Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/4105d11c-5315-394b-a64a-6f493a94a37f.roa
File:                     4105d11c-5315-394b-a64a-6f493a94a37f.roa (raw, json)
Hash identifier:          dOsDkDqeII7ArmHIGJbavXKcPL7JMgSrTI4nXxq/sCw=
Subject key identifier:   65:8D:71:20:FE:3D:0C:DC:FD:3C:02:4E:28:5A:B2:87:F8:EF:73:DD
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F43285841E46CB7C26EF3665355A75640
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/4105d11c-5315-394b-a64a-6f493a94a37f.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 10 Aug 2023 00:53:17 +0000
asID:                     205320
IP address blocks:        107.180.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:b7:c2:6e:f3:66:53:55:a7:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug 10 00:53:17 2023 GMT
        Subject: CN=cf3230f3-f468-4770-8f6e-d2660bbff22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:27:fd:8d:b2:33:23:8b:a4:97:e2:dd:4e:
                    c4:04:c5:87:48:38:26:ac:b8:1b:76:25:59:41:98:
                    40:93:3f:61:e2:2c:f9:18:64:2a:2f:63:84:03:47:
                    aa:19:ba:a9:ee:7f:5f:50:15:19:4d:55:ba:80:a9:
                    cb:42:3c:b4:ff:a1:77:25:0b:35:d7:b1:1c:ee:58:
                    42:04:b8:ed:ee:a3:c4:e5:9d:a6:3b:ad:d8:5c:f5:
                    e4:6d:5d:0f:75:9e:00:d9:4f:0e:f1:95:aa:b0:73:
                    58:28:82:54:42:69:aa:0c:0c:81:d8:a5:8c:15:f9:
                    1b:0e:8b:1b:5d:89:2d:fb:5e:2a:26:19:75:04:01:
                    87:ad:43:47:a1:ee:a3:cd:c5:e1:e8:f7:8e:e7:51:
                    e4:71:b9:2f:85:f5:cb:07:38:a1:7a:c7:eb:6e:d6:
                    09:ba:e7:d6:68:f0:f7:69:5a:62:b9:d2:fb:7a:01:
                    91:f9:ba:c4:ee:fb:9f:5f:72:6b:dd:84:07:38:38:
                    2d:36:a3:3b:a3:45:87:8a:3a:6d:04:96:04:ad:c8:
                    62:1a:6f:33:fd:d7:b0:c7:56:9e:f5:08:3a:59:cb:
                    b6:65:c6:fa:08:21:1a:b4:a6:e3:b2:49:01:2f:58:
                    04:2b:38:5b:f9:e1:f9:3d:d8:15:76:51:4f:8b:7e:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:71:20:FE:3D:0C:DC:FD:3C:02:4E:28:5A:B2:87:F8:EF:73:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/4105d11c-5315-394b-a64a-6f493a94a37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:09:5f:b6:c0:50:93:99:b2:e6:3f:d7:19:66:3a:35:be:
         d4:79:ca:85:ea:b5:d4:f9:b6:26:ac:0f:44:eb:25:f1:d4:b5:
         56:d5:cd:82:86:db:7d:54:eb:90:f0:86:e9:f5:89:7e:94:0f:
         48:4b:60:a1:5c:15:35:6c:d2:00:05:99:45:2b:ed:bb:66:0b:
         a0:de:ca:09:31:d8:9d:77:d3:1f:d6:97:10:17:46:a5:b8:ca:
         22:b5:cc:9a:90:1e:7a:88:82:34:b4:e8:d1:0d:60:56:01:3c:
         a7:9e:29:bc:5e:41:fb:b9:e6:94:fa:62:5b:db:e9:a8:11:c2:
         1e:98:68:92:1f:61:97:f2:4f:e1:c8:e0:be:eb:f3:e7:6b:f7:
         4b:a5:0e:f6:4a:cb:52:63:07:f8:be:83:49:e2:eb:f6:9c:27:
         79:ec:2e:6f:df:4c:3e:21:1f:22:79:4c:9d:57:37:62:f8:2c:
         78:8a:97:4d:67:a3:62:70:ab:57:b7:63:cd:7c:a9:4e:01:c3:
         5f:c3:c6:db:47:e8:22:46:c4:02:c7:f1:fc:81:ae:9a:0f:0b:
         c3:d5:54:ba:6e:4a:20:87:aa:d5:7d:fb:68:5f:ca:be:52:6d:
         51:e0:e8:8c:d9:de:e9:cc:a5:a8:4d:06:62:58:d9:3c:5c:09:
         b4:ff:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:05 2024 by rpki-client on console-fra.rpki-client.org