Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/df9cf424-df68-385c-8a35-e5c52c434f89.roa
File:                     df9cf424-df68-385c-8a35-e5c52c434f89.roa (raw, json)
Hash identifier:          XqQ7hXCu/EBXXiIiuGW6Pp0+dq4SHIJs/tr353GhBoA=
Subject key identifier:   6F:7B:03:14:AE:28:55:23:5B:29:8E:D2:99:B2:E2:99:EF:C4:B7:D2
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285841E44765A153F3E0C832A0AC50
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/df9cf424-df68-385c-8a35-e5c52c434f89.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sat 12 Aug 2023 09:12:44 +0000
asID:                     49999
IP address blocks:        208.123.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:65:a1:53:f3:e0:c8:32:a0:ac:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 12 09:12:44 2023 GMT
        Subject: CN=9d0b6dcd-a4d4-422d-9c45-02e9a02b0d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:ea:b6:fd:ab:ea:86:53:29:6a:b2:f7:9d:
                    e2:7f:4d:1d:04:4e:b5:24:83:0c:d8:79:40:db:08:
                    cb:78:18:22:b6:13:d5:c4:f7:e1:8f:d9:c5:f9:4a:
                    a2:92:18:06:9d:f0:89:2b:40:ed:94:9a:6b:c1:de:
                    6e:7d:30:f9:35:8d:5d:40:cb:e7:32:58:f2:e5:96:
                    1f:af:32:b1:12:83:3c:8e:c0:41:db:d8:43:cf:ff:
                    bc:e4:f4:e2:04:dc:ad:40:d7:53:56:fb:92:fe:24:
                    bb:6d:3e:9d:72:c5:d4:e6:bd:82:fb:b5:64:2d:df:
                    1e:09:b8:2e:16:ab:32:f0:fb:ec:04:6e:2b:1e:95:
                    42:f9:ac:9c:b9:0e:5b:b4:25:cf:fb:4d:92:12:2f:
                    71:22:3e:dc:0d:dd:03:5f:4a:0d:cd:78:b3:7d:9a:
                    1d:0d:14:ff:51:4b:7d:bb:d5:ed:94:61:62:a9:8c:
                    fc:3b:2c:62:b4:3d:d4:51:fe:d8:19:b1:fd:7e:19:
                    ef:c7:86:c4:1b:89:55:12:a9:9c:73:17:a7:21:16:
                    9c:51:43:2c:c2:ea:21:d2:a1:4c:a3:1d:90:f5:62:
                    ea:3b:1e:b3:d9:b4:1e:95:49:45:0e:b8:ed:12:53:
                    06:e4:5a:6b:46:7c:84:17:6e:20:1d:f8:53:4b:2a:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:03:14:AE:28:55:23:5B:29:8E:D2:99:B2:E2:99:EF:C4:B7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/df9cf424-df68-385c-8a35-e5c52c434f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:a0:e0:71:77:b9:46:8d:8a:3f:b4:cf:e8:54:23:8e:4e:
         36:c1:47:06:4e:1d:00:74:f2:39:33:4e:5d:b2:1c:cb:d2:14:
         b6:9c:56:21:d3:86:4c:50:6b:0a:87:03:1b:05:c7:94:a8:a8:
         1f:cc:72:cc:2a:ab:40:3f:62:99:54:7d:c2:e9:42:db:c1:d0:
         c6:e8:66:7b:95:29:ca:b8:be:43:04:09:10:4e:60:2a:52:01:
         60:13:a1:e2:b9:e6:32:7f:62:03:4c:d5:58:ea:1a:4c:f1:6c:
         7d:8d:bd:b7:c5:a3:6b:e1:50:98:e9:9f:5c:3c:e6:fc:0f:6f:
         ce:21:fe:fb:fd:53:6b:8e:78:54:f2:9c:01:3a:e2:f9:d3:48:
         07:98:3e:00:9f:85:5d:96:3f:20:fd:76:7d:05:74:36:a9:70:
         dd:e8:e6:d2:89:7c:98:0b:23:5f:15:d9:a5:29:93:cf:63:5c:
         f3:2a:42:8d:fd:1c:fc:39:ba:53:c8:d5:47:1e:0c:d4:07:d4:
         36:f3:9c:de:4f:e4:8d:af:e3:4c:0a:37:9c:26:a5:5f:c7:44:
         92:a8:b1:fd:93:96:8c:c5:b4:9f:ab:24:12:94:d6:11:b4:50:
         fa:eb:c3:9d:72:9c:c2:64:88:45:81:ce:26:03:66:d1:a8:48:
         e2:91:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:32 2024 by rpki-client on console-ams.rpki-client.org