Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0fcbb1d3-90f0-3471-a214-ea215dcd92da.roa
File:                     0fcbb1d3-90f0-3471-a214-ea215dcd92da.roa (raw, json)
Hash identifier:          NLQgwQP1vFDY5qEMY6HrBQ+QNEUG9Rk5hABB5a048Xo=
Subject key identifier:   45:F8:8C:3C:F3:16:D5:42:B9:32:3E:28:B4:E4:3A:1A:25:83:02:75
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858424CF1DEAD74DF024113DF4E00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0fcbb1d3-90f0-3471-a214-ea215dcd92da.roa
Signing time:             Thu 22 Jun 2023 04:54:02 +0000
ROA not before:           Thu 22 Jun 2023 04:54:02 +0000
ROA not after:            Wed 20 Sep 2023 04:54:02 +0000
asID:                     63023
IP address blocks:        200.229.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4c:f1:de:ad:74:df:02:41:13:df:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 22 04:54:02 2023 GMT
            Not After : Sep 20 04:54:02 2023 GMT
        Subject: CN=6fb2f76c-ec64-4bc0-afc1-7917d6b45b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:51:03:f7:ed:2f:c3:84:8d:90:0b:e2:d3:
                    a9:5f:64:d7:ca:07:ac:9d:0b:bd:0b:99:78:13:9f:
                    71:8c:08:87:41:3f:35:1d:d2:32:a2:b8:02:32:a3:
                    cb:67:40:1b:91:97:7e:83:c7:d9:c9:24:83:d2:1e:
                    4a:1b:4f:84:24:c6:5e:0d:1c:df:2a:4c:30:9c:e1:
                    80:2f:1b:d2:66:b5:cc:32:02:3e:e1:e3:0a:99:a5:
                    dd:b5:89:b0:f4:03:28:dd:4a:42:3b:18:9b:7c:b7:
                    80:1e:c3:b1:3d:35:b8:a3:bd:8a:e3:7a:71:7d:9f:
                    a8:07:de:39:1a:6b:36:dc:61:f3:25:9f:7e:8d:89:
                    9b:39:7b:f3:fb:e2:37:b2:e8:13:e3:5d:70:53:bd:
                    67:89:f3:ae:39:05:22:86:a0:c8:0e:21:c8:4c:a2:
                    ba:81:b4:14:70:74:32:8a:e5:4d:9c:d8:c2:dd:93:
                    aa:b2:d2:52:77:6e:6a:a0:f3:9c:d0:8f:6d:60:db:
                    dd:4f:25:76:c7:9c:ff:13:58:8f:78:ce:d0:5b:cf:
                    63:9a:e6:b9:94:96:05:81:58:6b:cc:23:9e:e3:aa:
                    a3:00:9a:b4:20:ed:e3:4e:a0:4b:dc:c9:04:62:33:
                    08:1f:cf:60:be:cf:14:3f:c1:88:20:75:9d:02:ce:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:8C:3C:F3:16:D5:42:B9:32:3E:28:B4:E4:3A:1A:25:83:02:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0fcbb1d3-90f0-3471-a214-ea215dcd92da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:1e:c6:19:28:3f:8d:37:e9:9e:80:a7:42:44:03:41:e3:
         e1:c8:84:2e:41:d5:0d:f6:e8:64:f6:e2:f0:84:de:17:93:29:
         11:38:25:f8:83:a7:87:a4:e8:40:e9:2e:3e:fc:b2:e7:dc:53:
         12:69:f8:f4:bd:01:3c:dc:86:c3:5e:62:fb:eb:74:5f:a0:8e:
         3d:43:6c:f8:a2:fe:67:ab:2c:af:90:45:23:e6:df:2c:e4:56:
         66:df:dd:68:2f:bd:91:07:e1:2b:47:1a:13:94:2b:f7:ca:3f:
         7c:f3:80:97:90:aa:86:a8:4b:7f:4e:7a:1c:8c:27:66:f3:73:
         f5:60:e3:64:68:56:00:08:9f:15:5f:a8:8f:b5:6b:df:43:ee:
         8b:6e:f7:30:4a:20:a8:b9:46:c1:0a:47:df:64:18:dd:94:cd:
         71:ad:16:b2:2c:34:10:65:8a:b5:7d:cc:43:3c:8a:78:8e:fa:
         42:c3:cc:6f:ab:06:75:11:75:bd:7d:62:e7:56:64:64:56:d8:
         c3:82:83:e2:41:a0:59:0a:ab:8f:d7:f9:af:fc:f0:0b:1b:ac:
         32:c6:c1:e5:c1:70:e3:25:bd:84:5b:28:67:ca:d2:f3:ab:18:
         39:7d:4d:8f:b1:cb:7b:79:25:de:3b:57:f7:3c:a6:b2:f9:dd:
         cf:a4:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:07 2024 by rpki-client on console-ams.rpki-client.org