Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4d4d8ae2-f1f4-347c-b898-400480550e3b.roa
File:                     4d4d8ae2-f1f4-347c-b898-400480550e3b.roa (raw, json)
Hash identifier:          LJ1h7L4jrzJhXJJTvCv17HmsWLlgTR5bjVAsRXUGna4=
Subject key identifier:   15:7A:EC:7B:A4:0D:80:A9:CD:88:24:66:12:E4:E1:73:FC:04:84:32
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285843FBF8A55EEB50494ED5B1F380
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4d4d8ae2-f1f4-347c-b898-400480550e3b.roa
Signing time:             Thu 23 Nov 2023 14:21:05 +0000
ROA not before:           Thu 23 Nov 2023 14:21:05 +0000
ROA not after:            Wed 21 Feb 2024 14:21:05 +0000
asID:                     3209
IP address blocks:        47.67.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fb:f8:a5:5e:eb:50:49:4e:d5:b1:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Nov 23 14:21:05 2023 GMT
            Not After : Feb 21 14:21:05 2024 GMT
        Subject: CN=6471d7e8-8cac-495a-9871-419c93cfd123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:f8:d6:cb:35:08:92:3c:48:f7:69:c2:c7:
                    fe:e1:df:3c:b2:34:d8:7d:ea:08:22:45:26:e6:ea:
                    99:fc:9a:ad:8a:8a:c0:2a:36:58:c9:df:08:88:0c:
                    7e:1e:77:9d:af:cf:4e:e5:4e:d5:07:0a:74:24:9e:
                    bd:77:96:be:97:da:34:4a:04:f0:16:e2:0f:8b:9c:
                    e1:3c:6b:c6:75:45:29:a8:b2:0a:5f:90:9c:44:92:
                    b3:fc:42:66:93:91:4e:25:bd:92:2e:53:07:e7:55:
                    59:e1:92:ce:95:23:51:1f:dc:b5:33:10:db:7b:f0:
                    d9:41:1e:d7:8f:da:9f:b6:dc:58:97:2e:bc:10:bf:
                    76:50:60:67:cf:f7:6e:be:32:97:5d:20:ac:d9:e6:
                    8e:d8:90:52:98:af:4e:12:cd:81:33:c4:3c:25:7c:
                    6d:c1:ff:ce:12:8f:88:67:09:04:6d:9e:8d:ac:ea:
                    d8:a6:84:16:4d:d0:fe:7c:03:bc:8c:5e:25:05:61:
                    a7:00:38:06:d7:e3:8a:4b:2b:ba:e4:d1:22:e2:a5:
                    42:dc:69:84:75:a5:f2:ba:c7:4d:15:c4:21:53:3d:
                    46:54:da:03:c5:02:10:3b:b4:41:28:41:65:8d:e2:
                    53:d8:ad:f4:44:48:aa:3d:c2:58:2e:7a:9d:68:58:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7A:EC:7B:A4:0D:80:A9:CD:88:24:66:12:E4:E1:73:FC:04:84:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4d4d8ae2-f1f4-347c-b898-400480550e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:69:c9:23:0f:89:cf:71:be:c6:e5:d4:e2:c7:1f:e4:9c:
         6d:23:56:00:45:c1:8d:19:ff:6c:b7:bd:5f:a8:57:8d:16:4c:
         bc:81:99:a3:a6:91:5f:47:50:c1:e5:aa:87:29:35:65:30:9f:
         f8:a5:e3:3d:99:db:db:aa:3b:7b:75:25:40:5d:8a:a2:b4:12:
         94:b0:c7:cb:c9:e7:b8:36:6d:3b:fb:82:3a:1c:01:69:3b:b9:
         76:c4:1c:87:d8:09:ed:65:9d:03:9b:81:66:03:8d:16:e2:77:
         99:aa:aa:d3:fa:cd:dd:88:ed:79:4f:5b:ec:d9:55:53:fd:fd:
         21:52:df:c7:d4:3b:71:be:62:b4:1a:44:50:a4:30:96:6f:70:
         6c:cb:c7:f1:bc:3b:1c:a5:60:ce:b1:cc:61:a2:56:92:86:c5:
         8a:4a:43:05:f3:e2:20:8d:43:f1:a1:0a:29:e4:cd:44:10:9c:
         17:3f:58:3a:93:96:2a:3f:25:29:4a:6c:48:e5:50:db:74:ff:
         31:5c:a4:7e:89:38:5f:91:27:90:b1:c1:11:66:64:aa:1a:5e:
         a4:92:fb:e5:da:c0:a2:a6:7c:05:78:58:21:6e:2d:0e:bb:c4:
         91:0d:69:f6:8b:55:37:ec:b8:08:eb:b8:50:18:54:6c:f8:56:
         e3:e5:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org