Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/eb5678e2-ccba-3f9c-9e12-57d1ee64635e.roa
File:                     eb5678e2-ccba-3f9c-9e12-57d1ee64635e.roa (raw, json)
Hash identifier:          Olg24Uu1CcSAhsZBQeoloEBQ49CahHDI5OFKD2GBERw=
Subject key identifier:   99:4D:5F:F9:CF:1E:C2:30:7E:F0:49:A8:46:93:0C:A7:A7:D6:43:F2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285843D63E20D9F72F385544F00120
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/eb5678e2-ccba-3f9c-9e12-57d1ee64635e.roa
Signing time:             Fri 10 Nov 2023 02:00:15 +0000
ROA not before:           Fri 10 Nov 2023 02:00:15 +0000
ROA not after:            Thu 08 Feb 2024 02:00:15 +0000
asID:                     55293
IP address blocks:        103.204.128.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:3e:20:d9:f7:2f:38:55:44:f0:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 10 02:00:15 2023 GMT
            Not After : Feb  8 02:00:15 2024 GMT
        Subject: CN=1b87cb32-3684-432f-a161-c7600df080b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b0:ea:5f:cc:a3:43:b1:26:5e:34:76:fb:89:
                    76:cd:4e:88:6b:97:40:6f:0b:51:6a:02:68:3f:c2:
                    74:30:29:f1:de:ec:07:60:8b:b0:70:84:59:b3:ac:
                    34:0d:65:66:6b:42:0b:0f:7a:01:ef:41:50:de:5d:
                    c2:f4:8d:0d:ca:e4:8f:a8:59:fa:14:d9:d4:c6:32:
                    06:83:2d:b3:63:84:05:41:63:de:0b:d4:55:12:3d:
                    44:59:4f:65:e5:8e:1b:24:75:b1:47:4e:f9:15:9a:
                    73:b1:bb:c6:66:fb:57:5d:6b:7b:6c:f7:da:b4:c6:
                    c1:9f:00:cd:5b:63:c5:d8:2c:89:43:95:75:e8:51:
                    6e:dc:23:74:a1:c0:05:01:b3:4d:23:9c:92:54:b4:
                    87:ff:91:cd:b7:84:b0:db:b3:53:de:64:97:dd:09:
                    e1:ff:27:b9:7f:2a:b2:8b:df:f3:22:f5:49:e4:26:
                    c8:cc:f5:e4:26:46:a7:2e:a4:fd:df:b5:ca:50:06:
                    78:67:6c:33:cd:c1:87:c6:22:6d:77:87:fc:88:a7:
                    cb:19:4c:33:a6:f7:39:c4:c3:4a:5e:5e:f3:d9:dc:
                    94:d6:9c:18:6b:8d:ee:c2:0b:85:be:d2:27:6d:45:
                    c6:88:7e:9f:89:86:fa:a1:31:77:c8:0e:17:5e:0f:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4D:5F:F9:CF:1E:C2:30:7E:F0:49:A8:46:93:0C:A7:A7:D6:43:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/eb5678e2-ccba-3f9c-9e12-57d1ee64635e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:d9:2a:77:d5:00:ea:27:14:82:ca:86:d9:5d:78:5b:87:
         e0:e6:ef:b6:be:89:68:dd:4a:e5:5e:74:c6:5b:6f:31:d9:59:
         b8:2c:a8:7c:e3:b5:77:73:50:e8:06:cb:3a:ab:ea:be:bb:08:
         02:03:6b:31:bd:37:bb:66:50:7c:c7:63:f5:69:33:c1:dc:d1:
         72:96:6d:2b:e2:ba:b1:c1:06:05:58:a0:c4:1b:03:b4:80:a1:
         49:e8:52:86:ce:be:f7:4c:d4:7e:ce:86:af:4d:67:ed:74:5c:
         bb:87:b5:69:72:c3:a6:3d:f1:0e:34:e0:6f:02:3f:db:15:fb:
         86:35:fb:c0:3f:1e:4b:94:f8:ee:e0:b2:60:bf:f8:4a:92:39:
         06:51:98:7b:0b:b5:cb:34:1d:d7:b8:f7:60:fa:c9:1a:5e:a3:
         10:df:6d:7c:91:db:66:70:14:07:22:41:64:34:63:88:ae:1f:
         30:55:df:70:ef:0c:a9:0e:bf:e1:99:9e:44:f4:16:3a:47:85:
         f9:a6:8b:0d:e6:6e:48:1c:ed:67:4d:5f:b5:b9:27:68:67:94:
         18:1d:47:b7:df:79:dd:1e:98:5e:a6:a6:72:c2:89:87:1e:96:
         25:d5:36:b0:33:76:f2:d5:07:dd:e0:6d:ce:20:e9:af:49:07:
         29:bb:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org