Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d8ba336b-2b98-38cf-b2ec-3a357c2d7a5a.roa
File:                     d8ba336b-2b98-38cf-b2ec-3a357c2d7a5a.roa (raw, json)
Hash identifier:          oj1q+O0z/HdR6bWs3kr8VhaDUOvOuSlCkxpROQxiqmc=
Subject key identifier:   CF:2E:C2:68:4C:8A:BC:39:14:1F:85:EB:AC:EC:DD:05:7B:86:1E:B6
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858440E4CAC5FE2FBA1E8B4F2D480
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d8ba336b-2b98-38cf-b2ec-3a357c2d7a5a.roa
Signing time:             Thu 30 Nov 2023 03:54:56 +0000
ROA not before:           Thu 30 Nov 2023 03:54:56 +0000
ROA not after:            Wed 28 Feb 2024 03:54:56 +0000
asID:                     400544
IP address blocks:        104.156.129.0/24 maxlen: 24
                          104.156.130.0/24 maxlen: 24
                          104.156.131.0/24 maxlen: 24
                          2607:76c0:b::/48 maxlen: 48
                          2607:76c0:c::/48 maxlen: 48
                          2607:76c0:d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:4c:ac:5f:e2:fb:a1:e8:b4:f2:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Nov 30 03:54:56 2023 GMT
            Not After : Feb 28 03:54:56 2024 GMT
        Subject: CN=d7a60ff0-a63a-4e03-a3c3-ecd9e08733da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:9a:5f:20:b1:ef:a1:3f:5f:94:78:7c:98:
                    23:cc:68:e4:7a:27:ec:57:2d:33:b1:bc:cd:6c:2e:
                    eb:8e:3a:94:3a:d4:4b:a3:72:3b:4d:be:ba:e8:e6:
                    11:a3:00:4d:10:76:e0:98:3a:aa:8b:54:bd:48:2e:
                    60:f3:a0:37:c1:05:19:d9:94:da:3e:c5:38:bc:71:
                    07:f5:b7:f4:ac:20:4d:4d:cc:42:3d:d5:10:54:e0:
                    5d:17:7a:23:05:53:42:b5:ce:d9:f6:21:3f:d1:72:
                    ba:1c:8d:88:aa:ff:d8:2a:34:e3:2b:73:cb:95:ba:
                    a2:6b:f4:e9:df:18:98:b8:b7:4f:1c:06:bc:54:f1:
                    ff:91:55:a1:34:46:52:32:ca:62:92:a0:eb:8d:58:
                    5a:de:66:5b:4e:54:a2:c0:b7:34:d5:95:cf:20:b9:
                    b3:c9:13:c2:7e:4c:80:5d:67:02:82:8a:11:32:86:
                    80:59:39:4b:e8:e7:9e:28:4f:eb:93:98:d4:69:72:
                    89:0c:66:dd:78:dd:18:7d:b3:32:04:27:2a:f0:3c:
                    7b:cf:58:e5:29:a2:d2:52:ff:2f:11:6b:e5:6e:95:
                    ce:22:fe:19:ae:7b:d1:63:d6:ca:f7:86:e7:6f:bd:
                    b6:24:81:a3:d1:b2:ef:44:ed:be:61:70:0d:88:f1:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:C2:68:4C:8A:BC:39:14:1F:85:EB:AC:EC:DD:05:7B:86:1E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d8ba336b-2b98-38cf-b2ec-3a357c2d7a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.129.0-104.156.131.255
                IPv6:
                  2607:76c0:b::-2607:76c0:d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:55:68:82:45:ea:0c:fc:f0:9f:13:2c:46:b2:0f:21:f4:c1:
         b1:ad:15:ce:79:35:17:f8:ee:5a:2b:fa:51:08:2c:ce:4c:81:
         e9:31:69:94:71:13:e4:94:28:c2:db:1f:9d:8e:ea:a7:2c:04:
         cc:6a:72:1b:a5:6a:21:f3:4c:e4:65:99:56:ba:ab:6e:4f:25:
         3d:cb:01:94:02:a8:cc:0e:8d:ed:9e:66:46:f9:df:07:d3:d0:
         03:7e:8c:4a:ff:a8:c9:75:c3:d4:9c:5d:c7:fc:ff:89:b5:1e:
         ac:e4:0c:5d:4c:d7:be:91:a0:50:70:00:50:62:e1:b6:8c:a8:
         7b:2e:6d:a9:1f:63:f7:5e:0e:4c:9b:f8:54:c8:a5:af:fa:18:
         b1:99:7c:1e:44:ba:1c:14:ca:69:a6:1a:b9:de:32:77:44:ed:
         8d:e4:58:d9:e5:0c:2f:85:c2:0f:45:37:33:5e:9a:58:e3:be:
         8e:a1:54:ed:d2:44:9f:7d:91:68:9d:b4:9e:f3:07:b0:b7:ed:
         d7:d8:0a:e9:fe:e0:b6:ba:5e:95:ee:c1:51:f5:bb:f6:e1:ef:
         ca:e4:50:8a:14:42:6b:50:e2:f2:b9:dd:77:21:31:1d:28:62:
         b9:a7:df:ee:dc:07:54:80:d1:fc:de:80:12:65:00:dd:5b:c6:
         21:96:90:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org