Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1e528467-7957-39f2-aca4-90855ebbe291.roa
File:                     1e528467-7957-39f2-aca4-90855ebbe291.roa (raw, json)
Hash identifier:          Bd5r3NI1Fwbo1f53tVEoluGQ8lBtq/5dmM1OTHAA0IA=
Subject key identifier:   E3:72:2C:6D:FC:A3:5E:86:50:86:85:40:EF:5A:5B:2F:82:53:CF:C0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858421140A665FCBC993B70263200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1e528467-7957-39f2-aca4-90855ebbe291.roa
Signing time:             Wed 31 May 2023 19:44:16 +0000
ROA not before:           Wed 31 May 2023 19:44:16 +0000
ROA not after:            Tue 29 Aug 2023 19:44:16 +0000
asID:                     61317
IP address blocks:        216.107.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:11:40:a6:65:fc:bc:99:3b:70:26:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 31 19:44:16 2023 GMT
            Not After : Aug 29 19:44:16 2023 GMT
        Subject: CN=7ef29dda-f232-4ce4-a663-8f9d746c3079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:70:10:8b:c7:48:59:56:77:a9:ed:7f:54:
                    2e:fc:07:97:42:69:01:a8:03:65:a0:0a:53:59:12:
                    27:01:96:87:c3:6e:c0:88:e9:d1:51:b1:30:1a:f2:
                    ff:65:0f:65:57:c3:fc:42:b4:d6:0d:8e:b7:a7:d8:
                    b2:87:69:97:a4:11:fe:5f:e3:b0:25:93:e5:17:eb:
                    af:57:ee:3d:8d:13:89:0b:5a:80:6a:28:6a:34:20:
                    f4:9a:92:1e:f0:8a:31:62:0d:84:15:89:92:dd:51:
                    ac:c9:00:b2:49:35:ba:ac:f0:3c:8c:f6:8e:0c:07:
                    82:a1:aa:d6:c8:96:8a:7b:6f:fa:66:18:1b:4c:2c:
                    08:7e:12:da:f5:a6:a4:78:4c:42:b4:f1:38:3f:52:
                    b1:13:76:93:10:06:b3:ca:24:25:96:42:00:0d:90:
                    f4:74:c7:e4:88:c5:58:3f:2c:e4:fe:9d:92:4c:74:
                    60:da:5c:30:b1:59:95:33:1c:6d:0c:f4:a7:24:bc:
                    eb:9e:d6:2f:42:a4:8c:b9:d9:fe:af:19:37:bf:86:
                    96:16:96:c0:ce:a7:c0:69:52:4f:da:8e:88:43:b4:
                    f5:54:6b:97:7f:21:a5:f1:82:5b:44:28:a6:fc:0c:
                    49:61:f6:a5:da:40:62:ae:c7:42:eb:98:1e:63:9e:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:72:2C:6D:FC:A3:5E:86:50:86:85:40:EF:5A:5B:2F:82:53:CF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1e528467-7957-39f2-aca4-90855ebbe291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:c3:ae:13:f1:be:a8:91:3e:08:de:a2:50:ab:2a:12:57:f8:
         a6:f2:ee:5b:c9:f9:0d:df:7a:87:c6:8d:93:42:1d:be:e6:ca:
         36:52:28:8d:f0:5b:29:e3:20:0a:33:46:4e:80:21:93:83:91:
         79:d0:39:7b:0a:f6:9f:05:27:99:60:c6:46:29:2a:bb:37:77:
         0c:b3:a3:8b:b3:4d:26:4f:46:22:90:bd:58:21:6a:24:72:f1:
         c7:b1:ce:20:d9:2b:50:f9:b4:7c:05:a8:8f:ea:8e:79:58:cb:
         d8:d2:64:c7:4b:8a:83:56:aa:2a:52:56:5f:f5:d5:f7:f4:44:
         2a:41:7c:25:6b:e0:58:6d:41:cd:e9:e2:55:f0:9f:1c:0e:47:
         dd:9e:72:11:34:6d:e6:d6:e4:6c:4d:90:15:8d:e2:1e:0b:76:
         0f:80:24:df:9e:18:51:2d:a2:b3:a8:ac:91:39:6d:b5:a3:45:
         d0:17:5f:48:86:69:e8:3f:b6:ce:09:18:c9:32:e1:03:33:17:
         8b:05:88:18:c3:09:6d:32:7a:53:b4:4d:f2:ef:fa:eb:76:fa:
         b7:2a:f0:dd:3a:91:ec:f7:30:ab:ca:12:a2:c4:01:35:47:13:
         6c:70:b1:bb:46:d1:75:71:60:c1:c1:b7:4e:f5:18:ba:04:e5:
         c8:40:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:15 2024 by rpki-client on console-ams.rpki-client.org