Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8cc4cd33-1692-35a8-b095-53149b2b08d3.roa
File:                     8cc4cd33-1692-35a8-b095-53149b2b08d3.roa (raw, json)
Hash identifier:          cRC/c1dHg0mJdVg69r3jFhPGuWcuuh4tcv4pafotl0o=
Subject key identifier:   30:C5:3F:89:2F:A6:5C:F3:85:FE:88:B1:11:84:59:1F:70:D6:ED:70
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285843D63E21FB7518BAF74AB2C900
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8cc4cd33-1692-35a8-b095-53149b2b08d3.roa
Signing time:             Fri 10 Nov 2023 02:00:15 +0000
ROA not before:           Fri 10 Nov 2023 02:00:15 +0000
ROA not after:            Thu 08 Feb 2024 02:00:15 +0000
asID:                     55293
IP address blocks:        68.66.216.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:3e:21:fb:75:18:ba:f7:4a:b2:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 10 02:00:15 2023 GMT
            Not After : Feb  8 02:00:15 2024 GMT
        Subject: CN=f975b4b2-7eaf-4ae0-aff0-937ab3ee9bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:76:4c:83:32:2f:eb:8d:5f:c0:a8:0a:b0:
                    f9:c2:fb:0a:59:f5:6d:d5:d4:56:e8:19:71:d1:ea:
                    d4:ea:01:cd:ec:a6:aa:f1:b8:65:bd:16:5b:50:d3:
                    77:26:13:cd:c4:b1:b5:04:3d:0f:84:17:f9:53:b6:
                    d0:eb:a1:17:91:cc:f9:97:0e:c3:48:44:cd:bf:0b:
                    b0:66:f7:6f:7a:a4:7d:ff:3d:a0:93:78:56:d6:09:
                    35:f5:6c:dc:66:9a:94:00:3f:44:c5:83:d1:07:a7:
                    5a:b2:23:56:0e:a6:9d:b1:98:30:0f:04:3d:4e:3c:
                    2d:60:72:11:b6:6b:d7:01:87:e2:2f:3f:46:8b:a0:
                    30:d9:95:4c:1e:cb:6b:98:ca:2c:96:af:92:b5:9f:
                    f9:fc:73:51:a2:a4:9b:cf:3a:6b:51:36:2d:52:12:
                    e7:4b:c8:7a:d2:3b:87:1b:bd:57:bc:3f:bc:4e:8f:
                    7c:31:b4:a2:04:be:b8:88:da:41:f4:9b:6c:f6:56:
                    71:cb:a7:73:6f:3b:6f:cd:31:7c:12:f9:a2:73:47:
                    92:2b:bd:7f:ae:3a:e6:af:b5:21:3f:53:00:3d:f6:
                    da:91:4e:b8:82:e9:6d:37:f1:76:1c:fa:8a:ea:1f:
                    75:cc:ec:77:14:bc:c5:5c:0e:2b:14:15:17:65:5c:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C5:3F:89:2F:A6:5C:F3:85:FE:88:B1:11:84:59:1F:70:D6:ED:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8cc4cd33-1692-35a8-b095-53149b2b08d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:28:93:ec:fb:e6:70:be:af:b9:47:54:a3:01:4e:13:80:
         a8:ac:52:ae:7d:bd:a0:6a:1e:48:9a:29:9c:5d:eb:b4:f2:31:
         04:cb:82:ef:22:3e:d5:26:30:47:f9:97:bf:a7:d8:e5:77:57:
         41:cd:74:d3:70:a2:53:26:39:f7:18:97:4e:53:5d:05:08:02:
         8e:66:86:bd:4f:c5:f5:75:a2:61:ab:b9:e5:56:10:1b:bf:de:
         94:0d:d8:06:6f:11:3b:c7:39:e1:c4:04:8f:ff:ce:df:18:0a:
         30:92:ef:f0:21:08:1c:09:76:7a:e1:4c:d3:95:02:4f:67:07:
         1a:a1:af:f8:1d:53:5a:98:3e:0a:96:3e:c7:da:e6:4e:0e:e8:
         e7:a1:07:6d:ea:47:ca:b5:fd:34:44:56:69:21:60:cd:77:59:
         9f:6b:25:b7:5c:1a:11:8b:9d:d7:5a:a1:55:60:21:42:c1:dc:
         0c:ae:c8:d8:df:42:d9:3b:86:58:11:fc:6b:bb:d4:5f:7f:90:
         a9:60:f3:40:01:32:47:66:da:9b:9e:e4:c9:d8:20:ec:36:70:
         e4:aa:b9:1a:47:58:ba:2d:71:db:86:09:d3:0d:bf:aa:e6:fe:
         9a:b5:06:a6:ae:3c:b3:f1:57:55:3a:87:47:e9:85:30:f1:f6:
         0f:18:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org