Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/f201c0ff-6953-3907-877a-23329d308a11.roa
File:                     f201c0ff-6953-3907-877a-23329d308a11.roa (raw, json)
Hash identifier:          GUYknRpRgJo7JTwiHQno381gUOuLRSJ3xWeqQ0QqMKE=
Subject key identifier:   EF:55:08:F4:A8:99:D9:9B:6B:96:19:A5:EC:7A:6E:A5:67:CF:7A:E8
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F432858435A840542F50AC1CBD7CC6780
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/f201c0ff-6953-3907-877a-23329d308a11.roa
Signing time:             Tue 26 Sep 2023 18:20:57 +0000
ROA not before:           Tue 26 Sep 2023 18:20:57 +0000
ROA not after:            Mon 25 Dec 2023 19:20:57 +0000
asID:                     16509
IP address blocks:        158.26.56.0/21 maxlen: 21
                          158.26.168.0/21 maxlen: 21
                          158.26.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:84:05:42:f5:0a:c1:cb:d7:cc:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Sep 26 18:20:57 2023 GMT
            Not After : Dec 25 19:20:57 2023 GMT
        Subject: CN=574b2e41-a966-49fd-9b18-53456b46b9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:f9:38:fd:07:86:ac:c9:bc:e6:a8:5a:70:
                    c5:5c:04:98:29:a5:de:db:78:8a:60:39:37:63:c6:
                    e7:b2:cc:9d:64:3b:fd:c4:f1:eb:d3:cc:a3:21:c4:
                    21:e0:67:5e:6c:f2:f7:37:87:b3:e1:aa:56:e8:d9:
                    ef:56:cc:61:9a:fe:df:4e:f7:e4:00:2e:08:35:27:
                    bf:08:ab:98:9f:f2:23:5d:18:04:38:3b:6f:37:a8:
                    33:b6:fd:d3:82:28:3d:d7:8b:de:fd:a6:20:2e:00:
                    60:de:24:33:9e:4d:45:7e:93:f8:49:09:54:e7:02:
                    15:00:5b:b4:43:4f:f8:8e:fc:40:aa:b3:91:b7:f1:
                    92:7e:ca:e0:4b:80:e6:45:4c:fd:32:b5:fe:ed:67:
                    3f:0d:99:1f:2b:f5:93:9b:47:8a:b1:bd:f2:39:d2:
                    c2:4d:41:12:c0:9d:57:8c:82:02:75:5f:1f:74:92:
                    1d:95:15:7e:04:98:e9:43:52:fa:f8:70:d2:99:25:
                    de:e3:fa:6b:c9:d8:3a:36:fe:d9:37:76:99:83:f2:
                    4f:8a:31:25:f0:de:9f:8a:72:35:ba:f4:92:bb:08:
                    64:6b:cf:6e:c0:27:e1:e8:29:31:f6:be:5b:8b:a5:
                    1b:d1:a4:6b:00:7b:29:e3:22:e1:6e:5f:4e:2b:96:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:55:08:F4:A8:99:D9:9B:6B:96:19:A5:EC:7A:6E:A5:67:CF:7A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/f201c0ff-6953-3907-877a-23329d308a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:26:cf:92:66:2b:8a:68:2b:ae:9f:02:7f:b8:aa:96:06:b6:
         66:2b:86:a3:58:fa:be:e5:45:1b:52:1d:7c:56:f3:8b:4c:0d:
         40:88:ff:e0:04:81:24:37:62:d8:ac:fb:ad:07:89:cd:f5:f1:
         dc:5d:f0:64:4e:03:51:6d:aa:e1:17:88:6d:93:6a:23:3f:d8:
         f3:7b:da:df:f8:de:56:fc:47:e4:fc:94:f8:7c:a6:7d:ed:a2:
         68:89:6c:14:cb:9d:71:ba:e8:bd:3c:ee:01:85:2e:d5:93:4c:
         93:b8:aa:a9:b0:0e:4d:e6:34:48:42:d4:46:6e:76:f9:c9:75:
         f9:7f:1e:cc:07:bb:f4:cd:01:55:3f:35:c8:7f:4c:4e:70:77:
         64:81:74:d0:a9:5d:d7:cd:32:37:d2:a0:6f:5b:d5:b5:a8:9e:
         19:04:f4:76:16:0e:ee:62:4f:65:00:0e:08:2b:55:93:38:19:
         12:5e:c5:12:eb:1a:a2:a5:84:dc:5f:63:b6:de:4a:9e:ce:60:
         6f:91:73:a6:25:97:d1:87:91:c1:70:2b:ef:16:51:83:bf:55:
         cf:26:24:c6:fd:b2:6a:1e:34:3a:bc:35:96:94:37:af:31:c6:
         94:eb:c8:cf:40:9d:09:02:26:ce:71:53:8d:53:4c:cf:1b:ce:
         40:70:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org