Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/84700e09-5598-3105-95c3-1cee84dca67c.roa
File:                     84700e09-5598-3105-95c3-1cee84dca67c.roa (raw, json)
Hash identifier:          +qpkkhlXlW0QGww/6Yp5YU78Z00Z3dNQzJzJ+8ozisU=
Subject key identifier:   87:B7:85:71:CE:8C:64:61:CC:83:FB:BE:93:3F:1C:01:7D:A7:5E:2C
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285843BE1FB039D08F8AACFEB43CC0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/84700e09-5598-3105-95c3-1cee84dca67c.roa
Signing time:             Wed 01 Nov 2023 10:39:38 +0000
ROA not before:           Wed 01 Nov 2023 10:39:38 +0000
ROA not after:            Tue 30 Jan 2024 11:39:38 +0000
asID:                     149208
IP address blocks:        103.71.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:be:1f:b0:39:d0:8f:8a:ac:fe:b4:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov  1 10:39:38 2023 GMT
            Not After : Jan 30 11:39:38 2024 GMT
        Subject: CN=1cb4241e-0c11-4063-a0c6-01c43392ed22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:8b:07:1c:c0:da:1f:26:01:36:24:f5:15:
                    79:95:df:2d:3b:d7:a7:48:9a:f6:44:bf:94:4a:4e:
                    c6:d3:93:d4:80:ee:79:0f:4e:92:e8:74:a0:e8:25:
                    17:31:ef:14:63:39:4f:4e:fc:ee:88:cf:ea:52:8a:
                    2d:cc:43:16:a3:eb:75:c3:2f:e0:78:78:d7:1a:14:
                    58:b2:91:06:15:35:bc:4a:25:01:e9:ae:fc:c1:90:
                    c0:f9:b9:a3:1b:22:e9:88:43:1f:9c:56:7b:57:81:
                    a3:66:49:4b:e8:35:3d:66:af:97:ad:71:f4:e4:22:
                    37:73:87:24:74:1d:8a:79:2f:0e:05:78:bd:80:2c:
                    1a:34:05:99:94:92:c1:c9:27:15:bc:99:df:4d:5a:
                    4d:d6:44:3c:ca:85:d8:26:40:9d:5f:ee:69:9b:25:
                    85:04:3e:6f:0c:23:0f:98:38:5a:e3:12:13:e0:94:
                    50:42:e7:8d:af:a6:84:db:58:3a:e5:3b:a9:c4:8b:
                    53:fe:a3:20:57:3a:e8:4d:61:98:02:06:75:b1:f8:
                    e7:d9:84:dc:33:e6:48:53:d5:97:f6:1b:13:6e:2e:
                    e9:6f:9e:32:18:9d:78:8c:db:28:36:e0:ef:b6:35:
                    91:a2:56:14:5b:1d:28:2e:1d:18:ea:28:61:7d:46:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B7:85:71:CE:8C:64:61:CC:83:FB:BE:93:3F:1C:01:7D:A7:5E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/84700e09-5598-3105-95c3-1cee84dca67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:96:c1:9f:be:db:79:1c:11:37:5c:4f:28:10:94:f5:53:c3:
         4b:5d:5d:24:f7:43:9d:55:4d:a7:0d:78:d6:37:41:a3:68:e6:
         e0:35:95:a0:f9:5f:81:a7:8d:be:c0:53:28:91:c3:b9:52:27:
         27:05:46:a3:98:d2:ec:6a:d6:62:35:ea:07:70:30:30:b8:b0:
         42:ac:6c:6a:ff:76:24:6d:b3:f9:94:c4:e4:a1:01:5e:c0:9c:
         0a:9a:a4:98:42:76:71:6f:3b:c8:7b:e0:8b:ee:0e:3e:d0:da:
         ff:42:7f:07:ee:f3:51:df:9e:6f:31:b2:96:0d:85:88:e3:6f:
         5b:ee:2a:8e:41:d4:4d:81:4b:24:99:ee:5c:f6:28:f6:60:12:
         d2:bf:99:3a:98:e3:03:27:34:e2:96:b8:f7:f7:15:45:21:03:
         cd:9d:49:7b:f1:48:04:37:13:63:f3:c9:5e:4f:55:d5:9e:d1:
         4b:73:d1:14:ff:23:ae:98:4e:10:cf:d4:a0:0d:7e:df:a0:72:
         07:41:e5:0f:08:86:d2:0c:bc:6d:40:1b:61:5f:a0:a3:7b:f8:
         c5:23:a3:8b:c5:22:a2:5d:7e:5f:5b:2d:19:77:63:a0:aa:c6:
         46:f4:c9:c5:ef:81:b3:97:71:02:f8:83:2b:9a:3b:9f:96:76:
         96:4c:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:03 2024 by rpki-client on console-fra.rpki-client.org