Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/509356be-75d6-336b-ab56-8a2a63b9b39f.roa
File:                     509356be-75d6-336b-ab56-8a2a63b9b39f.roa (raw, json)
Hash identifier:          eAtet+pSZbDNX7xkIfujB8zBr39Tx2RdrTBjvxWp88c=
Subject key identifier:   89:8A:16:AD:60:EB:CB:13:2B:20:0C:AE:F6:3D:60:9D:BA:A9:E4:4D
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285840EAACC3ABEA9B3D1FD7D6C260
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/509356be-75d6-336b-ab56-8a2a63b9b39f.roa
Signing time:             Sun 12 Feb 2023 12:00:00 +0000
ROA not before:           Sun 12 Feb 2023 12:00:00 +0000
ROA not after:            Sun 12 Mar 2023 05:00:00 +0000
asID:                     13951
IP address blocks:        139.5.22.0/24 maxlen: 24
                          139.5.23.0/24 maxlen: 24
                          45.115.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ea:ac:c3:ab:ea:9b:3d:1f:d7:d6:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb 12 12:00:00 2023 GMT
            Not After : Mar 12 05:00:00 2023 GMT
        Subject: CN=1ce0278e-d788-4b06-9dc4-e0f313f63475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:88:3e:9a:ac:d8:00:0e:a2:07:e2:ea:40:
                    5d:4c:72:ab:c7:d9:f8:c5:6a:67:f6:d0:d3:41:24:
                    ce:19:30:82:d8:13:08:2e:6a:1b:63:0b:d7:73:e4:
                    49:43:47:8c:1e:39:a8:ca:aa:a0:09:20:7d:95:e7:
                    e5:7d:36:27:37:48:a0:d2:f3:28:df:85:0d:5e:ec:
                    05:11:6b:3f:d3:97:f1:67:71:4f:77:d0:93:9c:75:
                    b7:c6:10:0a:28:d4:e4:5d:dd:ee:10:65:50:db:d6:
                    bc:b7:af:4b:ad:7c:e5:97:96:d4:7b:38:c8:3b:3c:
                    55:6c:5e:d5:4c:8e:b2:77:87:0e:6c:28:91:98:a8:
                    cb:2c:15:15:ea:f4:16:1e:b7:5b:8e:33:57:ac:5d:
                    37:8b:3f:f3:d7:ed:e3:f4:b5:53:af:e7:8a:96:7d:
                    70:dc:52:bd:be:cf:57:1b:51:4b:f2:5f:78:84:8e:
                    58:1d:0c:63:51:8c:40:ce:c6:19:7a:7e:de:46:67:
                    c5:73:44:02:f1:3a:7d:16:00:6a:31:18:a5:24:77:
                    af:96:44:ad:00:a1:80:c2:7e:4d:0b:42:3e:18:2e:
                    40:e6:98:45:dd:13:ec:45:7c:62:83:9c:33:c6:ca:
                    1e:8b:2b:09:38:49:d7:f5:2e:c4:fb:a3:19:5b:f3:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:16:AD:60:EB:CB:13:2B:20:0C:AE:F6:3D:60:9D:BA:A9:E4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/509356be-75d6-336b-ab56-8a2a63b9b39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.63.0/24
                  139.5.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:71:94:78:06:86:8c:7d:fe:77:ff:b2:69:00:1b:64:6f:
         cc:5c:fc:b3:43:0d:be:90:47:76:b9:94:7a:95:d8:23:7b:60:
         d7:32:ed:59:d5:b8:a7:73:f2:84:dc:43:5e:4a:30:6e:35:35:
         50:21:f5:c6:d3:2c:fa:06:f4:bd:9f:3d:36:db:9a:e2:35:03:
         4c:85:09:d6:9e:c3:1f:fd:e6:ac:98:cd:4d:bb:30:31:e6:32:
         54:69:e7:5a:15:ba:55:42:d5:f8:e7:07:5e:e4:3e:ac:6c:ae:
         e1:05:e1:5d:db:c1:e9:a5:8a:6b:24:0a:6f:06:37:9d:69:01:
         b3:cb:88:65:2a:e0:37:56:67:35:72:58:2b:fb:73:60:7a:14:
         44:b1:d9:80:4e:56:23:56:a2:01:a0:92:4c:c9:cf:9d:3b:cb:
         c8:bb:2e:cf:d7:85:11:53:71:90:df:79:a8:47:b7:5e:12:27:
         57:7c:d3:41:01:db:df:15:9c:4a:6d:9d:76:81:a5:5b:1c:80:
         1a:01:46:51:07:43:55:aa:b1:f1:9f:a5:37:2b:2a:f4:d6:cd:
         e6:18:b8:9c:b8:bd:22:f1:82:32:9b:c2:15:86:2e:6f:b8:82:
         85:d5:c1:33:07:c5:c1:d7:df:e0:c0:e6:67:5f:5c:40:e7:9d:
         8a:0a:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org