Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/565545b0-787b-3363-8625-2f24c0c3c512.roa
File:                     565545b0-787b-3363-8625-2f24c0c3c512.roa (raw, json)
Hash identifier:          S18FUP8+2zT50rCrONhi5+N3GxZRq7oP6HoRx4fQfqE=
Subject key identifier:   2D:F1:B6:EF:96:86:92:6E:78:D8:81:EC:04:B9:55:08:B0:7C:4F:66
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285843D63E21736963485F63590800
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/565545b0-787b-3363-8625-2f24c0c3c512.roa
Signing time:             Fri 10 Nov 2023 02:00:15 +0000
ROA not before:           Fri 10 Nov 2023 02:00:15 +0000
ROA not after:            Thu 08 Feb 2024 02:00:15 +0000
asID:                     55293
IP address blocks:        69.48.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:3e:21:73:69:63:48:5f:63:59:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 10 02:00:15 2023 GMT
            Not After : Feb  8 02:00:15 2024 GMT
        Subject: CN=49d4275b-8ec7-411e-ae6c-4ad190342ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:2f:61:e4:72:19:e0:36:f9:27:20:16:41:
                    79:db:7e:cf:d8:d6:cd:b2:fa:96:a1:ff:4e:19:37:
                    0f:d9:e8:d3:33:ed:d4:e1:37:71:a5:07:63:e4:76:
                    fa:7f:d7:b8:4d:6e:5a:94:8f:db:3e:03:d5:b4:07:
                    7e:0c:52:6b:94:d2:e6:71:3b:72:91:a7:0a:9d:cd:
                    97:ff:fe:cc:a9:5f:fe:76:4a:75:a0:b9:b0:ae:4f:
                    22:0d:98:fc:f8:a9:e8:9f:50:03:04:5d:e8:bd:eb:
                    ab:99:01:4f:1f:ba:dc:41:dd:e3:9b:16:17:51:33:
                    db:31:ee:93:5d:82:1e:79:79:d4:2a:04:a7:eb:5f:
                    4f:e1:01:33:f0:e5:07:dd:e2:aa:db:e0:81:36:47:
                    6a:0c:22:98:da:12:67:e4:1b:78:ff:b0:5a:22:99:
                    f5:4b:3a:32:43:a0:9f:0a:38:a5:f9:a3:78:8d:fc:
                    58:2c:85:2f:56:f4:c9:2a:5f:29:a2:f8:2a:a1:02:
                    be:7d:90:8d:a9:fe:b2:2c:ad:d6:bf:f8:cf:37:bc:
                    ff:85:84:fa:43:27:68:e7:f7:77:9f:aa:24:8c:0a:
                    33:cd:0e:44:b9:ce:06:98:15:33:f3:01:05:59:fc:
                    8b:99:a4:00:d3:a1:6a:68:4e:09:80:e5:8d:2a:6b:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:B6:EF:96:86:92:6E:78:D8:81:EC:04:B9:55:08:B0:7C:4F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/565545b0-787b-3363-8625-2f24c0c3c512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:df:d6:6d:54:8d:84:88:bc:3f:8e:6b:2a:e4:1c:4f:d1:
         51:95:df:0b:ee:d1:86:e9:7e:3f:45:2a:67:74:0d:cc:4c:ef:
         69:1a:9f:87:b6:f7:55:95:0f:a6:25:be:e4:7c:31:69:37:96:
         71:4c:b2:ac:7d:a8:3a:cb:a5:cf:0b:f8:12:5f:86:60:b3:5e:
         30:5d:07:1a:a4:89:ee:bb:39:c6:94:a1:f8:6a:fd:98:01:a3:
         e5:25:96:90:65:e5:4a:f0:5c:73:24:49:3d:b2:a6:1d:c1:6c:
         8b:36:75:7f:fa:c9:be:5e:39:f3:f3:49:d5:d5:4d:09:0f:c6:
         25:c9:90:fc:ef:a9:6f:88:20:af:3e:46:a6:ea:73:f7:82:fc:
         28:6c:c5:4c:a2:c7:5d:b2:64:34:d0:dc:90:94:d7:6f:6b:29:
         1b:63:6a:41:fe:bf:6e:ee:e3:1a:02:9a:e3:2a:d7:70:88:67:
         f2:14:1c:ba:e5:ea:e1:3d:19:cb:56:a9:b2:74:28:bb:61:18:
         1f:ce:7b:06:41:6d:3a:9d:4c:99:6a:24:52:60:7b:db:dc:b0:
         f4:f6:27:58:d0:58:3f:46:34:13:d4:cb:5a:5b:56:27:99:b5:
         c0:9c:19:a3:9c:ac:08:a7:9b:47:06:7f:3a:bf:31:88:4b:7b:
         a8:fb:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org