Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/51716df5-d9be-3bd2-8e06-ec536ae37e2f.roa
File:                     51716df5-d9be-3bd2-8e06-ec536ae37e2f.roa (raw, json)
Hash identifier:          PUTJdX6ww3jTmdk69zX8/oD2xt88H5IpvUgdtIBPDRU=
Subject key identifier:   D0:4F:A6:5D:F5:1F:C6:BE:C4:EF:00:2A:8C:3F:07:D5:F6:7A:1F:C4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285842087C6AA5751196B4576EE7B8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/51716df5-d9be-3bd2-8e06-ec536ae37e2f.roa
Signing time:             Sun 28 May 2023 16:22:25 +0000
ROA not before:           Sun 28 May 2023 16:22:25 +0000
ROA not after:            Sat 26 Aug 2023 16:22:25 +0000
asID:                     212335
IP address blocks:        216.74.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:08:7c:6a:a5:75:11:96:b4:57:6e:e7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 28 16:22:25 2023 GMT
            Not After : Aug 26 16:22:25 2023 GMT
        Subject: CN=7ba0ab89-2ea9-4b42-a8d1-2cf90b8af6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:f6:6a:38:be:51:f5:29:cc:f3:29:19:14:
                    4f:d9:78:dc:f9:d2:c0:fc:18:3c:b6:a6:fa:11:67:
                    e0:a1:14:fe:84:13:e4:10:32:93:47:41:07:98:4c:
                    95:92:a5:5c:5a:c3:3f:de:a1:5d:30:13:db:b3:66:
                    c4:f6:40:be:1a:59:6b:ed:e3:b6:14:a0:9f:e9:bf:
                    82:4f:ff:b5:51:33:aa:2a:40:53:a5:a2:b8:ce:4f:
                    88:fb:39:01:1e:db:98:f2:f4:90:a9:1f:96:43:f0:
                    f7:a1:5d:a4:3a:26:9a:6f:47:bf:26:3a:14:84:62:
                    14:c5:5e:2d:1c:cd:86:50:3b:bf:f2:ee:a9:4b:46:
                    64:ad:5d:a3:2a:c3:cf:53:1b:28:bc:33:df:7a:43:
                    bf:59:26:b1:54:aa:bf:e4:63:82:3a:48:e2:2b:33:
                    43:55:98:3d:30:f1:1b:56:88:99:3d:72:c4:7c:34:
                    2a:b4:7e:4b:ce:f3:35:04:d5:bf:fb:2a:21:9f:a7:
                    29:3c:fe:7c:a0:32:e7:76:1f:04:9f:f6:ce:8f:b7:
                    57:53:ff:16:1c:ec:e6:03:ed:f1:1a:98:cc:cf:07:
                    39:f6:d8:6d:3f:02:f6:78:3e:7f:68:73:9d:9e:69:
                    d9:52:1c:02:7e:53:26:4d:16:01:fa:1f:03:c1:c6:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:A6:5D:F5:1F:C6:BE:C4:EF:00:2A:8C:3F:07:D5:F6:7A:1F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/51716df5-d9be-3bd2-8e06-ec536ae37e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:63:2c:60:5c:05:bb:a9:89:fe:76:11:f9:39:52:dc:e3:35:
         f5:ca:b4:6f:6c:59:7a:2a:5c:39:f3:bb:0b:37:5b:45:42:a1:
         89:fb:78:ca:df:89:92:5a:7e:2b:36:50:19:37:29:bc:19:39:
         03:e1:4c:15:6c:ea:c8:cd:34:33:f5:08:fd:69:0d:db:fc:b8:
         c6:c9:ce:fd:a7:47:1b:b0:e4:c2:dd:67:4e:89:42:60:9b:66:
         1f:4e:8f:17:7f:3b:a7:a2:ac:38:9a:5f:09:da:9f:cd:18:9e:
         99:32:40:79:8f:b2:6e:77:a0:4d:60:cf:b1:e4:ef:bf:c9:c5:
         d3:4e:ee:87:e2:87:c2:d9:cc:94:4f:97:76:51:f4:03:40:3b:
         fd:0c:df:fb:61:59:fe:11:a4:63:a7:84:06:0b:7d:43:8c:99:
         8f:4a:36:ce:af:54:2c:e4:94:ee:3c:73:10:40:77:d8:40:6c:
         78:42:43:a5:0f:3f:6c:58:1f:17:f8:18:c7:95:77:14:b1:47:
         c9:b7:2a:77:1f:eb:18:af:06:e9:7d:4a:c2:6d:26:b4:b3:87:
         1b:f7:b7:c9:1b:57:55:b7:e5:77:48:bf:f4:ae:54:4f:68:e3:
         67:8d:00:51:53:2f:0b:f2:60:e4:d3:59:33:f8:7b:1e:ff:d2:
         9e:fb:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:00 2024 by rpki-client on console-fra.rpki-client.org