Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/d3422184-1e1f-300f-a933-e70dcaeba64f.roa
File:                     d3422184-1e1f-300f-a933-e70dcaeba64f.roa (raw, json)
Hash identifier:          yx+mNxb1EL72zc49YQBAu2r1vtS/FCLenPeW/B7r7aA=
Subject key identifier:   BA:B7:05:9E:B8:22:E8:71:7C:42:1B:D9:5D:01:1E:82:6B:00:86:F0
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584400792E3540B7291012E13100
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/d3422184-1e1f-300f-a933-e70dcaeba64f.roa
Signing time:             Sat 25 Nov 2023 05:03:18 +0000
ROA not before:           Sat 25 Nov 2023 05:03:18 +0000
ROA not after:            Fri 23 Feb 2024 05:03:18 +0000
asID:                     834
IP address blocks:        165.140.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:00:79:2e:35:40:b7:29:10:12:e1:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Nov 25 05:03:18 2023 GMT
            Not After : Feb 23 05:03:18 2024 GMT
        Subject: CN=b471c34a-99ac-48ef-a6ec-2ece2dcccb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:4e:72:8c:eb:c5:dd:20:5c:b0:10:eb:6c:
                    78:ef:b4:ae:be:d8:98:41:23:8e:10:0e:4b:dd:03:
                    dc:63:68:9a:b3:7f:0b:af:dd:b4:df:70:b3:9c:5b:
                    a6:ae:1e:62:10:48:70:a3:79:f4:c9:e8:4b:29:28:
                    4e:f3:b8:df:13:87:92:82:b1:09:f5:03:c6:53:9a:
                    d7:f1:0c:1e:ac:1e:cb:b1:a0:52:ef:40:e1:9e:23:
                    a2:a7:88:e2:a2:53:35:16:a3:c1:bc:b0:f0:68:34:
                    97:ef:77:ef:ea:05:3c:e6:7a:67:64:b8:d9:cd:8d:
                    3b:4e:90:c8:06:ca:70:58:13:56:f3:b0:99:0c:a3:
                    36:c1:39:29:d1:fb:6f:26:2b:6d:3c:ea:a6:46:3f:
                    bf:60:31:20:74:0d:4e:df:a6:4c:ac:2f:10:34:0d:
                    c2:69:8a:64:4f:28:46:b6:60:a9:3c:e5:d1:98:7d:
                    8c:ca:17:80:b5:4b:1a:15:26:3e:74:72:7c:2c:37:
                    c9:fb:fd:5b:bd:13:13:2d:de:38:14:26:a8:41:4c:
                    41:42:c2:8b:03:82:96:35:28:41:22:3e:76:79:c8:
                    12:db:f9:c9:f4:cb:12:71:ae:ad:5e:28:c5:ab:a6:
                    0c:9a:17:83:24:f8:c0:2c:be:5b:95:43:9b:07:53:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:05:9E:B8:22:E8:71:7C:42:1B:D9:5D:01:1E:82:6B:00:86:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/d3422184-1e1f-300f-a933-e70dcaeba64f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:95:06:3d:c4:bd:15:2a:76:49:c2:b2:9c:41:22:0d:7e:5f:
         20:ea:bf:4f:b6:41:21:a4:6d:b6:4f:cc:7d:87:e5:0d:3d:4f:
         87:53:41:3f:e1:58:1c:c4:9d:92:cb:58:29:0e:d5:17:2c:ad:
         c3:c8:df:c9:b2:b4:0f:1b:77:22:53:d7:2f:c1:97:a2:15:c1:
         78:23:e8:31:55:e8:58:7f:97:ac:c7:9b:50:f7:ea:de:a5:69:
         60:3c:47:69:9a:ca:01:04:c1:a8:f2:ee:6f:93:07:9f:aa:f2:
         12:48:6f:d3:b4:a2:5e:ee:02:d8:87:90:e5:83:81:e4:9d:4b:
         04:f8:a1:34:f0:b2:f8:75:33:32:dd:37:72:da:dc:f3:11:8f:
         ea:e9:22:c8:29:24:39:35:09:12:48:56:6d:36:c8:ba:20:fa:
         99:ff:99:c1:84:86:34:b3:dc:90:61:c1:7e:59:38:ce:77:a1:
         7a:57:1e:07:66:81:52:39:41:bf:66:1e:db:58:1f:3a:eb:a8:
         f2:d5:87:e6:66:76:09:aa:61:ed:fb:f7:a2:f5:88:92:3a:08:
         8d:32:fe:7c:16:e6:b7:be:0e:24:65:40:70:ba:70:d6:31:0f:
         29:f2:c0:a0:60:68:14:4f:39:d7:8c:69:01:28:0f:36:39:fa:
         fb:6d:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:58 2024 by rpki-client on console-fra.rpki-client.org