Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/95a3fc12-e9f1-35ae-b999-bbc01f1f24f3.roa
File:                     95a3fc12-e9f1-35ae-b999-bbc01f1f24f3.roa (raw, json)
Hash identifier:          Yo9uR69bVWjelp1PkuFZ0nCO43S1TUJVjINf3Oz9lf8=
Subject key identifier:   07:D4:FE:CC:AD:8A:3D:28:06:80:44:13:A9:46:41:6B:66:4E:02:35
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583E579AA31106A0CA9FE96585A0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/95a3fc12-e9f1-35ae-b999-bbc01f1f24f3.roa
Signing time:             Thu 08 Jul 2021 16:58:24 +0000
ROA not before:           Thu 08 Jul 2021 16:58:24 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        161.69.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:57:9a:a3:11:06:a0:ca:9f:e9:65:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul  8 16:58:24 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=f3a59ebb-fd7c-4f5e-a96b-9252e18d3324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:b3:a9:d3:bf:7d:59:de:36:67:64:37:dd:
                    ee:ea:4a:a9:0f:ca:6a:39:7a:8b:8d:72:ef:8d:ad:
                    3f:77:f1:57:5e:6c:02:1b:d4:fb:ef:c4:d4:09:83:
                    a4:e5:d3:79:5d:1c:f5:39:ac:0e:44:c8:2d:1c:d3:
                    8e:55:87:0d:f2:7e:34:69:c2:a6:41:1d:aa:45:85:
                    67:b7:1e:8a:99:bf:55:e9:70:e6:7c:4f:2e:c3:0f:
                    f5:b8:aa:3c:74:0e:c5:95:29:08:8a:4c:ee:31:ff:
                    90:73:e9:83:01:45:89:cc:e0:d3:41:c1:9b:9d:a8:
                    9e:97:56:17:a8:ee:22:99:d5:0e:7f:66:2f:d7:bf:
                    10:4b:84:ff:2a:0d:bf:40:8c:94:a0:53:10:69:6c:
                    10:46:58:82:fb:2d:51:8c:9e:6f:15:ef:0a:ae:c7:
                    72:f0:e2:60:36:43:22:76:e2:37:23:d0:f5:d6:78:
                    2f:a7:66:f4:26:0c:34:b2:46:4d:c0:47:60:8c:aa:
                    6d:32:80:79:39:db:9b:0a:a9:27:63:7e:e5:8f:bb:
                    b4:16:8b:8c:8c:57:35:59:b5:a8:c5:b3:31:13:73:
                    75:a1:05:59:80:44:79:ed:78:d3:f6:9c:f4:02:04:
                    0d:a4:a8:9b:39:bf:00:e7:34:fe:d0:52:0b:08:fc:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:FE:CC:AD:8A:3D:28:06:80:44:13:A9:46:41:6B:66:4E:02:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/95a3fc12-e9f1-35ae-b999-bbc01f1f24f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:74:a5:66:54:31:ec:1f:36:e9:56:5c:67:ab:4b:2b:91:73:
         02:9d:78:43:e3:01:1a:c6:58:f6:b3:00:0b:41:05:79:66:d7:
         d3:f6:19:8f:e4:5c:b2:58:dd:a6:0b:89:f2:67:59:0b:c2:a1:
         32:42:f1:4c:01:fc:2a:56:23:10:f9:6a:e5:31:ce:07:45:6c:
         69:9a:36:bb:78:8f:f3:a0:bd:63:86:05:e4:2d:a4:6c:c8:23:
         d0:d0:1f:60:ad:a0:ff:6e:11:c3:38:a8:ed:e6:6d:3f:20:16:
         7a:cf:8b:5c:2c:ab:4e:ef:83:bf:82:6b:d2:52:08:7c:27:64:
         bc:64:09:51:1e:48:bb:50:c3:bc:ae:13:ca:fc:e0:94:dd:0e:
         35:be:af:9f:b9:10:5f:c6:8e:3b:df:a1:70:e1:17:2e:d1:75:
         ea:c4:3a:66:79:ca:ef:13:10:33:d3:2c:e0:02:11:bb:e2:a6:
         84:34:13:03:df:a2:a6:f4:65:78:0c:bd:c9:ee:a7:bd:a8:b5:
         bb:91:04:53:d6:97:5e:34:0c:35:13:83:56:f0:75:07:ad:34:
         7a:c9:7e:27:48:68:04:6c:ff:0b:5f:8a:0b:f2:90:61:c2:69:
         2f:ed:ab:b2:b4:f2:36:ed:fd:5e:ce:38:bd:45:f9:ff:49:88:
         ff:d4:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org