Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/01012991-0dd4-3287-a3a1-eb07fde4ecc1.roa
File:                     01012991-0dd4-3287-a3a1-eb07fde4ecc1.roa (raw, json)
Hash identifier:          avQSbc2U7FcOvu2oQkYersIUU8xZ2txwyiLHG3lVq2U=
Subject key identifier:   04:1E:A4:D4:62:60:A4:23:77:12:9A:43:51:68:89:EC:2F:2D:51:8E
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584391BA9ADFCD546C2BDF1955C0
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/01012991-0dd4-3287-a3a1-eb07fde4ecc1.roa
Signing time:             Mon 16 Oct 2023 13:00:21 +0000
ROA not before:           Mon 16 Oct 2023 13:00:21 +0000
ROA not after:            Sun 14 Jan 2024 14:00:21 +0000
asID:                     8100
IP address blocks:        47.87.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:91:ba:9a:df:cd:54:6c:2b:df:19:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Oct 16 13:00:21 2023 GMT
            Not After : Jan 14 14:00:21 2024 GMT
        Subject: CN=767e2b94-dcc8-4a73-a780-97af27255a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:9e:f4:37:19:b3:d1:b8:6d:d1:d6:6c:b6:
                    1c:6a:7c:88:c8:bd:f4:87:be:45:ce:aa:e5:0c:9b:
                    91:15:a5:02:35:e8:e0:b5:60:01:e0:32:74:02:d9:
                    35:22:38:85:af:7d:0b:00:0b:a8:34:31:30:e3:a9:
                    90:a8:71:1f:c3:ce:76:49:27:ea:d1:88:28:5b:81:
                    e1:52:aa:92:45:07:f7:18:d7:d5:f7:97:fc:dc:6f:
                    27:e9:61:fe:2c:24:0c:2a:06:ea:db:18:d8:33:f9:
                    5e:6a:05:fa:e8:63:63:89:dc:e2:59:e1:16:da:be:
                    6e:fb:1f:a2:a4:e7:38:ac:7d:7e:d9:a4:c0:8f:7d:
                    eb:88:e8:c0:ff:95:7d:35:bd:c2:bb:69:56:77:5d:
                    a3:51:43:c2:20:e0:20:da:c7:2c:d2:8d:43:3b:73:
                    07:60:82:0a:1a:5c:a8:cb:98:df:f1:c0:aa:f2:2e:
                    45:39:58:42:ec:5e:b1:e2:dc:64:01:73:f4:51:63:
                    bc:88:5b:0c:7f:b3:1f:08:e1:f4:64:02:52:50:91:
                    5a:20:fa:04:a9:0d:a6:21:ce:45:cb:18:af:2a:8b:
                    ab:86:2a:6a:42:41:d6:44:80:72:3f:5b:31:6e:0b:
                    52:0b:20:22:b2:b1:16:35:2c:7d:ee:5e:75:d8:48:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:A4:D4:62:60:A4:23:77:12:9A:43:51:68:89:EC:2F:2D:51:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/01012991-0dd4-3287-a3a1-eb07fde4ecc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.87.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:2a:00:74:f1:94:2d:60:44:4f:dc:4b:69:28:7a:79:2e:
         ec:54:e2:25:f0:53:9d:b6:11:ce:20:e9:b1:1e:e1:8f:22:96:
         83:b4:58:9f:00:91:f7:1c:a8:c8:82:b8:f6:16:64:5b:82:3b:
         a3:bf:96:c0:c2:42:c0:d9:9b:c1:3c:51:f5:0d:57:7c:e3:dc:
         b0:1b:f1:65:22:3f:4e:5f:62:1f:95:ed:4f:0f:1c:7b:51:6a:
         44:b0:df:5f:d0:c6:52:d0:47:b7:c6:1c:74:02:87:3a:da:91:
         d6:23:95:28:f1:a0:ce:a6:19:4b:73:6a:ca:09:0e:91:71:8d:
         0a:1f:1c:0a:97:b1:ba:33:b7:56:d1:0b:b3:98:b9:0b:d1:cf:
         a0:92:b0:28:9e:8c:87:4c:92:89:22:0f:d0:fa:ba:00:43:b0:
         76:bd:4a:6f:9b:c4:45:08:c0:be:03:58:9c:06:75:35:09:26:
         a6:e5:8d:16:e4:7a:3f:a9:f4:88:ed:59:68:5a:b7:d2:00:a0:
         bf:6f:f9:97:fd:d9:33:ec:98:26:56:e0:9c:31:59:4c:af:6a:
         49:10:68:b8:a7:c0:e1:fb:d3:36:db:ab:4e:ab:13:a2:1f:24:
         f1:33:08:0c:ab:8e:aa:0f:14:05:23:f5:81:1e:c9:07:38:ac:
         c3:3a:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:59 2024 by rpki-client on console-fra.rpki-client.org