Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/2ee01639-0f27-3709-bb78-e8972913ef86.roa
File:                     2ee01639-0f27-3709-bb78-e8972913ef86.roa (raw, json)
Hash identifier:          7WziL+Hv8WdRVkUTi2dkii6DcUQJUJkni01N3ldw/NA=
Subject key identifier:   E2:0C:59:1E:F2:2D:45:AF:78:74:74:FC:65:63:A1:34:BF:8F:E4:3B
Certificate issuer:       /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial:       010D0C9F4328583FD7D7F30921B04C4E02D4BA00
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/2ee01639-0f27-3709-bb78-e8972913ef86.roa
Signing time:             Tue 08 Nov 2022 16:24:57 +0000
ROA not before:           Tue 08 Nov 2022 16:24:57 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     204968
IP address blocks:        216.252.145.0/24 maxlen: 24
                          216.252.146.0/24 maxlen: 24
                          216.252.147.0/24 maxlen: 24
                          216.252.148.0/24 maxlen: 24
                          216.252.149.0/24 maxlen: 24
                          216.252.150.0/24 maxlen: 24
                          216.252.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d7:d7:f3:09:21:b0:4c:4e:02:d4:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
        Validity
            Not Before: Nov  8 16:24:57 2022 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=7ac33895-75c4-4fb9-865f-d1fefdcaec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:cf:5d:b6:0e:cf:2c:a7:24:7b:d0:a9:f3:
                    4c:df:52:2c:4e:cb:5f:4d:5d:b6:12:84:0e:d4:d0:
                    d8:79:67:a2:57:dd:0c:de:c8:40:cb:3d:5f:bc:96:
                    fe:d3:cc:82:a1:89:a1:ab:c8:3b:08:ec:f6:10:f0:
                    39:03:2d:1a:60:d7:02:36:04:52:73:15:2a:09:6a:
                    75:2a:67:3d:0c:1d:42:cd:60:9a:13:97:ad:42:0e:
                    cb:bd:98:4d:d2:5f:0d:1e:ba:29:9c:88:30:4d:53:
                    51:32:da:0c:07:c1:d0:e8:7a:f7:39:36:e0:fe:43:
                    fd:41:b4:8d:93:59:73:92:a5:5e:01:39:ad:f6:63:
                    23:5c:87:9e:b4:6f:4b:dd:0b:63:86:55:c6:7a:82:
                    db:17:57:71:61:40:69:b5:8f:90:c0:ef:91:15:55:
                    ab:33:52:13:23:77:77:50:16:36:de:15:88:98:59:
                    98:63:d3:06:48:da:c2:81:bd:b2:b7:5d:f5:13:53:
                    11:bc:22:94:f5:9a:be:fd:fc:e5:b1:8a:19:68:46:
                    ff:cf:72:f4:f3:25:9b:4b:6a:04:d1:d0:be:db:10:
                    b7:a5:76:97:db:0d:15:0f:fd:ae:97:61:cd:d4:26:
                    b1:60:f7:cc:cc:0f:3b:45:15:eb:53:72:be:fa:f8:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0C:59:1E:F2:2D:45:AF:78:74:74:FC:65:63:A1:34:BF:8F:E4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/2ee01639-0f27-3709-bb78-e8972913ef86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl

            X509v3 Authority Key Identifier:
                keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.145.0-216.252.151.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:2c:52:8f:f6:29:71:a8:b9:d1:34:23:8d:b2:e0:94:40:
         e1:a6:2e:4e:8e:69:fc:a1:87:fe:af:f0:b4:a5:c8:e0:ff:09:
         53:01:81:15:c4:f9:0e:e2:3b:c0:a1:d2:9a:f7:c7:55:02:b3:
         a7:61:3c:cf:a0:ff:28:b8:b8:e4:32:98:6a:4b:a9:af:99:75:
         b6:92:f2:92:38:97:7b:96:81:f9:16:6e:55:97:0d:3d:bb:79:
         b1:80:eb:00:8c:ed:a6:7c:f2:03:71:3c:a2:e1:8f:ae:d8:14:
         e5:ea:4c:7d:93:ec:54:10:5f:e5:3e:b4:72:38:9c:be:df:4e:
         6d:ba:b5:6b:b7:2b:cd:fe:94:88:20:09:16:49:04:ab:f2:42:
         d6:1e:af:8a:0a:8d:b0:a5:78:10:a6:dd:17:3d:d0:5b:1c:4c:
         fc:ff:9e:b5:5c:dd:1e:a0:ea:f6:7f:a1:c5:9b:91:87:fe:e6:
         a5:74:80:93:b0:6e:63:9a:27:2b:74:00:47:0f:8f:dc:41:dd:
         8c:21:3c:eb:a3:c8:d3:97:16:72:04:c6:45:4d:92:96:4a:b7:
         b7:08:1d:f1:3d:0d:c8:8c:69:52:fb:ff:3a:01:52:3f:f9:42:
         12:38:bf:c5:77:5f:1a:00:9a:22:cd:e9:d8:f6:50:2f:70:68:
         f6:3a:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:11 2024 by rpki-client on console-ams.rpki-client.org