Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/d4d37b14-96ad-3ff4-9a1c-9e6a9bc1dca2.roa
File:                     d4d37b14-96ad-3ff4-9a1c-9e6a9bc1dca2.roa (raw, json)
Hash identifier:          /aq9BITrZJVwqL8E6MPi3KI9J1PL152UBtfce0XztH0=
Subject key identifier:   7C:04:6F:57:16:AE:A9:F9:AF:B1:92:34:7A:F9:37:98:69:24:06:B0
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328583B650E7F4B5370D240D6B261C0
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/d4d37b14-96ad-3ff4-9a1c-9e6a9bc1dca2.roa
Signing time:             Wed 21 Jul 2021 04:00:00 +0000
ROA not before:           Wed 21 Jul 2021 04:00:00 +0000
ROA not after:            Sat 30 Dec 2023 05:00:00 +0000
asID:                     1239
IP address blocks:        45.88.216.0/22 maxlen: 24
                          45.89.48.0/22 maxlen: 24
                          45.92.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:65:0e:7f:4b:53:70:d2:40:d6:b2:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Jul 21 04:00:00 2021 GMT
            Not After : Dec 30 05:00:00 2023 GMT
        Subject: CN=e77e0564-2927-4fbf-9bfd-88936693416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:fb:7e:15:0f:ce:14:03:36:57:21:14:21:
                    66:2e:3c:b8:66:1d:2a:bc:fa:8c:43:7c:39:86:d3:
                    56:b1:b1:a7:54:39:b3:38:41:29:0e:eb:40:fd:0d:
                    e7:ec:1d:b9:98:48:df:7d:e8:47:ef:0b:a0:47:d7:
                    80:61:e5:0b:34:9b:2f:35:5d:16:ec:d1:8f:b6:56:
                    d7:84:bd:4c:4c:b3:de:a0:c8:67:27:cb:16:d7:e6:
                    ad:d2:5b:40:25:0c:c3:7b:9f:05:cf:52:b1:47:3a:
                    08:0f:8e:3a:ac:ac:4b:a7:29:d7:d9:79:d7:3d:9b:
                    ba:92:e4:6e:47:f0:88:64:84:97:6b:d3:2d:42:bb:
                    de:20:9d:50:e6:20:9c:b9:b3:ff:ab:0f:cf:3d:a0:
                    b2:7e:f0:88:4c:86:04:89:49:43:6c:40:08:aa:39:
                    bf:1d:95:29:a7:6e:a8:05:dd:c9:85:f2:04:63:1b:
                    b5:33:36:45:10:bc:8d:0a:cf:d4:e1:d1:3f:78:b9:
                    12:76:00:93:bf:03:89:eb:89:5e:73:c6:20:c5:cf:
                    91:6f:d7:a4:f9:e0:7e:c8:8f:39:3c:29:e3:66:5a:
                    f2:82:f3:be:a6:51:59:2d:37:dd:e8:d3:80:8a:03:
                    dc:16:e0:41:4d:20:9d:32:b8:a6:9c:fa:4e:ff:66:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:6F:57:16:AE:A9:F9:AF:B1:92:34:7A:F9:37:98:69:24:06:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/d4d37b14-96ad-3ff4-9a1c-9e6a9bc1dca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.216.0/22
                  45.89.48.0/22
                  45.92.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a7:64:9e:db:21:1d:f5:33:0b:6c:f4:23:75:28:3f:c5:27:
         9f:50:e5:54:25:71:21:d7:14:bc:d5:fb:29:28:59:09:be:6c:
         30:9a:a3:37:59:3b:9a:8c:84:fd:3a:6d:31:de:e8:d3:a9:9e:
         8d:ac:22:2e:c9:a1:f1:d4:da:8d:50:34:43:fe:94:5f:73:4e:
         70:27:09:14:ef:a7:e1:ff:cc:5d:4d:55:ca:52:c7:39:01:6c:
         a8:7f:69:d6:eb:95:45:eb:01:87:e1:31:d4:5d:e7:d8:2e:59:
         ba:57:41:8b:fc:82:c5:14:18:cc:03:f7:fd:67:80:c7:a4:7a:
         11:95:81:e2:a9:8c:c5:4a:cb:3d:80:59:9b:17:6d:1f:1a:90:
         ae:50:30:60:d9:ba:86:1e:15:26:d4:57:0e:ac:03:14:6c:66:
         31:d0:c3:bc:ab:c4:18:d8:75:0e:ca:ea:f4:4d:b0:20:ad:aa:
         e5:5d:b1:fc:78:e0:06:64:65:16:b2:ac:fd:a0:03:60:4a:25:
         5c:cf:e0:f7:05:b8:6a:69:49:11:0d:cf:b3:d9:57:25:c6:54:
         33:ca:f2:b9:85:55:9f:d4:c1:3e:64:fa:dd:fb:b5:4d:45:5c:
         5c:97:c6:60:ad:3f:26:71:a9:70:ae:89:f6:55:f5:d2:f3:1e:
         ff:18:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org