Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/4591a72c-d843-30c0-8457-43379fee648b.roa
File:                     4591a72c-d843-30c0-8457-43379fee648b.roa (raw, json)
Hash identifier:          h403jGci5Rwjxhy57Ch/rkeIBQu2kqfhxeWmBqRCqyE=
Subject key identifier:   57:38:A4:D9:E4:11:3F:F7:25:CB:56:BB:EF:7B:AC:D3:E7:FC:BA:89
Certificate issuer:       /CN=92790d80-09a9-411b-b7e0-abbcd294be57
Certificate serial:       010D0C9F43285843422A29E77A70334875F59E80
Authority key identifier: 3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/4591a72c-d843-30c0-8457-43379fee648b.roa
Signing time:             Mon 18 Sep 2023 01:00:23 +0000
ROA not before:           Mon 18 Sep 2023 01:00:23 +0000
ROA not after:            Sun 17 Dec 2023 02:00:23 +0000
asID:                     399200
IP address blocks:        23.173.208.0/22 maxlen: 32
                          45.11.140.0/22 maxlen: 32
                          2602:fcce::/36 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:42:2a:29:e7:7a:70:33:48:75:f5:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92790d80-09a9-411b-b7e0-abbcd294be57
        Validity
            Not Before: Sep 18 01:00:23 2023 GMT
            Not After : Dec 17 02:00:23 2023 GMT
        Subject: CN=079c31f0-8a7a-4b2f-99be-c914092ff2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:b6:44:9d:cb:16:f6:69:f6:80:2e:18:aa:
                    92:2f:fb:bb:bf:dc:62:6a:5a:43:e0:0d:ab:89:ee:
                    8d:b2:a6:8d:90:87:88:c5:1a:5e:c9:23:d6:f3:30:
                    32:f1:5f:77:75:6e:fe:f1:ac:01:d7:83:d6:a8:9d:
                    ec:c5:eb:29:d9:d6:c8:ba:4b:99:fe:66:a6:c4:d0:
                    1c:e7:aa:d7:95:6b:a0:53:7c:95:51:b7:3e:25:f8:
                    e3:bb:6a:b6:ca:da:a3:20:b4:c9:6e:da:30:85:70:
                    26:05:b1:49:2b:c1:c6:f6:ae:1b:b2:37:75:6f:35:
                    5e:2a:82:be:60:33:d5:34:8c:33:38:93:07:e1:0c:
                    34:97:e9:c1:3f:07:dd:d9:3b:d7:26:c4:10:25:1e:
                    75:28:51:ac:8e:00:8b:0e:41:4f:71:21:1d:8c:c3:
                    d2:87:63:06:6b:a3:02:f7:32:70:30:fb:89:ca:47:
                    72:ef:42:e2:2a:43:c1:f1:ad:0d:11:b0:0f:69:f9:
                    24:71:29:ca:8e:86:a4:03:39:f6:a9:42:24:d9:77:
                    ff:09:57:69:57:f0:b0:5e:8f:7e:6e:fd:41:59:17:
                    79:61:75:fe:ea:e6:de:5f:5f:b8:b8:7a:14:ae:95:
                    35:2b:ef:eb:64:44:90:65:ce:66:44:2d:d6:d7:1c:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:A4:D9:E4:11:3F:F7:25:CB:56:BB:EF:7B:AC:D3:E7:FC:BA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/4591a72c-d843-30c0-8457-43379fee648b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl

            X509v3 Authority Key Identifier:
                keyid:3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.208.0/22
                  45.11.140.0/22
                IPv6:
                  2602:fcce::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:3b:fa:a7:9a:24:e1:6c:4e:a4:8a:f4:6d:1c:2d:49:fd:
         e2:4e:df:29:3d:f6:3e:53:f9:8b:e5:19:2c:a2:bb:6d:bb:e5:
         53:3c:3b:ae:45:0c:4c:57:2b:cb:43:6d:32:17:51:82:85:3a:
         f9:32:d4:87:ab:3b:e7:e2:0e:e4:da:f1:90:da:07:c8:26:e0:
         eb:37:8f:6a:08:52:5b:a2:33:8c:02:a1:8b:9a:e4:a2:93:cc:
         53:af:b9:46:0c:91:91:2b:b5:e7:fc:c2:8a:af:61:42:c8:a7:
         8f:e7:9e:b7:d3:77:7b:6e:81:86:73:ab:02:b1:da:3d:d8:a5:
         aa:8b:e3:49:5b:9c:e6:80:72:bd:ff:a1:11:26:a6:b4:ff:fe:
         b4:1e:9f:a5:78:2c:6a:c7:83:f1:29:e2:39:2a:61:13:25:62:
         07:58:f9:8d:03:1e:4d:e3:0b:91:7c:83:a0:6c:ca:50:a4:85:
         59:6a:aa:f5:c8:e6:68:00:60:53:b7:24:20:84:1b:8b:27:42:
         6e:4c:2c:39:cf:43:4b:d4:f1:f1:34:a6:0d:fd:c6:ad:68:04:
         1d:92:a2:61:19:81:32:2a:15:82:77:d3:76:d1:70:81:8e:7b:
         f1:63:7e:db:07:e5:06:08:51:22:6f:f1:b2:20:4d:59:ca:f1:
         a0:c6:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org