Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d065922-857e-30ce-b26d-b80762e752c9.roa
File:                     5d065922-857e-30ce-b26d-b80762e752c9.roa (raw, json)
Hash identifier:          HGo75s2doi+DAbeRXVH7oJ3LmXsJm1U91musPr8YWD4=
Subject key identifier:   8A:24:4D:E6:8A:B2:FD:49:4F:CB:A1:4F:D3:C8:B1:7B:70:C0:7B:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858435AD6DFF7E4B4190EBD1C5700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d065922-857e-30ce-b26d-b80762e752c9.roa
Signing time:             Tue 26 Sep 2023 21:07:54 +0000
ROA not before:           Tue 26 Sep 2023 21:07:54 +0000
ROA not after:            Mon 25 Dec 2023 22:07:54 +0000
asID:                     397234
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:d6:df:f7:e4:b4:19:0e:bd:1c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 26 21:07:54 2023 GMT
            Not After : Dec 25 22:07:54 2023 GMT
        Subject: CN=63ea7353-a6f4-4742-99b4-b2d6c051c645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:69:9f:ca:1d:6c:8d:1c:7b:e1:a2:81:a5:
                    a9:77:62:2c:65:b8:1d:bd:cd:0b:fa:b0:1d:e6:94:
                    87:3f:27:8b:e7:9c:e1:72:c3:91:3e:1a:1a:5d:66:
                    a4:3a:3b:d3:a2:ae:88:9e:0a:10:ac:62:b7:a9:8a:
                    c8:db:cc:4c:3f:f6:4f:4d:f1:80:66:22:92:fc:5f:
                    f8:71:09:1b:4e:76:65:c2:ba:4a:8e:cb:11:b5:67:
                    6b:1c:2b:76:fc:2b:38:db:11:90:75:47:14:7a:80:
                    63:0a:0c:1b:40:16:c5:aa:0e:ab:90:dd:b2:78:88:
                    d8:7b:f8:8c:1e:28:97:f6:87:04:97:2c:ba:81:9f:
                    b4:33:bf:f1:e5:cc:4e:96:09:9b:55:6c:09:eb:8a:
                    59:5a:70:86:a8:e5:a7:0e:f4:f1:05:f0:33:01:75:
                    6f:a0:2a:02:69:6b:91:a9:8e:37:26:92:ca:37:76:
                    6c:e4:c9:77:52:58:80:37:b7:35:41:99:bd:52:b6:
                    f6:35:d8:c6:91:d0:4b:53:40:39:1a:48:e1:4f:10:
                    bb:60:8b:91:34:a5:e5:a2:7d:b0:9f:02:85:a5:25:
                    b0:40:1f:74:99:2e:34:f4:97:98:86:5f:29:ac:0a:
                    30:57:e1:af:54:33:c8:b5:69:3f:96:c1:b3:f9:12:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:4D:E6:8A:B2:FD:49:4F:CB:A1:4F:D3:C8:B1:7B:70:C0:7B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d065922-857e-30ce-b26d-b80762e752c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:99:4d:a9:92:53:a9:49:71:cd:ae:03:c1:8b:27:cc:0a:c0:
         11:c8:37:b7:65:02:30:f0:5e:2a:a8:26:2a:cf:1f:ee:25:13:
         24:d0:2e:2e:a4:1b:ab:d8:b2:5f:d7:e7:2a:95:a6:23:29:37:
         9f:68:dd:9d:c6:39:1b:d1:01:42:f4:27:53:11:1e:4c:4b:3f:
         1d:8a:c1:b3:ce:19:6a:40:21:00:b7:0b:fa:c7:16:1b:32:fa:
         49:78:37:9d:05:90:8b:63:9c:53:55:cb:b6:4c:87:ae:f6:7d:
         b9:2c:cb:4e:25:d5:48:d0:53:91:08:73:b2:af:82:ea:bc:98:
         3d:57:91:55:60:ed:8e:fe:ba:f8:02:b6:30:17:85:48:73:b1:
         a7:69:6f:8d:98:e7:39:97:4e:c9:bf:d7:15:75:3c:6e:82:59:
         70:66:26:92:f9:57:00:a5:23:9a:8a:7c:cc:28:db:94:26:fd:
         32:c0:fd:28:a1:a5:3e:80:3e:d6:77:a0:ce:8f:6e:85:1e:c2:
         6f:a1:03:16:35:0c:da:a5:13:00:83:54:0a:12:02:78:b9:b5:
         53:c5:84:27:ed:fa:86:d3:6e:e2:19:e5:a5:e9:72:31:e4:38:
         24:6a:63:69:c9:bd:f5:44:02:82:cd:a0:37:c6:f9:73:7b:61:
         34:c6:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org