Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4843cfbe-1116-3ffc-82f1-f38bd7c31ec1.roa
File:                     4843cfbe-1116-3ffc-82f1-f38bd7c31ec1.roa (raw, json)
Hash identifier:          DrvnbmZxrRgtmrJPUoq3B9Aepsa20vcBfOfW8I1DCQg=
Subject key identifier:   89:1B:04:66:2E:26:CC:74:BB:BA:BA:F6:4B:9E:5C:23:3E:E3:C5:03
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858420C482896D88AE606DCCD5680
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4843cfbe-1116-3ffc-82f1-f38bd7c31ec1.roa
Signing time:             Tue 30 May 2023 01:00:18 +0000
ROA not before:           Tue 30 May 2023 01:00:18 +0000
ROA not after:            Mon 28 Aug 2023 01:00:18 +0000
asID:                     61317
IP address blocks:        205.178.140.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0c:48:28:96:d8:8a:e6:06:dc:cd:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May 30 01:00:18 2023 GMT
            Not After : Aug 28 01:00:18 2023 GMT
        Subject: CN=cd417fc1-e4f1-469b-9815-cd8bc7101ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:73:e2:f2:d3:b6:c4:08:8a:7f:31:d6:50:
                    a8:e7:73:12:87:68:5a:ee:f2:a4:81:e9:a9:0e:a1:
                    df:c3:f3:34:87:e8:61:f8:07:29:0d:93:d1:1c:25:
                    c3:8c:50:ff:e9:85:ba:79:3b:b9:26:c2:9d:27:59:
                    e2:60:47:71:ac:2b:86:11:49:4e:ce:d6:0c:24:d9:
                    87:79:80:3b:df:15:d6:94:04:d0:c0:df:f7:29:96:
                    58:da:c8:a6:89:7d:38:62:75:e7:47:34:17:b1:84:
                    ed:3c:4f:85:9d:3d:38:35:68:d4:1a:44:5e:11:d5:
                    1c:b9:9f:35:dc:e1:52:fd:36:fa:b4:6a:9f:83:60:
                    0a:b9:b1:e1:02:99:28:2c:c3:80:a4:d5:da:73:5a:
                    8d:d8:20:12:ef:23:95:a3:8b:50:40:1f:09:c3:a2:
                    93:d9:cb:8f:32:0b:ed:23:c8:7d:1a:1b:be:53:1c:
                    d4:3a:a5:59:26:df:5e:e9:cf:6a:6a:57:cd:3d:03:
                    de:41:d6:35:f6:13:09:61:03:1b:c5:05:00:72:f8:
                    1c:5c:c6:1b:ca:f3:83:25:e3:48:d8:8a:96:ac:e1:
                    ed:20:f0:10:3e:e5:ac:50:8f:63:ee:21:d5:0d:e2:
                    22:6e:0a:1c:c2:fb:33:14:68:a3:99:5e:76:af:d3:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:04:66:2E:26:CC:74:BB:BA:BA:F6:4B:9E:5C:23:3E:E3:C5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4843cfbe-1116-3ffc-82f1-f38bd7c31ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:dc:d7:29:b3:fa:9d:59:b4:95:7f:24:65:38:3f:2b:3a:
         35:eb:65:ef:d1:7e:af:ef:2d:be:0b:47:fa:b3:04:50:18:60:
         f6:a2:48:36:c6:9f:d7:30:72:69:c5:85:2e:6c:16:fd:8f:b0:
         1a:50:32:2e:86:ff:c2:63:ec:9e:10:55:c7:4a:6f:31:6e:60:
         db:96:11:d8:e3:d4:96:22:af:55:15:e9:77:d1:94:04:30:0d:
         6d:e7:54:27:d6:41:8a:1c:28:bc:0f:b7:40:c9:f8:3c:54:dd:
         13:ca:e0:29:16:89:46:ce:91:12:3d:93:2c:1c:5f:09:09:aa:
         3b:6e:bc:ab:c6:88:31:29:b4:b9:bc:c7:d4:ff:f0:8d:f5:c6:
         22:fc:3a:26:c2:fb:5a:30:75:26:47:f9:b7:1a:30:d8:f4:b6:
         e2:58:37:31:3c:8c:35:51:c7:c5:62:53:3d:8e:6e:e4:49:c7:
         20:21:2e:2a:34:83:52:9d:bf:8d:4a:87:30:77:70:69:5f:cf:
         f3:81:7a:57:a9:b0:33:52:40:31:8b:b4:4d:70:b8:9f:01:1d:
         09:1d:0c:d9:cc:c1:7e:51:79:ca:f6:b8:cf:71:9b:4e:f5:4c:
         f5:a3:4f:a0:2c:49:5b:90:ce:56:d0:2d:e7:2f:94:1a:b7:fc:
         2a:91:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:24 2024 by rpki-client on console-ams.rpki-client.org