Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a8c9b3e3-070f-3336-b399-1e8c0815e67c.roa
File:                     a8c9b3e3-070f-3336-b399-1e8c0815e67c.roa (raw, json)
Hash identifier:          4gCRmaTU3dZPd4dHV+SrVrgx1yT17xOK6wjOOztIvzs=
Subject key identifier:   F9:D5:C6:99:57:1E:19:17:2C:CE:C3:98:98:9E:27:E2:22:45:AD:56
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328583C76870C9085A4BA94097AD3C0
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a8c9b3e3-070f-3336-b399-1e8c0815e67c.roa
Signing time:             Wed 21 Oct 2020 04:00:00 +0000
ROA not before:           Wed 21 Oct 2020 04:00:00 +0000
ROA not after:            Sat 06 Apr 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        136.175.224.0/24 maxlen: 24
                          136.175.225.0/24 maxlen: 24
                          136.175.226.0/24 maxlen: 24
                          136.175.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:76:87:0c:90:85:a4:ba:94:09:7a:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Oct 21 04:00:00 2020 GMT
            Not After : Apr  6 04:00:00 2024 GMT
        Subject: CN=92fe4eca-a14d-4220-97a5-36ff709ce526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:5b:df:f9:93:8e:37:6f:b5:06:bf:f3:89:
                    0b:de:0e:4a:6b:6e:9f:ad:90:29:33:af:16:20:c4:
                    67:43:3d:e4:aa:13:ae:d9:fb:54:91:7b:26:5c:ff:
                    0f:89:df:4d:1d:f3:bf:48:11:3e:39:33:00:60:5a:
                    1c:bf:ef:ed:95:76:27:ec:28:ac:99:ae:63:92:38:
                    86:7c:2c:70:62:45:8f:99:d3:1d:5d:c2:f3:9d:34:
                    f6:c0:3f:e1:ae:84:75:a3:5e:b6:0b:2c:3e:12:1b:
                    12:0c:b9:39:09:c3:24:b3:b8:9e:ee:4a:11:d9:0a:
                    ef:49:bd:ef:e0:e0:03:d1:67:0b:31:0f:49:81:cf:
                    42:30:46:f9:84:23:9f:32:42:9c:6f:95:3a:42:65:
                    fb:ea:34:63:2d:ac:bf:e6:e1:95:c4:ba:25:b8:f0:
                    c1:7b:3b:6b:ea:29:01:22:36:03:37:d5:a0:ae:c5:
                    5b:ad:ec:ba:f7:9a:52:37:c6:64:69:69:77:9d:21:
                    01:41:7a:49:7a:3d:c3:a1:1d:af:40:3a:8e:fd:3b:
                    42:3e:d3:92:2c:1e:0a:de:27:5a:47:1c:92:51:65:
                    7e:81:b1:38:f7:22:e3:34:ac:1c:1c:e0:bb:88:23:
                    d0:1a:54:62:56:00:b3:48:71:17:e3:5d:05:75:a1:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D5:C6:99:57:1E:19:17:2C:CE:C3:98:98:9E:27:E2:22:45:AD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a8c9b3e3-070f-3336-b399-1e8c0815e67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7b:48:38:01:8a:0c:9a:3f:ae:98:c0:ac:d8:b0:26:f0:fd:
         a5:62:a9:d7:dc:70:84:5c:2e:7b:c3:7d:12:6c:8a:1a:b7:5d:
         02:37:00:db:ff:35:b4:ca:24:0c:7c:42:55:2e:5e:52:b5:78:
         7e:06:bf:dd:9b:81:8f:07:2b:e3:2c:d4:bc:c9:04:b1:ea:81:
         cc:e7:e5:85:e5:3a:34:ba:a2:b4:4c:bd:1a:d5:28:be:56:36:
         96:f1:c4:fc:19:5d:60:10:0d:09:10:da:57:1f:7f:5e:86:b1:
         93:2f:c7:12:9a:9d:ab:ea:6e:11:08:ff:1f:f5:4e:70:4c:73:
         1b:1f:07:7e:15:b8:02:a9:f5:82:68:49:0a:4c:b5:cf:89:6c:
         63:3e:bc:0a:63:14:9c:a0:4d:58:3c:69:e1:d6:1a:9d:b7:86:
         76:9d:93:e3:0d:cf:91:4e:09:56:e2:17:5a:88:c0:cb:86:94:
         fa:bf:d0:c4:2c:6e:21:98:12:44:c6:0f:c2:01:32:82:50:ee:
         4f:f3:0c:0c:8f:eb:7b:63:1b:67:e3:b4:3c:81:f4:9a:03:9a:
         a5:12:2e:1b:d2:62:db:c9:7c:80:91:40:d4:7e:03:66:ef:c8:
         dd:f9:b3:86:75:b1:be:ed:7b:19:c9:71:5f:d5:bf:d8:53:24:
         11:34:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:28 2024 by rpki-client on console-ams.rpki-client.org