Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/f1736552-f1d9-3ca3-be4a-959fb4a2293a.roa
File:                     f1736552-f1d9-3ca3-be4a-959fb4a2293a.roa (raw, json)
Hash identifier:          UnFJgUh3BhhwRKOwUOUlzibK8c8Yhxt89OMekHXVMuI=
Subject key identifier:   36:B5:B9:72:E9:B3:5B:2E:EF:D6:2F:1E:87:53:EF:29:C6:10:A7:6B
Certificate issuer:       /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial:       010D0C9F432858435D702C91502D0F604BF85380
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/f1736552-f1d9-3ca3-be4a-959fb4a2293a.roa
Signing time:             Wed 27 Sep 2023 19:28:24 +0000
ROA not before:           Wed 27 Sep 2023 19:28:24 +0000
ROA not after:            Tue 26 Dec 2023 20:28:24 +0000
asID:                     62739
IP address blocks:        162.220.116.0/24 maxlen: 24
                          162.220.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:70:2c:91:50:2d:0f:60:4b:f8:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
        Validity
            Not Before: Sep 27 19:28:24 2023 GMT
            Not After : Dec 26 20:28:24 2023 GMT
        Subject: CN=130f9c1e-67bb-46ce-8416-fd47613fe78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:90:07:0a:c1:30:ac:eb:0a:23:b9:cc:59:62:
                    7c:64:e2:00:85:10:ae:e0:11:9e:dd:3d:08:bd:e7:
                    a2:89:ef:5f:e4:08:b5:b9:ac:27:bd:ca:bb:35:47:
                    be:4e:83:81:a5:01:48:13:a4:e3:55:7d:f2:ec:ad:
                    2e:57:e0:78:a3:c7:19:24:d9:e9:1c:20:f7:6c:4e:
                    44:b5:6a:6f:40:bd:9d:bb:6d:46:7f:76:cd:34:54:
                    31:24:bc:ff:2c:d6:48:ba:4f:74:70:86:da:77:7f:
                    77:3b:d5:4a:29:8b:e9:34:f2:d6:a9:6d:d4:21:98:
                    b5:45:3f:66:c9:a4:0e:52:3d:de:5a:7d:0c:61:de:
                    6f:cb:98:88:c6:d3:a5:e1:b9:52:63:6f:e0:84:a5:
                    cc:99:a2:fe:36:d4:e7:b7:7d:87:9d:ac:ef:2b:c8:
                    54:04:c6:c0:ff:c7:aa:31:c8:c2:22:d3:6d:d5:a2:
                    23:b5:3b:c0:0a:77:d0:b1:a2:e2:fc:93:b3:6f:9e:
                    2e:83:c5:97:3e:0c:02:0e:9e:29:82:46:1f:b9:46:
                    b9:89:55:8b:32:23:50:88:85:e3:51:43:14:5e:15:
                    19:a3:f5:02:95:63:e2:fc:dc:17:90:13:72:7d:25:
                    ce:48:b5:a9:22:99:17:ce:1d:25:00:20:d7:0a:ff:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B5:B9:72:E9:B3:5B:2E:EF:D6:2F:1E:87:53:EF:29:C6:10:A7:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/f1736552-f1d9-3ca3-be4a-959fb4a2293a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl

            X509v3 Authority Key Identifier:
                keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.116.0/24
                  162.220.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:c3:a1:f0:e5:99:36:6e:7e:b4:06:e9:70:f7:64:64:b7:
         22:96:a2:ca:3e:0d:ce:3a:66:08:98:67:15:7d:b5:0d:51:d2:
         97:33:9b:7a:d8:cd:74:38:b1:3d:ea:4f:c8:9c:73:cf:03:9f:
         1f:10:84:f2:fd:17:16:9c:30:6c:1c:b1:fc:d2:d5:64:e8:b1:
         24:73:68:13:e4:37:fd:af:05:ec:fe:e5:f4:f9:7d:1c:2c:ae:
         62:39:6c:af:ad:29:57:d8:d1:ab:01:2f:61:e2:0f:d3:93:1e:
         a5:c4:66:09:6b:c6:f0:2c:e2:bf:14:83:b1:00:5f:f3:18:13:
         b7:15:1f:a7:42:d9:b6:64:7b:b2:8f:8e:dc:14:72:8e:3c:04:
         60:83:1e:09:af:18:f2:b2:08:9e:23:70:06:78:d5:4a:a1:67:
         92:43:7d:08:15:2b:73:2b:45:bb:bc:a4:1c:58:76:db:bf:b7:
         da:3b:0f:aa:c3:84:61:25:74:e3:1c:37:c5:dc:e5:96:d1:45:
         93:7a:37:d0:c8:a6:46:b0:fb:d8:a0:39:73:bf:53:53:1b:1d:
         8e:a8:f8:6e:29:3e:64:da:79:91:49:c7:98:45:a0:7f:ff:3f:
         1b:01:b9:0f:bc:ac:33:50:85:4d:a7:28:1f:3b:a4:9e:f2:18:
         67:93:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org