Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7d9c4aa5-3842-354a-856b-fec78170fca0.roa
File:                     7d9c4aa5-3842-354a-856b-fec78170fca0.roa (raw, json)
Hash identifier:          +tAzp7yfrnDpvV1wsd8O6+ceWiCvYCmaYpn3X6j939M=
Subject key identifier:   77:E6:CD:5D:4F:47:4F:5C:F3:6C:9D:DD:9F:78:4A:B8:0E:40:EA:00
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858428188DDDA114D255F686F4080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7d9c4aa5-3842-354a-856b-fec78170fca0.roa
Signing time:             Tue 11 Jul 2023 01:00:16 +0000
ROA not before:           Tue 11 Jul 2023 01:00:16 +0000
ROA not after:            Mon 09 Oct 2023 01:00:16 +0000
asID:                     61317
IP address blocks:        206.206.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:81:88:dd:da:11:4d:25:5f:68:6f:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 11 01:00:16 2023 GMT
            Not After : Oct  9 01:00:16 2023 GMT
        Subject: CN=a775a32e-6c89-44b2-820e-a2deaca87c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:cd:f6:c6:7c:a3:35:e7:07:d0:7a:f3:9e:
                    4c:74:67:91:3e:ad:31:59:90:c9:2c:d6:59:ed:76:
                    d8:05:12:3b:59:ee:e2:64:57:16:16:c3:91:0c:76:
                    b7:94:69:de:12:d0:be:fc:fb:8a:03:d2:72:34:16:
                    fb:eb:54:46:2c:d3:06:0e:4e:60:cd:bf:0f:10:9d:
                    41:0f:98:2c:22:50:55:8c:7f:98:b3:ae:e6:f4:75:
                    8f:a5:09:b4:c0:23:d3:f9:0c:7f:f3:09:46:ef:61:
                    5b:25:cd:50:eb:68:16:cf:9d:b0:a3:b8:47:b7:51:
                    d9:18:82:40:56:2a:68:c2:5d:8f:d4:b5:7b:ca:95:
                    d7:10:c6:51:ee:07:44:06:16:38:60:cd:83:50:90:
                    31:97:68:59:78:f0:a0:68:f1:5b:e7:13:d4:17:be:
                    f7:d2:1c:e6:fb:5a:65:8a:72:e4:83:15:12:13:7a:
                    51:63:84:b3:f2:48:8e:b6:ec:76:ff:65:03:2e:89:
                    10:dd:fd:5c:48:4e:c1:73:ab:52:a3:f7:11:11:fe:
                    fa:00:ff:d8:ef:25:05:67:62:43:26:14:85:a6:27:
                    d6:82:c6:75:97:af:65:f2:5e:69:b9:45:22:ed:6e:
                    0f:e2:9f:bc:f7:94:e6:25:8d:9e:14:fe:15:4d:33:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:CD:5D:4F:47:4F:5C:F3:6C:9D:DD:9F:78:4A:B8:0E:40:EA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7d9c4aa5-3842-354a-856b-fec78170fca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:28:01:f0:de:1b:0e:f0:93:94:ab:b8:be:f5:bb:64:2d:d4:
         5e:96:f3:5d:fc:11:45:69:1f:fe:09:f1:0c:26:66:ad:11:51:
         36:de:a6:29:31:38:c3:a5:5b:96:78:7b:da:e0:5a:dc:cb:a2:
         eb:f3:cf:c3:76:fb:bf:27:19:ad:d7:5c:24:1b:b6:79:41:e3:
         78:44:f1:cf:64:d9:db:9b:fe:b0:a1:e6:43:28:ca:3b:bb:f0:
         9e:29:21:a9:c3:9c:5c:25:3c:40:33:2a:ff:3e:7c:d7:3d:7e:
         7a:4f:a4:c2:33:99:09:6e:75:f9:fe:f7:82:48:19:fa:65:c9:
         8b:55:9f:a9:a1:b7:ea:b9:dc:4c:fa:43:59:32:4b:de:4d:a0:
         9e:c5:d9:1e:2b:e6:e1:95:c7:10:c8:7a:6a:85:bc:d6:29:11:
         c8:ab:cd:26:35:6b:d0:c1:1d:24:7d:51:6f:60:5e:23:92:9b:
         96:e6:25:24:41:9d:2b:47:ad:6d:ea:c1:7d:41:6d:df:d3:b8:
         1f:57:20:28:c3:2e:77:9a:09:79:bc:8e:e1:36:b7:93:1f:40:
         c3:ef:f3:14:97:bc:45:08:6f:d1:e5:3f:8b:e0:66:6d:03:05:
         48:1b:c5:96:21:02:40:9a:7f:ad:de:c2:cb:74:5d:6e:b3:7d:
         f2:13:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:01 2024 by rpki-client on console-fra.rpki-client.org