Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4091d7f0-822d-317e-aab4-88da5fc4e15c.roa
File:                     4091d7f0-822d-317e-aab4-88da5fc4e15c.roa (raw, json)
Hash identifier:          zoSW2ZpM+dy7iOJ7CcKnr/G6GTJ8V/76TivmqE5zrzc=
Subject key identifier:   4A:43:7D:10:E2:BE:C9:28:1C:47:BC:1D:41:8C:2B:1C:97:0A:02:41
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583BE00DA9BD9A12340C43511910
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4091d7f0-822d-317e-aab4-88da5fc4e15c.roa
Signing time:             Thu 07 Jan 2021 05:00:00 +0000
ROA not before:           Thu 07 Jan 2021 05:00:00 +0000
ROA not after:            Mon 12 Feb 2024 05:00:00 +0000
asID:                     61317
IP address blocks:        172.111.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:e0:0d:a9:bd:9a:12:34:0c:43:51:19:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2024 GMT
        Subject: CN=38217c1c-0290-4f11-a05f-a1f8477742cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:22:61:bc:63:33:4d:cd:1b:55:a1:99:64:
                    66:1f:8d:23:f3:1c:34:7f:4b:70:ff:15:97:09:8b:
                    15:a8:9a:3e:c7:0f:92:f2:cc:62:aa:e0:4f:4f:a4:
                    f0:e3:0b:63:2b:bb:d6:a2:10:4c:1c:3f:74:e5:a7:
                    93:c9:8b:5f:3b:ae:00:79:de:91:08:d1:95:1a:87:
                    76:e5:46:f6:9b:f5:c2:b0:51:ab:48:b6:5e:a3:d6:
                    56:a6:52:c4:c3:7d:73:0e:41:15:ad:68:4a:8d:8f:
                    5a:cb:34:98:d4:10:1d:ab:5f:cc:28:8f:ce:ea:86:
                    07:4a:88:87:51:14:a9:ec:97:c1:2d:b0:90:44:b5:
                    45:f4:d2:08:27:27:38:b5:e4:24:7d:55:25:0f:14:
                    be:31:66:d6:ae:fa:1e:5e:ab:34:16:9c:9b:0b:15:
                    74:e5:d0:2c:04:fc:0a:de:38:10:69:05:c4:ae:d6:
                    d7:90:3a:d8:3a:dc:15:8e:76:33:4c:41:28:8a:d8:
                    6f:11:03:ae:e3:2d:b9:1f:a3:5e:13:15:e4:26:6d:
                    8d:e0:b9:ac:3e:56:8a:f3:bc:cb:80:a8:ac:12:b3:
                    b1:99:72:1a:c5:31:f9:a3:cf:45:df:1d:7a:72:e5:
                    37:91:cb:a5:1d:1e:4b:19:e2:51:44:23:ae:e0:fc:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:7D:10:E2:BE:C9:28:1C:47:BC:1D:41:8C:2B:1C:97:0A:02:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4091d7f0-822d-317e-aab4-88da5fc4e15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:63:cf:20:30:0e:84:3e:6f:bf:75:1d:73:56:b8:b2:b5:4f:
         a8:f3:e5:a8:94:6a:47:90:bf:b8:db:b5:1f:04:b0:81:07:48:
         ec:ae:3c:af:5d:46:c6:35:7e:fc:db:3c:1a:e2:d6:68:80:d4:
         af:ce:7d:47:9f:ad:72:b2:db:07:27:0a:0e:6b:9d:79:d3:7d:
         53:e4:fd:4a:68:6a:32:39:d6:14:14:fd:ee:3c:d4:89:43:c2:
         46:77:72:97:10:09:44:11:da:ef:f0:ea:c3:e2:89:bb:98:71:
         58:0c:c2:2f:57:62:28:b2:b9:ad:59:85:7f:2d:e7:e4:a7:e8:
         11:ca:8a:e7:90:aa:15:e3:7b:a9:b8:a7:a0:fc:18:81:25:d9:
         b8:a0:b9:e9:7b:25:1e:b8:44:94:92:3b:ab:23:e4:04:a2:d4:
         10:b9:e3:76:65:19:4a:a3:b8:b9:cf:a2:9a:e7:f1:a5:60:42:
         f3:ca:1b:6b:bd:e2:b4:25:4e:9e:da:0a:f2:cf:77:db:dd:ed:
         0d:38:31:8d:be:5b:2b:3b:c5:3b:1e:23:0c:1e:82:49:d7:0c:
         69:bb:16:fe:06:3d:37:89:1a:7d:a4:10:76:88:35:1e:c3:b0:
         d0:a8:11:25:bc:83:30:8c:42:9a:79:8e:08:c5:ea:37:5e:1b:
         ff:8d:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:28 2024 by rpki-client on console-ams.rpki-client.org