Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5bd65b77-0622-31e1-884d-13475b08c87e.roa
File:                     5bd65b77-0622-31e1-884d-13475b08c87e.roa (raw, json)
Hash identifier:          8k+B1lTjJpKmx4J6yuRLLgfNHV0SFCfjCU3j6lTF3/s=
Subject key identifier:   D7:E8:89:52:08:BF:E0:42:85:9B:9C:34:70:BA:64:0A:50:44:52:7D
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285843E6FE3727280EB0EC5E70E000
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5bd65b77-0622-31e1-884d-13475b08c87e.roa
Signing time:             Thu 16 Nov 2023 02:00:16 +0000
ROA not before:           Thu 16 Nov 2023 02:00:16 +0000
ROA not after:            Wed 14 Feb 2024 02:00:16 +0000
asID:                     399746
IP address blocks:        216.177.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e6:fe:37:27:28:0e:b0:ec:5e:70:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 02:00:16 2023 GMT
            Not After : Feb 14 02:00:16 2024 GMT
        Subject: CN=0ccc293e-c1ec-4c3c-9bc2-b1c2070808fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:34:60:61:26:df:f4:d5:ff:85:96:2e:72:
                    10:ea:ef:91:7d:4f:92:aa:0e:e4:ff:8c:34:5f:e0:
                    38:94:fc:79:06:26:82:b4:49:d7:78:1d:07:29:25:
                    96:ef:68:4f:45:60:53:15:6e:14:44:bd:84:d9:47:
                    ab:77:fe:51:db:2f:64:98:30:62:8b:bd:ef:d4:60:
                    79:ac:8f:cb:a7:35:e6:b4:77:1e:fa:1b:cc:13:51:
                    96:9d:21:74:4b:fa:c4:ef:e6:e5:42:ad:f4:d4:4f:
                    16:e9:23:eb:20:ef:ab:ac:54:36:a7:44:cd:0b:26:
                    18:d8:04:3b:7a:09:40:99:88:da:99:ec:dc:ea:bf:
                    d5:0b:bd:a6:89:84:ff:01:0a:78:87:06:8e:5d:92:
                    c1:49:f5:7b:87:9d:f3:dc:4f:fc:0d:74:27:e0:44:
                    7f:87:bf:a6:5d:5f:61:0e:3a:25:5c:f2:a1:db:dc:
                    45:aa:b7:ef:ca:04:2e:a3:51:7e:b3:ef:9b:20:b3:
                    54:96:1e:a0:e5:10:bf:36:7d:cc:53:d6:e7:d4:c9:
                    18:05:77:7b:50:22:24:0c:e7:ed:da:96:61:df:01:
                    75:ed:fa:fd:71:30:ad:7c:91:fc:c1:e1:79:37:2b:
                    de:d0:7a:ea:89:a2:1a:d7:ba:3a:cc:17:7c:5c:52:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:89:52:08:BF:E0:42:85:9B:9C:34:70:BA:64:0A:50:44:52:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5bd65b77-0622-31e1-884d-13475b08c87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:27:87:ba:4f:63:e9:b2:39:4b:e7:bb:c0:64:ec:46:bc:41:
         94:26:35:cc:c2:4b:fd:7b:a6:46:cd:3e:d7:1c:71:8c:59:86:
         82:18:10:65:1a:e5:81:d3:69:87:26:fe:ed:b5:ef:50:cc:1e:
         5d:81:50:6b:d4:78:c6:57:39:7c:dc:3f:a0:64:b4:1f:f6:69:
         14:a5:f5:96:c2:df:15:6d:db:7f:47:b6:2d:38:ee:8d:92:9d:
         3b:64:e5:dc:35:ba:7f:93:c5:fe:21:11:e1:d1:d6:59:1d:3d:
         c4:66:a7:62:f5:60:81:6a:fe:57:db:5d:d2:f0:dd:84:55:cb:
         30:b9:db:10:c2:6d:6f:58:2a:a0:65:e0:46:6a:d1:2c:de:6d:
         85:c3:0a:90:62:d8:ce:bf:33:dd:38:9e:b2:59:ed:61:cc:8b:
         af:74:0b:6b:31:32:27:bd:37:c0:a8:e2:68:08:d0:91:78:30:
         e4:57:a9:95:36:be:29:37:c7:2c:a4:35:c7:a2:74:99:80:4a:
         83:80:e0:4b:dd:5e:18:c7:ad:0d:5b:e5:83:10:f7:2b:54:13:
         59:71:c3:0f:ad:29:0a:c5:cf:c6:78:fc:f1:f6:8f:a6:5a:35:
         ef:6f:1c:9a:95:4f:0d:c5:f4:20:5f:af:11:44:b4:35:41:da:
         70:29:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:32 2024 by rpki-client on console-ams.rpki-client.org