Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/13995caa-6df7-3ac1-9174-aef257ed4a91.roa
File:                     13995caa-6df7-3ac1-9174-aef257ed4a91.roa (raw, json)
Hash identifier:          lpSIIUyiViRkB0sG7oOOQGEyb2b6lbkg/2hgH04hTE8=
Subject key identifier:   34:48:6E:4F:2B:A5:67:FC:DF:3B:39:76:15:F6:7D:1D:15:7F:4E:A6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584323BB75481B1E53B2E765DBC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/13995caa-6df7-3ac1-9174-aef257ed4a91.roa
Signing time:             Thu 07 Sep 2023 03:23:12 +0000
ROA not before:           Thu 07 Sep 2023 03:23:12 +0000
ROA not after:            Wed 06 Dec 2023 04:23:12 +0000
asID:                     834
IP address blocks:        200.229.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:23:bb:75:48:1b:1e:53:b2:e7:65:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep  7 03:23:12 2023 GMT
            Not After : Dec  6 04:23:12 2023 GMT
        Subject: CN=79df86f5-52b7-4662-8bb4-7120ad6e25c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:59:03:b0:13:4f:77:8e:60:2f:b8:81:2a:6d:
                    3e:8e:a8:8f:31:5c:4a:c5:7c:ad:5f:28:ae:32:44:
                    13:e4:20:81:18:fb:64:99:fb:86:e8:52:d7:6e:ec:
                    cd:be:44:ac:d9:0b:58:f8:c5:1d:65:08:19:2c:dc:
                    71:d0:08:4f:43:9b:bc:ff:14:cd:96:3e:fa:99:d7:
                    72:08:5d:5a:f5:26:07:dc:8c:40:71:a7:60:80:3b:
                    f4:89:26:77:89:09:6b:48:b4:7c:fb:4a:2f:0e:80:
                    00:5c:85:4b:f2:d4:38:0c:1f:d6:c1:3d:9c:d1:73:
                    e5:89:a7:3f:b1:58:cc:36:51:d1:03:4a:9d:61:bd:
                    0e:1b:e3:e4:7b:28:07:38:8f:d9:f0:e8:87:d0:d9:
                    a6:4c:58:b2:6a:ae:59:2a:75:28:45:81:7b:df:01:
                    e9:7b:60:0c:10:88:5a:5d:95:1d:e4:1c:ff:af:0a:
                    cd:07:3c:25:5b:ca:81:d3:bb:52:00:8d:2a:13:75:
                    b2:46:c0:2c:3c:33:57:fe:7f:71:f1:47:c6:4a:45:
                    d2:b4:fb:44:f9:bc:db:96:87:62:a5:3f:c5:d3:83:
                    c2:36:ca:f9:0d:d5:17:74:0d:87:68:65:56:00:40:
                    1d:4f:e1:13:a2:3f:21:c7:0b:68:43:28:fc:17:9e:
                    e6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:6E:4F:2B:A5:67:FC:DF:3B:39:76:15:F6:7D:1D:15:7F:4E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/13995caa-6df7-3ac1-9174-aef257ed4a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:49:36:93:eb:e4:ee:fe:ec:58:6b:e7:bf:20:9a:73:5d:f6:
         37:9d:5d:4a:fb:a3:31:3f:04:2d:a6:a2:71:98:f4:17:3c:a6:
         e3:d1:eb:81:30:80:32:38:a4:1d:6e:91:ad:e5:3b:f9:14:e4:
         c9:da:ba:f2:86:fc:9b:61:c9:44:25:12:54:c1:a3:2d:6e:71:
         ba:4b:50:41:ef:ce:9a:9a:1d:84:dc:1d:7a:b2:a3:16:30:72:
         0f:22:17:fa:4e:9f:b6:9f:f9:04:91:c9:74:7e:68:18:16:07:
         53:0c:10:eb:dc:e7:35:e6:8d:84:65:ac:49:01:16:0f:ad:2c:
         e5:7a:8e:4d:9b:44:33:b9:10:b2:1c:52:b7:b0:9f:16:f9:02:
         43:65:e3:45:7d:64:d4:26:f3:40:b0:ab:a8:97:c3:6f:85:9d:
         a4:d7:85:eb:d3:a2:e7:19:9e:61:8e:7a:d7:36:df:1e:9d:cd:
         c5:f2:09:d7:de:a7:20:fe:3f:db:0c:1f:b4:d1:74:93:99:39:
         33:22:b2:02:b9:e6:97:23:14:44:a2:be:3e:d9:cc:9d:f1:64:
         53:db:ae:98:a1:7b:b7:5b:78:f7:3e:55:e8:c6:39:09:d2:d5:
         7f:06:2c:dd:6a:fd:a6:18:32:cb:f0:b5:56:3b:91:a7:71:c3:
         ac:25:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:55 2024 by rpki-client on console-fra.rpki-client.org