Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/c546bd5c-8e29-3d36-9b4f-fccc2bd034bf.roa
File:                     c546bd5c-8e29-3d36-9b4f-fccc2bd034bf.roa (raw, json)
Hash identifier:          rLVLK5aNz7Gxmb45Xl9OA9qtV7OcfFFFKc2f6bydEWo=
Subject key identifier:   69:D0:D8:17:B1:08:E0:16:B6:7F:8D:0C:AC:F2:13:F3:14:10:58:58
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328583CE2F19749B03E825251D22B28
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/c546bd5c-8e29-3d36-9b4f-fccc2bd034bf.roa
Signing time:             Mon 15 Mar 2021 04:00:00 +0000
ROA not before:           Mon 15 Mar 2021 04:00:00 +0000
ROA not after:            Wed 15 May 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        207.170.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e2:f1:97:49:b0:3e:82:52:51:d2:2b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 15 04:00:00 2021 GMT
            Not After : May 15 04:00:00 2024 GMT
        Subject: CN=7885875d-9a25-4a67-bf80-132aeda9c5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:95:b5:21:34:0c:08:46:c0:16:81:2b:4e:
                    80:ae:12:91:32:bf:86:94:89:2a:3d:3d:de:e0:5e:
                    8a:07:ff:57:53:03:9e:de:1f:4a:e0:74:18:f3:d4:
                    68:84:b3:1d:16:e8:b5:05:8e:d0:5b:72:d0:92:fc:
                    36:d1:f5:8f:65:b2:25:df:4e:bc:7c:34:9d:b9:be:
                    56:c9:05:b9:22:f9:07:8c:e4:12:42:cd:d8:b3:d2:
                    58:a2:9d:ac:1d:12:96:f5:a0:02:02:f4:4e:fe:47:
                    b2:2f:f8:6e:a0:d5:d0:33:86:e7:2b:89:06:1e:c3:
                    af:9b:be:e3:d8:c2:0e:ab:9b:15:e9:be:31:d6:54:
                    e6:73:5f:93:d8:0a:60:78:39:d8:d4:44:f1:08:43:
                    a5:55:c7:55:cb:5a:8e:8c:e6:f4:be:70:f9:ff:70:
                    b8:e5:b6:93:13:ec:b5:ea:9b:b9:2b:f9:7e:0b:5e:
                    e2:3a:b9:eb:5f:79:bb:20:22:49:cf:4f:06:81:27:
                    7d:a5:01:fc:8a:83:ba:cd:4b:52:6d:aa:89:d9:1c:
                    8c:e4:50:4d:6f:cf:ab:7c:1f:28:23:34:bc:b1:c1:
                    7e:f4:5c:96:c7:f7:f8:cb:8e:27:b8:5f:aa:ed:e3:
                    01:77:d3:e0:6a:06:ad:d1:f8:64:81:0f:26:a3:c4:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:D8:17:B1:08:E0:16:B6:7F:8D:0C:AC:F2:13:F3:14:10:58:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/c546bd5c-8e29-3d36-9b4f-fccc2bd034bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:f3:d2:25:a6:b6:68:d8:a8:54:86:4d:ab:4b:7b:ac:0c:
         3f:8d:98:3e:08:64:e9:89:fd:20:b5:e5:62:ee:be:91:b6:1e:
         a2:47:27:97:a2:37:1e:6f:ad:f2:1c:41:9b:8c:d7:a4:fb:c2:
         ae:5d:ac:40:7f:e3:a5:77:2a:fa:aa:8f:e4:97:bf:66:a3:59:
         96:39:6f:a3:73:e2:9a:49:72:dc:45:7d:ff:75:43:06:74:4e:
         ee:11:b0:f0:6e:c6:50:48:07:2a:0c:7d:e9:42:51:90:8c:e8:
         7b:c1:5d:9a:9c:f0:6c:34:1c:dc:8a:01:c6:e0:47:01:9c:da:
         88:0c:ca:d8:60:e1:d8:8e:0d:e3:c0:20:11:9d:36:e8:50:c2:
         f0:19:3c:dd:a9:77:53:6a:73:37:3a:05:3e:4f:da:4f:fc:ef:
         e0:4d:2a:e7:d4:59:5b:c0:b1:76:f6:30:a0:d8:08:f4:87:ea:
         4c:4b:5c:22:62:65:b9:04:18:45:45:42:e7:46:eb:58:b9:f7:
         96:89:11:ac:0b:67:ef:c6:d3:bb:23:2e:81:d6:87:16:15:73:
         2b:aa:f1:bd:95:98:f6:84:49:b8:08:c5:d0:10:1c:74:e8:35:
         8d:06:49:2f:a8:3b:c0:28:1e:c3:cf:11:37:54:c9:13:fb:b9:
         69:63:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org