Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/f94cb9f9-0682-3dca-816c-16975d27cde9.roa
File:                     f94cb9f9-0682-3dca-816c-16975d27cde9.roa (raw, json)
Hash identifier:          hVGgePYnG0lS6SAYNUeSL+gzb+qlveUjlODfZUcyc9M=
Subject key identifier:   8A:D3:03:B5:18:E2:8D:01:9D:47:CE:6F:57:9B:C4:F9:0D:A1:DA:2E
Certificate issuer:       /CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
Certificate serial:       010D0C9F43285844C7BA66169E6705D2245F3980
Authority key identifier: 32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/f94cb9f9-0682-3dca-816c-16975d27cde9.roa
Signing time:             Sun 04 Feb 2024 14:00:31 +0000
ROA not before:           Sun 04 Feb 2024 14:00:31 +0000
ROA not after:            Sat 04 May 2024 13:00:31 +0000
asID:                     19437
IP address blocks:        66.205.251.0/24 maxlen: 24
                          66.205.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c7:ba:66:16:9e:67:05:d2:24:5f:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
        Validity
            Not Before: Feb  4 14:00:31 2024 GMT
            Not After : May  4 13:00:31 2024 GMT
        Subject: CN=9fc38366-d182-4b63-8702-7f9701e34de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:4c:a1:c8:d6:ef:ff:24:56:7f:31:19:d6:
                    1b:0e:43:0d:5e:25:63:39:30:a9:2a:c1:5a:7f:fa:
                    e7:f2:dd:55:9e:97:50:81:d1:ac:fd:34:9c:44:71:
                    cf:96:a7:92:74:75:d1:18:f1:7e:e9:97:d5:ca:ef:
                    06:75:60:02:6e:1f:63:b3:fa:3a:90:ef:3c:54:47:
                    2d:e9:87:18:6f:00:82:ae:51:33:2c:54:26:77:91:
                    3f:d4:59:5c:99:e1:b0:a7:ac:7a:8f:d5:4c:22:f5:
                    8d:8d:cb:44:6c:ee:39:14:4b:b7:7e:ba:fb:7b:65:
                    d5:50:92:d3:13:ae:90:96:e2:43:b0:d2:1f:67:b3:
                    9c:72:a3:23:bd:36:09:ee:73:d6:8a:98:15:d2:2d:
                    b6:92:15:be:2b:36:be:e6:5a:86:44:1a:1b:72:8c:
                    48:e0:d6:96:69:2e:c8:5c:95:03:d1:25:08:81:1f:
                    74:1e:e1:b6:d6:14:04:07:7b:1e:59:de:11:4e:34:
                    0d:43:a4:b0:97:c4:d8:f0:1c:13:24:9f:74:22:18:
                    8a:de:d0:47:75:ed:24:c4:81:a0:c7:59:e7:25:fd:
                    49:d0:57:ea:e3:6b:70:d1:99:ad:94:f6:57:cd:9f:
                    a7:66:6c:0b:15:ed:86:c5:70:6f:24:7c:45:86:91:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D3:03:B5:18:E2:8D:01:9D:47:CE:6F:57:9B:C4:F9:0D:A1:DA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/f94cb9f9-0682-3dca-816c-16975d27cde9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.crl

            X509v3 Authority Key Identifier:
                keyid:32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:96:69:49:5b:64:a5:8d:03:c6:f5:9d:73:f6:12:0c:61:65:
         e3:c5:a5:26:7d:b7:36:47:33:cd:aa:c3:e3:e5:ed:53:44:e4:
         12:07:fe:a7:57:d1:53:26:4c:ed:12:df:40:8f:43:b8:cc:df:
         dc:db:9b:65:3a:7b:f8:4d:8a:1c:f8:f4:1a:63:30:ca:26:2f:
         df:92:4f:d1:8b:b0:6e:cb:78:38:15:53:a3:be:8a:c8:f9:1d:
         b8:6c:68:bd:ef:58:67:e9:48:06:44:96:75:2e:cc:d4:38:39:
         a2:7d:0c:cb:9c:35:c3:5b:24:0c:05:79:2f:29:95:da:35:0d:
         13:94:94:97:e1:f9:9c:02:e7:5e:4d:61:3d:83:31:03:e9:14:
         80:16:86:8e:4a:1f:e7:ef:e7:1b:1b:be:11:c4:89:e3:26:55:
         1d:1f:a1:88:d4:80:f3:05:a6:65:55:87:32:42:43:e6:a4:b3:
         56:15:8c:db:a9:a8:0c:e3:a3:6d:2e:65:56:dd:3f:68:0f:5a:
         c1:2c:09:af:ec:c2:fc:48:a7:f4:4d:b2:9c:e1:62:e0:9b:3c:
         52:32:de:b9:fa:b3:ce:16:a8:4d:1f:e4:79:52:0f:ad:dc:57:
         d6:d7:59:e3:ed:cf:7e:ab:7d:b0:d4:dd:31:50:2b:0d:11:88:
         bd:d5:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org