Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1f14723c-aec5-3ea6-a904-30de8310d9de.roa
File:                     1f14723c-aec5-3ea6-a904-30de8310d9de.roa (raw, json)
Hash identifier:          K+Cj/ulLl50z9reh2Sa+718p4Bb4aCaPEG0L23YM4DI=
Subject key identifier:   D8:74:61:1A:43:58:84:3A:72:80:4E:87:A1:6F:51:E4:E2:AE:0D:03
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285843F8784F4660FAB117DC697840
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1f14723c-aec5-3ea6-a904-30de8310d9de.roa
Signing time:             Wed 22 Nov 2023 08:15:05 +0000
ROA not before:           Wed 22 Nov 2023 08:15:05 +0000
ROA not after:            Tue 20 Feb 2024 08:15:05 +0000
asID:                     395954
IP address blocks:        64.120.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f8:78:4f:46:60:fa:b1:17:dc:69:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Nov 22 08:15:05 2023 GMT
            Not After : Feb 20 08:15:05 2024 GMT
        Subject: CN=eabdd292-89f3-40c9-976f-3c2be8083e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:65:8d:e8:34:59:11:45:81:d1:56:ee:b6:
                    ff:06:21:c3:5f:cd:f0:c8:d0:64:04:27:70:e6:25:
                    d2:34:22:09:e6:73:44:31:63:46:7a:ee:e4:62:e4:
                    45:88:76:d7:57:8e:d2:20:1f:06:05:02:f5:cc:5e:
                    02:89:28:71:21:42:40:05:63:e4:6f:67:e1:74:48:
                    16:4f:84:c8:26:b8:65:09:80:37:b9:fd:3d:6f:45:
                    b1:1d:e1:05:c3:57:35:9d:b7:99:e5:9c:14:73:e2:
                    2b:98:91:3e:8b:cb:81:77:c8:05:1b:f3:77:77:b9:
                    23:60:3a:50:d0:48:8a:1f:a1:5e:5b:e4:5f:00:6b:
                    0d:e5:30:1f:a5:0d:8f:76:bb:26:ef:61:e6:d0:89:
                    b7:47:6e:09:68:44:2c:24:a3:c8:27:8d:9a:82:5e:
                    dc:f1:03:00:fe:38:e8:86:9d:b1:67:68:1f:cb:25:
                    38:b1:0a:77:92:1b:8c:59:ee:e0:dd:e7:85:f1:45:
                    d7:e5:ab:d7:17:13:a8:c1:6a:6c:6b:ba:48:6d:34:
                    e5:13:b8:5b:36:34:c9:fd:f2:0a:48:ac:27:35:1b:
                    0d:38:b3:c6:42:0e:6c:24:86:72:2f:b4:4e:e4:a1:
                    7f:bd:b8:16:0a:0d:9b:b2:2b:d8:5e:aa:8a:8b:d3:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:74:61:1A:43:58:84:3A:72:80:4E:87:A1:6F:51:E4:E2:AE:0D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1f14723c-aec5-3ea6-a904-30de8310d9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:33:04:ad:87:4f:ae:26:45:5b:d2:fa:d0:f2:df:f7:c1:66:
         7a:f9:7f:cf:7c:c4:84:49:6f:b1:8b:c0:ba:56:4b:ca:09:9b:
         0d:78:1e:2b:fb:a5:ad:14:26:86:d5:62:c9:fe:4f:28:f1:68:
         c8:01:72:43:1d:58:54:90:8e:7b:71:a1:49:57:2e:58:bc:1b:
         10:cd:39:d9:8d:be:7d:29:8a:25:47:53:3f:7d:1e:bf:92:94:
         ea:69:ea:6f:f0:20:56:79:a8:a5:fb:e0:96:65:6c:96:59:85:
         32:2e:35:8c:41:38:81:4b:c2:f2:98:43:35:bd:5e:6b:70:19:
         4a:1c:a6:3a:00:aa:93:40:0f:a3:fd:d8:e7:b4:15:44:54:e5:
         ae:b8:63:f9:ac:80:fe:5f:54:4a:aa:fe:7e:98:f7:2b:f0:d9:
         30:21:fc:79:19:71:fd:1b:31:30:02:49:47:86:6a:a5:33:ef:
         1a:ee:cc:2b:00:d1:3b:a9:e3:49:e7:00:12:6c:5d:39:8c:31:
         17:3d:f1:76:62:1f:81:4c:49:8d:e0:44:be:4e:ef:eb:0b:15:
         49:af:2a:02:8a:fd:27:46:97:c9:bd:ad:54:7e:c8:37:1d:3e:
         b0:4d:ee:43:bd:16:55:92:e3:03:1a:77:a1:67:35:88:62:a8:
         18:a4:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org