Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/01a19664-3237-3c26-987e-4f7523282b72.roa
File:                     01a19664-3237-3c26-987e-4f7523282b72.roa (raw, json)
Hash identifier:          F4FmSI3Ft6yIgQqRztlbgdjGpULPe+dsjKYdGRoqoFI=
Subject key identifier:   1A:68:89:48:C5:63:00:CB:75:E7:7C:7A:A6:7C:7E:B4:78:9E:28:95
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583C71EC131903D4EE99CD964800
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/01a19664-3237-3c26-987e-4f7523282b72.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     0
IP address blocks:        104.167.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:71:ec:13:19:03:d4:ee:99:cd:96:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=3b8faf85-9dc6-419e-a777-aef143b770fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:a3:06:dd:1d:88:34:a2:66:77:89:b3:cd:
                    26:2c:38:0f:49:59:58:7d:e8:fa:38:e4:61:04:3b:
                    d2:8e:ca:7e:ec:64:27:3d:1b:b9:25:5f:98:7a:94:
                    89:bf:de:bc:31:9e:5e:c4:db:0f:5c:02:13:d8:c2:
                    1c:dc:7c:c0:7f:e0:11:5d:de:1b:f0:e5:95:99:cd:
                    05:d5:d0:27:be:9a:a9:af:06:10:72:01:14:5c:e8:
                    b6:4c:bd:ba:cd:48:30:fc:00:73:ef:f8:64:ed:ea:
                    d8:66:2f:07:c8:f1:72:84:29:dc:4f:f9:cb:ae:73:
                    6c:3b:04:b9:29:5e:60:7f:52:81:da:ce:35:7b:d7:
                    6e:b9:c4:26:f3:10:94:b6:28:e5:48:a7:32:f7:28:
                    66:a6:c1:65:2c:0e:b9:e2:cc:6c:ff:3f:5c:3c:43:
                    ac:e7:a5:72:a3:23:2a:ea:f6:db:36:7c:08:dc:bb:
                    9a:bd:87:21:51:0f:fd:e1:67:78:9f:21:ea:4d:c5:
                    99:45:5d:38:0f:38:16:08:15:eb:e3:72:1f:f6:8b:
                    6e:60:2e:25:ab:d8:bb:21:95:9e:17:8e:84:75:55:
                    2c:08:a5:7d:1a:e6:64:bb:5d:d1:51:c7:63:dc:b6:
                    7c:4f:d3:da:bd:48:77:e3:fd:2c:7f:3f:12:18:92:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:68:89:48:C5:63:00:CB:75:E7:7C:7A:A6:7C:7E:B4:78:9E:28:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/01a19664-3237-3c26-987e-4f7523282b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:54:fd:de:c8:30:35:26:08:ea:9c:a5:6a:3a:23:e2:28:a6:
         de:4b:1d:59:bf:66:80:72:fc:75:c4:b3:52:be:a4:36:3e:42:
         1c:8c:0f:6e:8f:d6:8e:c8:64:a4:e7:92:7f:78:ec:83:5b:fa:
         68:b0:78:d8:ca:ec:d0:94:64:18:d9:71:24:7e:85:97:e8:d1:
         d5:4c:32:9c:dd:09:95:60:2e:99:41:33:91:87:88:55:9b:5e:
         d5:10:9e:2c:b3:d7:1b:2e:4e:7f:dd:a5:e0:b8:4d:ad:c0:d8:
         5c:47:4a:e1:bf:23:a9:06:79:57:24:e9:0c:7a:7a:3a:5b:0f:
         e2:22:7d:a1:94:95:06:3f:54:3b:2e:09:23:6e:f2:88:44:a8:
         06:cb:d7:ec:1c:02:1d:f2:4f:f9:d7:63:dc:18:1b:03:5d:ec:
         21:fe:66:58:8b:44:14:af:5a:d6:92:78:37:ef:96:ab:4c:a4:
         7d:2f:5d:81:01:6b:7a:1a:b0:d8:1f:42:3c:24:2d:f1:b6:82:
         c4:6d:ea:5b:02:3d:56:21:85:63:de:2a:c3:6c:64:b2:69:4d:
         1e:0c:a0:90:ac:91:76:a0:06:ca:46:cf:37:a3:e7:ab:9e:98:
         15:28:37:54:66:ab:7b:16:5f:04:35:e8:00:22:96:e2:9c:b1:
         a3:8b:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-ams.rpki-client.org