Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1620a067-0eb7-3e9f-9087-45bc067490af.roa
File:                     1620a067-0eb7-3e9f-9087-45bc067490af.roa (raw, json)
Hash identifier:          kMo0GRxEn1E7AS8zI0hjQwcZ80RVGU3+Ez54s8tNGz8=
Subject key identifier:   4E:21:63:A0:C8:57:A2:3D:6E:1C:18:C1:9B:2C:A8:12:58:04:4A:62
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285842C091132D81987D9DD90DB700
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1620a067-0eb7-3e9f-9087-45bc067490af.roa
Signing time:             Wed 02 Aug 2023 14:52:46 +0000
ROA not before:           Wed 02 Aug 2023 14:52:46 +0000
ROA not after:            Tue 31 Oct 2023 14:52:46 +0000
asID:                     174
IP address blocks:        141.140.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c0:91:13:2d:81:98:7d:9d:d9:0d:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug  2 14:52:46 2023 GMT
            Not After : Oct 31 14:52:46 2023 GMT
        Subject: CN=da223cb3-21fd-418a-bee8-e49694b8686a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:6c:8f:19:3b:e8:13:b2:72:88:49:da:7a:
                    4f:c5:21:21:90:0f:a2:c3:1d:09:32:82:ec:a7:59:
                    5e:55:05:85:51:b3:d8:82:f2:57:cd:b1:96:ca:34:
                    1c:0b:d8:c2:6b:0b:7c:c6:ee:4a:4b:e7:2a:89:f3:
                    a5:1c:35:e8:c0:b3:d9:45:1e:02:c9:93:c0:30:35:
                    2e:fa:0e:ba:0f:08:4c:74:70:09:8d:c1:31:01:5e:
                    60:ba:15:a0:34:40:52:97:67:08:a3:29:64:d7:c4:
                    f1:e5:66:b7:7e:e4:63:b6:14:54:67:5d:0e:9a:35:
                    34:4d:f2:65:d0:eb:90:6c:23:a2:74:17:fd:9f:e5:
                    ca:3c:31:73:f2:81:37:89:98:74:1a:c2:4d:fa:3e:
                    cf:49:91:67:75:df:ef:17:87:ad:92:32:60:5d:c3:
                    66:21:ff:db:cd:17:d4:63:ce:5a:72:56:2c:30:b4:
                    b4:cb:64:35:b3:a8:2f:3b:38:3c:6e:6a:0f:8d:5b:
                    0e:c4:75:f9:0b:af:2b:5c:62:b8:0a:c0:7a:f2:f1:
                    6e:6d:2b:4b:49:4d:8b:a7:a1:f9:02:e0:66:72:c7:
                    30:ee:2f:f9:4b:db:a6:d7:1b:ab:5e:68:f8:66:fa:
                    1f:22:7d:80:79:25:b3:1e:98:66:2a:e8:4c:58:80:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:21:63:A0:C8:57:A2:3D:6E:1C:18:C1:9B:2C:A8:12:58:04:4A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1620a067-0eb7-3e9f-9087-45bc067490af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:96:74:f9:1b:c8:4e:7e:3c:08:74:52:23:bb:91:ff:a7:
         3c:f6:dd:55:69:ee:6a:93:4b:07:39:6c:9d:64:3f:cc:08:28:
         bf:29:83:86:94:f7:4d:65:42:26:ee:96:76:a6:d8:0d:f5:0b:
         4c:88:ef:60:38:f5:37:5f:ad:55:68:02:63:80:a8:ad:54:2b:
         e2:bb:5f:05:4b:53:29:fe:87:2a:16:3f:1b:d9:51:7d:89:ab:
         5b:a9:a6:06:c7:1d:44:aa:37:f1:b3:6e:4e:4a:2a:ad:30:77:
         7f:42:c8:3e:bf:73:54:50:00:f6:49:9e:be:67:d6:82:78:cf:
         ce:b8:90:2c:42:75:3e:e7:7b:e6:31:45:73:06:39:98:71:d1:
         b9:4d:a0:68:3e:e0:27:e1:14:f4:51:1a:95:ea:80:85:7c:a6:
         8e:fd:4a:15:3d:03:dc:ae:48:b1:7f:d8:d8:8c:77:5d:68:ba:
         8a:20:27:03:e5:29:5d:86:69:1a:de:fd:76:a4:e9:e3:9b:ab:
         4a:71:53:30:fb:05:8a:bc:80:9c:a6:5a:2c:6e:fb:10:c3:e7:
         6b:4b:1c:02:9e:35:de:99:93:85:f5:4c:86:25:74:a0:b2:04:
         f0:b5:c6:fa:85:b5:1e:bc:67:de:b4:df:0d:55:31:b0:86:f4:
         5a:cd:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:35 2024 by rpki-client on console-ams.rpki-client.org