:89:14:07:d4:83:0c:a1:ef:e8:f7:
         01:34:d1:ab:0c:7e:2e:80:8e:f0:94:70:5e:db:c7:42:c9:e4:
         05:04:5d:9f:7d:f3:fb:98:62:77:a1:30:e1:64:93:f7:2c:c7:
         8d:8b:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:21 2024 by rpki-client on console-ams.rpki-client.org