Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6d95002d-501c-3db4-8fd0-913dfed8a580.roa
File:                     6d95002d-501c-3db4-8fd0-913dfed8a580.roa (raw, json)
Hash identifier:          qg+ooHRQRKnZOVXIzUVBG/SpdWnUri4vYxtAEG5xPeE=
Subject key identifier:   2E:A3:01:60:F5:66:87:AB:B1:1B:0C:38:32:90:D8:D9:C3:D5:83:D6
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328583801D588CDBF75328727434580
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6d95002d-501c-3db4-8fd0-913dfed8a580.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     198949
IP address blocks:        68.65.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:01:d5:88:cd:bf:75:32:87:27:43:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=bbee5d76-6a86-4e30-81b1-bb126cc3dd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:19:4b:99:55:a5:5c:7e:c2:04:d4:b6:b1:
                    0c:40:50:43:5b:b8:a1:a5:dd:14:26:4f:8b:b5:5a:
                    99:92:60:f8:bb:34:54:d0:a8:85:11:0a:04:73:0c:
                    d4:e3:a8:76:e2:6a:bd:73:e0:e9:d7:d5:55:30:fc:
                    52:ec:3d:c0:00:cd:84:f0:61:67:7b:fe:13:5b:25:
                    0e:d0:8e:78:42:41:ee:18:f3:4c:25:b0:57:73:d9:
                    c1:17:97:95:f7:be:4d:13:6c:80:79:0e:ba:73:96:
                    fe:3d:97:e0:a3:76:d5:da:70:fb:0c:d3:79:07:c3:
                    87:64:83:64:5e:2d:e0:59:e4:9d:97:e1:a4:c8:0c:
                    58:3f:68:16:92:1a:8d:75:2b:09:db:3d:0b:0b:4d:
                    8d:c9:ef:9f:71:43:26:40:b1:90:20:9f:46:87:94:
                    f3:41:08:e2:5f:d7:96:93:1d:02:5b:31:ac:af:75:
                    aa:7b:6f:a7:cd:76:b8:ac:dd:0f:90:4f:06:71:78:
                    dc:99:24:16:35:de:8a:c9:11:69:d9:ad:77:6f:ab:
                    df:24:2c:cd:5e:94:4a:16:f1:44:f6:81:bd:e7:88:
                    d4:62:8f:d2:25:2b:43:74:a7:f1:2f:30:1f:ef:b2:
                    1b:78:85:0e:6d:15:b1:21:48:95:29:b7:c2:29:af:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:01:60:F5:66:87:AB:B1:1B:0C:38:32:90:D8:D9:C3:D5:83:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6d95002d-501c-3db4-8fd0-913dfed8a580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:91:62:7f:00:72:fa:f1:be:b0:b8:22:b9:1f:b7:84:1c:42:
         eb:78:56:62:2b:01:9f:ef:4e:bc:90:07:63:57:8e:31:c2:67:
         bb:e5:81:2a:a7:28:ec:24:38:7d:21:f3:66:6e:05:9e:39:e9:
         b9:42:1e:1c:d1:05:c7:b5:9a:a1:36:78:c8:60:88:98:c8:c6:
         a9:ca:e8:07:81:de:74:32:84:97:38:34:40:b3:39:39:18:d6:
         e3:56:6a:52:97:58:c0:21:7b:71:6f:71:a1:e8:87:4b:0e:f1:
         b0:88:86:e2:fa:8c:e5:17:21:91:77:10:b6:dd:4a:b3:41:55:
         11:16:ab:a4:8b:04:72:7e:2c:51:99:70:7d:d4:1f:d0:21:44:
         c4:04:ad:80:78:5b:96:a6:2c:2f:f1:09:fa:56:5e:02:07:35:
         96:b1:af:2d:e2:55:a3:40:69:13:5e:59:98:75:6d:8d:05:08:
         bb:39:d5:58:33:11:98:4e:5b:0c:55:bd:b9:93:83:54:da:e8:
         bf:9a:f8:40:1a:1d:cb:e6:1e:5c:a8:75:1c:2e:4f:a4:48:27:
         53:63:88:98:62:04:95:e7:7b:43:72:d6:1f:c1:06:e0:78:d8:
         41:6a:9b:52:2e:f2:d0:41:16:34:d6:7f:67:37:eb:7e:59:43:
         6c:dd:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:58 2024 by rpki-client on console-fra.rpki-client.org