Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/8a127bd1-b6a3-35f1-bdd4-9f522584a154.roa
File:                     8a127bd1-b6a3-35f1-bdd4-9f522584a154.roa (raw, json)
Hash identifier:          lueCFwRe5C7uMm/9FTXqV/yhVdKrlosVbi3OMiNyMKA=
Subject key identifier:   FF:FD:97:D0:D5:EC:8A:56:0D:39:11:B3:37:FF:74:2A:2E:32:3D:AA
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328583B5A6D08DACDC526B8ED6871C0
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/8a127bd1-b6a3-35f1-bdd4-9f522584a154.roa
Signing time:             Mon 29 Jun 2020 04:00:00 +0000
ROA not before:           Mon 29 Jun 2020 04:00:00 +0000
ROA not after:            Wed 27 Dec 2023 05:00:00 +0000
asID:                     22773
IP address blocks:        47.77.0.0/21 maxlen: 24
                          47.77.56.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:5a:6d:08:da:cd:c5:26:b8:ed:68:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jun 29 04:00:00 2020 GMT
            Not After : Dec 27 05:00:00 2023 GMT
        Subject: CN=85b86795-00b0-4ff4-9ead-1fe4b5a5a3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:f6:12:97:fe:91:4c:10:0e:83:f9:ad:34:
                    bd:3a:46:a1:04:5d:21:d7:5e:5e:35:e3:dc:96:e0:
                    6d:89:ec:c3:0a:77:1e:ad:08:58:90:3f:0d:4d:31:
                    53:08:5e:05:13:eb:7e:a6:3a:3b:7c:59:7f:4b:d1:
                    51:47:c5:95:58:b8:53:f4:9b:9d:a0:df:7e:5d:9f:
                    cd:c7:40:68:20:b6:65:37:d1:b2:7d:d3:cd:ee:ac:
                    5e:44:46:f2:f3:4d:04:7d:8a:61:e0:41:5d:81:d5:
                    3a:2f:92:79:0c:a3:c7:05:0a:c3:89:08:c8:fb:4a:
                    b9:f9:92:cc:a9:d3:ef:43:41:1f:ef:04:80:8a:85:
                    29:96:61:37:a7:8f:6e:ab:0d:f8:f8:9c:3e:50:fa:
                    bc:5e:c4:ca:75:2e:2b:cc:e6:98:dc:4b:61:96:ec:
                    38:12:fa:e4:e2:de:18:da:d3:a2:2d:a0:6f:09:b8:
                    84:1f:5b:bb:d5:e8:6a:d9:3b:67:95:db:e3:72:2c:
                    c2:5a:22:8d:d6:b9:6d:73:09:da:8c:5d:60:a6:4f:
                    d5:8d:d5:cf:28:bf:c4:92:96:06:1b:2e:db:ef:56:
                    04:2a:0c:2f:fd:cf:de:b1:96:0c:a6:90:b1:fd:88:
                    14:08:8b:3e:9c:b3:6f:92:0b:45:cc:9f:46:25:e3:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:97:D0:D5:EC:8A:56:0D:39:11:B3:37:FF:74:2A:2E:32:3D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/8a127bd1-b6a3-35f1-bdd4-9f522584a154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.77.0.0/21
                  47.77.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:f0:6b:30:fe:76:2c:2c:bc:d1:46:22:84:41:1a:b0:24:
         52:d6:05:38:07:21:2c:23:e1:f6:03:4a:1d:3b:d0:04:73:70:
         9f:f1:57:36:ca:c5:3d:16:c5:4a:7d:74:95:26:a8:e3:ca:55:
         fe:05:65:9a:d0:ce:6e:da:ab:b2:af:5e:1a:f5:11:47:86:f7:
         75:14:3b:e3:b8:22:35:35:de:5e:b5:07:62:1d:5a:4f:ca:4a:
         64:3b:96:31:c6:f2:86:cb:86:c5:50:d0:99:3b:fb:9b:ce:e9:
         13:d1:b4:85:28:6d:8d:56:8f:35:b7:e8:2d:a6:b5:00:f8:c3:
         99:21:cf:9b:b5:aa:a0:eb:e2:48:32:0d:04:14:40:26:88:bd:
         87:56:2a:9d:da:9d:5b:68:b6:d1:c1:10:c2:f0:cb:aa:7e:bb:
         16:05:59:5c:a8:c0:c8:08:15:1e:f3:cf:dd:a1:19:2d:49:2a:
         65:67:e5:69:8f:d3:94:5f:3e:8b:1f:6e:8e:64:bf:3c:2d:1c:
         b4:48:de:04:f1:9b:49:ad:e9:e3:6f:9e:c1:fd:2e:41:0c:d1:
         0d:b8:10:d6:32:14:be:f9:66:33:04:c9:45:b1:0a:38:c1:d7:
         d9:f2:21:b1:ef:10:57:e4:2b:8c:df:1c:7e:4f:49:40:b7:1b:
         b0:4b:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:59 2024 by rpki-client on console-fra.rpki-client.org