Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/54e91d29-ee7e-3980-8372-e10b52a25aa8.roa
File:                     54e91d29-ee7e-3980-8372-e10b52a25aa8.roa (raw, json)
Hash identifier:          HtceMPHs7COWBE6b1hRHdxk/oouNWokCT6eVNQMculs=
Subject key identifier:   79:6D:F1:05:E9:32:F2:9C:76:5C:45:35:DA:A8:75:BB:8A:3D:C8:58
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285842FFC2DB95B6CEE85B22DEEEC0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/54e91d29-ee7e-3980-8372-e10b52a25aa8.roa
Signing time:             Fri 25 Aug 2023 06:09:00 +0000
ROA not before:           Fri 25 Aug 2023 06:09:00 +0000
ROA not after:            Thu 23 Nov 2023 07:09:00 +0000
asID:                     149197
IP address blocks:        103.216.0.0/24 maxlen: 24
                          103.216.2.0/24 maxlen: 24
                          103.251.25.0/24 maxlen: 24
                          139.5.21.0/24 maxlen: 24
                          139.5.20.0/24 maxlen: 24
                          103.207.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ff:c2:db:95:b6:ce:e8:5b:22:de:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Aug 25 06:09:00 2023 GMT
            Not After : Nov 23 07:09:00 2023 GMT
        Subject: CN=08f6ec5f-95a2-4959-868c-2eca09e84372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:c2:9b:2c:cf:75:be:d9:13:92:57:9a:ef:
                    60:c8:c0:2c:b4:58:ca:57:a3:6f:61:55:9b:37:ab:
                    54:14:eb:70:dc:59:5c:60:5a:a9:cc:c5:9b:20:5e:
                    69:f3:32:d8:47:81:8f:1e:28:19:56:2a:54:2e:d5:
                    99:69:12:97:94:f5:88:a8:12:02:5e:0d:96:5d:c6:
                    04:3a:76:bd:99:6d:5d:79:9d:cd:32:20:80:4f:c2:
                    db:ca:b9:8d:77:2d:c5:d8:c1:04:55:81:ac:f6:3d:
                    ae:a0:e7:07:36:aa:73:0f:af:04:8b:e7:0a:45:4c:
                    02:17:ae:ce:8f:b5:7c:af:05:85:e6:99:d3:22:69:
                    78:9b:d7:9d:da:c1:a0:d2:86:5d:d5:2b:19:76:1d:
                    25:5e:a9:0c:06:14:9e:7f:d9:b5:c5:04:b9:fa:18:
                    52:a1:c3:36:81:35:c8:37:05:d6:b5:72:cf:da:de:
                    9a:c2:e8:44:5f:f3:8b:ae:ef:99:dc:42:9a:e5:8b:
                    bd:75:81:68:bc:2d:01:10:ef:59:c2:04:76:58:e3:
                    ed:c6:dc:58:3e:6d:9e:8f:90:dc:e9:b8:99:53:7d:
                    e9:41:da:3d:d1:d2:ac:e9:9d:9f:55:41:84:2e:a0:
                    2d:47:6f:cf:9b:5e:89:34:f1:07:ae:13:d2:ba:c3:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:F1:05:E9:32:F2:9C:76:5C:45:35:DA:A8:75:BB:8A:3D:C8:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/54e91d29-ee7e-3980-8372-e10b52a25aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.45.0/24
                  103.216.0.0/24
                  103.216.2.0/24
                  103.251.25.0/24
                  139.5.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e5:08:62:7f:50:cc:13:94:61:eb:73:f0:0a:a8:9d:45:e7:
         43:2c:47:f1:a1:69:ae:86:d9:c5:73:8b:e7:fd:ce:81:80:5e:
         3c:0c:e1:b5:a6:13:a9:0d:49:be:8f:d1:16:8a:34:9f:e6:31:
         75:ec:42:c4:cf:85:4d:31:a9:3e:ee:ec:90:c1:ef:7c:7f:63:
         94:da:0d:38:2a:5a:b2:28:3d:9f:b3:c7:c4:4f:74:2a:e4:34:
         67:f9:86:b3:95:b9:86:05:50:2d:59:5f:16:5e:a9:4f:17:ff:
         ce:9d:06:55:b6:f7:ca:73:93:ad:fe:7f:55:f5:07:48:6f:a0:
         00:6d:18:37:08:cb:fd:6a:15:d7:4c:d9:99:58:2c:14:c3:a4:
         7f:d0:48:b8:a8:ec:47:08:4e:ea:ca:8d:3f:95:48:49:8a:96:
         73:91:27:54:6f:0d:04:2b:b8:1f:3a:f2:b3:08:bd:17:32:2e:
         ae:6f:e4:56:39:f8:17:38:7e:8d:9d:da:f2:77:a2:14:c0:1f:
         5a:ba:e0:cd:b5:fc:32:bc:a6:fb:ee:a1:57:de:a3:32:0b:08:
         2e:50:9f:80:d4:92:26:3a:4e:8a:33:33:15:2f:99:93:76:30:
         03:4a:2e:82:2f:a4:fc:8c:41:24:93:4b:e1:d7:c4:49:c2:b7:
         02:21:86:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:03 2024 by rpki-client on console-fra.rpki-client.org