Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/89d9f0d1-81ba-362c-b978-9427d79afbd5.roa
File:                     89d9f0d1-81ba-362c-b978-9427d79afbd5.roa (raw, json)
Hash identifier:          srDb7Ox28TXQfd6kYZGr1l4BZGsUStQpjgGXo+lleQA=
Subject key identifier:   90:18:60:C4:53:4C:0E:F8:4F:ED:29:4C:7C:DC:0F:AD:BF:B3:34:E9
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F43285841E44735C06EC230790AFED600
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/89d9f0d1-81ba-362c-b978-9427d79afbd5.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 23:55:38 +0000
asID:                     1018
IP address blocks:        199.101.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:35:c0:6e:c2:30:79:0a:fe:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 23:55:38 2023 GMT
        Subject: CN=159664f1-d503-4b0f-baef-e14bed1e09e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:bb:15:29:f2:44:ea:6e:01:1c:aa:05:e2:
                    8b:82:ce:be:ad:79:2a:b1:d1:be:c3:a2:94:a9:17:
                    5b:61:33:a4:05:78:ff:3e:2d:93:d7:c5:c4:ec:bd:
                    ac:51:b9:02:4c:cc:72:58:a5:c3:f4:1f:09:78:0b:
                    22:6d:f5:f4:c2:e9:4b:b6:64:e9:ca:13:11:97:bd:
                    86:bb:8f:92:07:79:19:98:07:0f:5c:71:02:f1:4b:
                    81:96:64:e5:ea:d4:e4:f7:fb:57:e6:bf:30:d6:37:
                    ed:4b:a2:d1:fe:cc:99:55:a1:f1:60:c3:5a:53:38:
                    90:39:78:29:bf:99:a0:a6:e2:e4:bb:70:28:7f:59:
                    8e:8b:79:bd:cf:6f:48:64:14:bd:45:ea:d1:1b:50:
                    1d:21:5f:e3:13:bc:f5:d5:65:e4:6a:d5:bf:23:c4:
                    b4:19:fe:45:58:5d:07:bd:14:33:3b:2e:f3:66:1e:
                    c0:d3:b8:1d:ed:09:2c:e8:3c:91:9a:da:9b:9f:e0:
                    53:2f:ef:a8:d6:b4:04:9b:32:38:8a:ac:29:5a:7e:
                    68:f8:17:b8:4d:a7:3b:ad:a0:7f:a0:8c:1a:85:f9:
                    ed:78:8d:1b:31:a1:4f:3a:d4:10:1b:c6:44:e8:37:
                    e1:42:40:64:61:bd:ff:e9:0b:33:43:7b:aa:ca:ef:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:60:C4:53:4C:0E:F8:4F:ED:29:4C:7C:DC:0F:AD:BF:B3:34:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/89d9f0d1-81ba-362c-b978-9427d79afbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:36:10:bc:d1:47:4f:87:72:8b:18:bd:ad:31:40:23:62:
         2c:cb:c7:54:35:8a:3c:e8:8a:41:b4:37:f1:b8:e0:63:50:d6:
         f3:1c:8f:ac:7e:94:1a:89:27:b5:53:38:97:a7:5d:3b:68:83:
         c5:f6:25:75:e8:bd:87:e8:9d:c4:9b:cb:e9:91:e8:2f:0c:e1:
         cf:f5:5f:98:af:23:ec:28:5b:fb:1d:14:aa:8d:83:f0:3f:65:
         b7:dd:3a:9d:d7:77:9b:ad:4b:cd:37:1d:82:72:d5:a3:bb:20:
         77:5e:64:55:27:46:04:49:6c:2a:84:d2:c5:6b:38:fa:2a:a6:
         52:e5:ad:f1:16:b3:18:b6:b4:b8:bc:8a:a7:79:45:ae:8f:35:
         36:64:40:65:19:bc:06:10:3e:34:0f:c5:ca:36:1e:ed:89:c8:
         cb:b9:97:15:c5:90:98:ff:ba:8a:ae:f8:9c:21:a0:fb:e9:5e:
         06:e8:d2:1d:65:9d:1c:c1:03:70:8f:d8:1a:f4:6e:be:ea:14:
         97:37:25:16:40:be:5d:04:ef:53:74:35:b6:4c:3b:69:0d:3a:
         c9:5f:2a:eb:72:74:80:41:68:f7:c9:c6:62:2b:37:06:a2:17:
         50:64:09:32:3c:97:bd:7a:d9:14:96:e8:43:8a:8d:4c:9b:e6:
         81:9e:ae:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:54 2024 by rpki-client on console-fra.rpki-client.org