Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/18533732-3d7d-3ab1-9798-eb02188130f1.roa
File:                     18533732-3d7d-3ab1-9798-eb02188130f1.roa (raw, json)
Hash identifier:          9OSyVrdv0yA2pOonS7nZZtXguENszCMttDPu+GE7rjk=
Subject key identifier:   38:7E:32:E4:84:47:FE:E8:FB:AC:0C:C0:03:F4:E2:55:2A:E0:90:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285842C1459A55331E8F7A9EFB43BB
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/18533732-3d7d-3ab1-9798-eb02188130f1.roa
Signing time:             Wed 02 Aug 2023 20:56:31 +0000
ROA not before:           Wed 02 Aug 2023 20:56:31 +0000
ROA not after:            Tue 31 Oct 2023 20:56:31 +0000
asID:                     33363
IP address blocks:        107.144.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:45:9a:55:33:1e:8f:7a:9e:fb:43:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  2 20:56:31 2023 GMT
            Not After : Oct 31 20:56:31 2023 GMT
        Subject: CN=d5f679b7-c063-49f3-a6bc-784884c8c3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:a5:b5:77:72:e8:6e:3a:b5:c4:c1:57:a4:
                    15:0d:46:e2:5d:34:41:c5:9a:e3:50:0b:ca:cb:86:
                    62:ab:03:f0:6e:b8:1a:43:21:de:ff:00:f0:2c:9d:
                    e4:94:7c:61:6a:1d:29:8e:c3:1e:77:a5:6b:b0:ba:
                    5a:05:13:59:81:bf:bf:d6:3e:9e:f2:c2:be:6c:f3:
                    40:68:d5:d2:2d:0b:54:cf:c3:0f:a0:18:01:09:55:
                    5e:87:99:a2:55:4d:a9:f8:35:b1:84:91:1b:e4:1e:
                    be:59:62:99:5f:75:5f:37:db:a6:c6:9b:05:c7:47:
                    97:27:61:f4:2e:ab:08:86:29:92:09:ae:83:5c:82:
                    36:9f:3b:b8:9f:f7:c4:bc:b8:bb:d4:83:4b:dd:1a:
                    26:6d:a0:a4:0d:af:6e:92:8a:fc:1b:bb:da:f9:56:
                    9b:d2:f8:68:87:20:1d:14:ae:57:f3:64:80:56:3f:
                    fe:30:8c:85:ef:ab:27:2a:59:7f:df:62:fd:54:d8:
                    c4:d7:c2:2a:89:0a:5d:8b:4d:ea:d1:28:b0:58:7a:
                    65:c5:4d:5b:da:55:45:7c:ee:68:22:8f:05:62:cf:
                    a9:94:f5:39:73:14:a2:8f:ad:cb:65:45:d3:ae:21:
                    83:25:7d:63:0a:09:03:9e:80:e1:67:78:b0:42:b7:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:32:E4:84:47:FE:E8:FB:AC:0C:C0:03:F4:E2:55:2A:E0:90:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/18533732-3d7d-3ab1-9798-eb02188130f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:e6:a7:1a:df:b9:79:f3:55:e8:ed:ac:25:04:29:2a:d2:
         31:af:c0:fb:5d:df:ce:18:be:79:87:92:22:03:a1:24:3b:7c:
         28:84:19:bb:b9:6b:32:76:07:a7:bf:50:a7:d3:53:b1:27:60:
         99:4d:66:a3:64:24:c7:43:8e:3c:c1:5d:4c:80:d2:27:95:5f:
         57:6f:f0:f0:26:0c:ee:bb:0c:f2:79:01:88:dc:68:bf:05:7e:
         aa:c4:f4:c6:48:c0:68:2b:71:45:18:59:83:0b:b4:b0:92:9a:
         f1:0d:69:49:e2:50:33:a3:c8:71:91:98:a5:c2:e7:bb:6f:b4:
         27:c5:38:fd:a3:06:6c:a3:48:ef:29:cc:eb:17:bb:ee:b5:78:
         f0:e9:b8:d5:47:f6:3f:cb:be:c5:f2:14:71:fa:0d:21:28:00:
         a9:23:47:67:d1:ff:2b:1f:e2:4b:b3:f0:b7:7d:4f:b6:a9:e5:
         1e:59:6e:4e:bb:38:35:06:8d:dc:2b:2f:da:8e:f6:5e:ae:a1:
         5d:24:1d:e2:4c:36:ca:3e:d9:d4:fa:68:aa:02:93:19:75:87:
         af:a8:83:4e:05:a1:80:a7:8c:04:28:00:c1:b9:7a:c4:79:44:
         83:37:77:2d:e0:9d:04:9b:e7:13:ca:b9:2e:0a:c4:61:48:fa:
         0a:a5:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:11 2024 by rpki-client on console-ams.rpki-client.org