Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/4a7be8da-3baa-36b8-8cb3-8c28df732339.roa
File:                     4a7be8da-3baa-36b8-8cb3-8c28df732339.roa (raw, json)
Hash identifier:          KJBYQLiZscw0I0M7DZVpJ+9G1kXvujANWhFqH0E8ets=
Subject key identifier:   C6:A6:E9:5A:DC:FA:1A:7E:39:9A:86:7C:0D:6C:CA:29:C1:14:88:A3
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285844B6DD43C23F29B30939045A80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/4a7be8da-3baa-36b8-8cb3-8c28df732339.roa
Signing time:             Mon 29 Jan 2024 13:02:05 +0000
ROA not before:           Mon 29 Jan 2024 13:02:05 +0000
ROA not after:            Sun 28 Apr 2024 12:02:05 +0000
asID:                     149197
IP address blocks:        103.251.25.0/24 maxlen: 24
                          103.49.152.0/24 maxlen: 24
                          103.49.153.0/24 maxlen: 24
                          103.49.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b6:dd:43:c2:3f:29:b3:09:39:04:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jan 29 13:02:05 2024 GMT
            Not After : Apr 28 12:02:05 2024 GMT
        Subject: CN=4bbe1f36-e719-497b-9368-8dee1de0c886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:df:b7:2d:94:42:2b:9a:b1:a0:a5:3d:d9:
                    ca:41:37:56:ce:e0:c1:ca:70:d1:ea:fe:6a:de:ee:
                    20:09:d3:af:7f:cc:b5:d1:5d:59:01:98:61:ef:46:
                    7d:a5:66:df:84:9c:bb:52:c1:34:ed:c3:0b:54:55:
                    ca:89:aa:8e:0c:ae:c4:f4:06:72:0e:6d:96:4b:f3:
                    22:91:98:e3:93:1c:4a:71:b3:99:ac:70:0f:05:b0:
                    f7:b6:0a:01:5e:99:77:77:b8:c2:b5:ac:3b:45:b4:
                    00:ae:3a:2b:3e:bb:74:37:3e:97:46:21:e3:de:17:
                    ec:9a:1e:ff:e1:e8:95:44:cd:44:17:84:65:6b:1d:
                    cf:fa:df:74:19:fa:00:5c:76:82:a3:46:42:c0:b4:
                    1e:99:d2:1f:7c:0f:cc:28:a4:77:9a:ac:2f:b7:6c:
                    28:d5:fc:8d:7e:df:40:d7:cf:f5:7a:d0:34:96:24:
                    63:09:23:8c:e8:e2:9a:be:26:c5:05:11:f2:3f:b6:
                    b4:22:5c:32:d7:e7:d6:4f:06:ca:f5:3d:05:d6:ba:
                    9b:fb:38:d7:de:c1:d0:40:7c:2c:ed:d7:e6:35:75:
                    92:0a:82:d2:ec:8a:33:1f:f3:87:86:28:0c:52:79:
                    a6:1d:ce:0c:d3:32:a4:3d:60:9c:18:ff:7f:a6:1d:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:E9:5A:DC:FA:1A:7E:39:9A:86:7C:0D:6C:CA:29:C1:14:88:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/4a7be8da-3baa-36b8-8cb3-8c28df732339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.152.0-103.49.154.255
                  103.251.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:6f:70:34:b0:b7:91:7c:5d:ad:7e:9f:6c:40:7d:a5:bc:
         04:32:db:c4:2d:a4:c7:03:6f:e8:a3:60:03:b2:37:5f:c5:c2:
         ef:d9:b9:e8:40:02:48:e7:0f:1c:f0:a4:bd:7d:c9:c0:ab:b2:
         a7:30:64:0d:c6:46:8e:2e:a2:f0:c8:1c:b0:bc:86:b9:2c:39:
         cc:a0:09:27:91:f5:e5:76:53:64:22:b5:b3:56:fa:ac:58:bb:
         95:3c:6b:9a:11:78:d1:df:88:50:16:22:6e:44:91:1b:05:d1:
         04:bd:ff:78:e9:a2:1c:6e:4b:b0:38:9a:3d:3b:87:2e:ab:b5:
         0d:17:ed:86:32:df:84:3e:fc:ef:50:f5:b0:8a:6b:42:b0:77:
         bd:ab:15:7e:d5:c3:08:cc:6d:db:58:52:30:ad:b3:8d:5f:24:
         f4:e5:a9:bc:df:f7:e2:d2:ee:6f:32:fb:2b:f0:66:77:d6:be:
         0b:9a:fb:05:71:dc:f5:bf:dd:59:bb:f6:30:50:26:51:52:f6:
         ca:07:71:f0:d2:7f:39:96:6d:e5:9b:2b:5a:ba:9e:72:b0:c0:
         40:67:3d:c1:54:37:a9:8e:95:4f:a6:da:2e:26:f1:da:02:42:
         af:11:ee:24:74:37:9d:4f:61:e9:30:e1:bf:72:6c:5a:18:07:
         b3:6d:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:23 2024 by rpki-client on console-ams.rpki-client.org