Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b922cf-1dea-39f7-bc89-cba1545b5bfd.roa
File:                     43b922cf-1dea-39f7-bc89-cba1545b5bfd.roa (raw, json)
Hash identifier:          3v5FtMYjJAQTxo580yTlFQl0obW4/cYKmkIYLm0bnqI=
Subject key identifier:   F0:46:EB:7E:56:1A:0C:97:3E:8D:33:BE:4C:CD:FE:2F:BA:CF:3A:45
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858435AD6E07968F53ADDDC5DB150
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b922cf-1dea-39f7-bc89-cba1545b5bfd.roa
Signing time:             Tue 26 Sep 2023 21:07:54 +0000
ROA not before:           Tue 26 Sep 2023 21:07:54 +0000
ROA not after:            Mon 25 Dec 2023 22:07:54 +0000
asID:                     397230
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:d6:e0:79:68:f5:3a:dd:dc:5d:b1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 26 21:07:54 2023 GMT
            Not After : Dec 25 22:07:54 2023 GMT
        Subject: CN=a129634b-72df-4e37-a924-b495127f8f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:65:94:14:8a:47:47:5c:6e:14:7e:07:38:
                    93:69:a1:40:c2:72:10:f6:93:7a:46:68:9c:e6:c6:
                    0b:7c:dd:7b:4f:b5:9e:e4:f3:c2:0c:09:38:67:df:
                    c7:1c:ca:bf:95:5c:cd:9b:b7:2b:fe:1d:5f:f1:b7:
                    83:37:a7:61:eb:4a:54:43:88:a3:79:2d:bd:43:ac:
                    6c:7d:f7:f0:64:81:76:cb:7c:80:2a:be:28:a7:78:
                    1f:4b:24:ab:60:40:bd:33:dd:f3:cf:be:b0:cc:a1:
                    da:c9:d8:14:ca:b3:c3:e1:25:20:49:6f:d7:8d:2f:
                    12:89:44:39:70:c0:b7:e8:ff:a4:5e:4c:30:d4:df:
                    06:06:c7:53:c9:42:c0:81:b3:3f:78:6b:45:5b:85:
                    79:69:8d:3f:26:e5:a4:ca:7a:b5:15:c0:2f:f5:8c:
                    cd:ab:ed:fc:6f:82:95:56:2b:aa:21:40:60:58:2f:
                    0d:53:fe:f6:36:8e:5a:76:dd:a7:ee:c6:b0:d8:5e:
                    9d:9b:98:a6:46:32:20:70:e8:15:89:a7:ef:c4:86:
                    14:88:c1:b1:b7:e4:2e:ab:50:27:d7:ab:bf:ee:fe:
                    58:99:96:4c:f8:e0:54:a0:43:aa:d8:6e:5e:f8:da:
                    26:f9:91:91:33:86:49:69:68:b0:79:f9:21:eb:8f:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:EB:7E:56:1A:0C:97:3E:8D:33:BE:4C:CD:FE:2F:BA:CF:3A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b922cf-1dea-39f7-bc89-cba1545b5bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:c2:d6:78:c0:7e:33:a8:c2:ba:c7:4e:37:0e:56:d2:2d:
         ae:1d:58:74:5c:9c:9f:36:bb:62:6e:ef:b6:74:58:db:b8:55:
         0e:71:60:a4:14:5c:ef:43:e6:8b:c7:3d:9f:19:05:3a:a8:c3:
         4a:9e:a8:75:88:8b:3a:3c:4a:e1:df:79:52:e1:df:89:b1:7a:
         4c:ef:56:c7:2f:c8:e6:b3:d5:79:5d:b7:3c:fa:f3:ee:e3:86:
         38:05:57:f6:81:d9:cc:36:e5:52:dd:ea:4a:e2:77:9a:19:b4:
         0c:2b:c5:5e:ae:4f:b4:89:d0:1d:28:8b:22:bf:8d:59:f4:be:
         ae:fb:b8:4d:2a:d3:ba:a2:a4:af:bb:34:c5:d6:b2:88:1c:83:
         f9:ff:91:68:50:c1:16:84:6f:dd:4c:62:2b:8a:1b:88:e8:64:
         78:be:22:9f:0c:ed:bc:2e:25:fd:eb:03:fa:80:b2:e3:42:8d:
         89:55:22:e6:de:b3:ed:5f:46:37:62:61:01:c1:78:3a:5b:7b:
         03:f7:7e:2c:1d:02:33:2d:5f:da:38:cb:b2:a9:74:e6:9b:4c:
         be:32:21:63:cf:1e:b0:0c:09:8b:89:a8:6f:b9:5a:3f:ca:20:
         b0:cb:89:6d:e9:bd:a5:19:5c:b5:5b:6d:af:e5:9b:99:a0:31:
         7d:0f:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org