Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70b61e95-f9e8-3236-b96a-94799965cf70.roa
File:                     70b61e95-f9e8-3236-b96a-94799965cf70.roa (raw, json)
Hash identifier:          tUBs4zz3DIl8OrCwvtA2rzuiOIA5/4tkp3XQV2qnAsw=
Subject key identifier:   34:4B:DC:5C:A6:E9:E9:CB:28:66:48:0F:1B:09:44:4E:0E:FC:CB:C0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858435AD363824ADD0B46CC2F1C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70b61e95-f9e8-3236-b96a-94799965cf70.roa
Signing time:             Tue 26 Sep 2023 21:00:52 +0000
ROA not before:           Tue 26 Sep 2023 21:00:52 +0000
ROA not after:            Mon 25 Dec 2023 22:00:52 +0000
asID:                     397239
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:d3:63:82:4a:dd:0b:46:cc:2f:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 26 21:00:52 2023 GMT
            Not After : Dec 25 22:00:52 2023 GMT
        Subject: CN=c418192b-ffb3-4e07-968a-35ec7c8e7b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:b8:12:8e:67:bb:da:e9:dc:23:7f:d1:b4:
                    13:ad:fa:fb:25:91:31:7e:3e:a2:ab:84:8a:35:f8:
                    f7:47:26:93:20:df:ff:38:8e:12:2b:1e:7a:92:c0:
                    73:b8:ef:9f:54:f5:ef:f2:81:1c:4a:c9:8d:74:55:
                    32:a4:93:23:31:65:04:52:f0:fa:ee:32:65:2a:9e:
                    1a:f5:88:2a:72:9c:0a:0c:7f:a4:a9:f9:c6:02:a2:
                    87:15:c2:98:a4:a5:73:db:25:29:82:b9:6a:e8:39:
                    8a:1d:b8:0c:a8:2d:dc:5a:e1:83:3c:9c:04:83:5e:
                    c6:a3:aa:13:3f:dc:71:dc:28:a7:97:5c:70:8a:41:
                    44:e8:12:49:4b:72:e5:48:2f:fa:8f:0e:a9:83:b2:
                    c8:1f:5f:29:96:58:6e:f6:c5:cf:29:7a:cb:71:77:
                    10:25:93:34:b5:df:f2:1a:65:2e:b4:03:46:8b:08:
                    62:5d:d3:e7:8d:65:58:37:22:9e:e2:9d:7e:02:dc:
                    3c:1b:79:64:19:4e:6f:55:97:c2:89:1a:b4:5d:2e:
                    d8:40:0f:41:59:4c:50:d3:48:8b:b4:0f:9f:98:37:
                    e6:ca:35:93:b8:98:98:5c:c4:76:d1:c1:4d:22:07:
                    db:68:43:78:62:55:2c:22:e6:fa:4b:3f:3d:b4:57:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4B:DC:5C:A6:E9:E9:CB:28:66:48:0F:1B:09:44:4E:0E:FC:CB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70b61e95-f9e8-3236-b96a-94799965cf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:38:49:30:3a:13:8c:72:b6:96:2f:fa:07:fa:d7:cb:7e:68:
         05:19:7f:80:34:04:df:c6:db:17:34:9c:77:6e:e4:c2:2a:53:
         0f:af:7c:0f:db:0c:a9:b4:27:27:33:ae:54:28:1e:ca:53:49:
         01:91:2f:ae:40:af:c0:e2:ff:73:75:c9:14:87:4e:df:cc:62:
         5f:d9:5d:fd:dc:12:26:78:2c:9e:f1:05:40:aa:c1:a3:12:04:
         bd:7b:15:7e:e6:39:a0:13:ea:79:30:2b:bd:a9:0b:6f:77:c8:
         17:80:83:5c:e7:24:36:0a:c5:14:76:12:c6:a8:f1:16:57:d8:
         83:52:3c:83:2b:02:d4:46:b6:a7:fc:da:91:77:2a:24:54:9f:
         3b:e6:20:04:91:3b:e9:15:4d:00:fd:dc:39:59:ae:6b:97:c8:
         de:51:73:55:c2:4b:6c:8d:cf:e6:22:61:ad:59:0e:0d:ab:fb:
         ce:d4:42:51:d9:8f:44:c3:a3:aa:39:9e:dc:03:0f:e8:f3:8f:
         d1:8c:c9:4e:cb:8b:f0:b6:f7:17:2a:e5:02:d1:fb:fc:af:29:
         57:01:3e:b8:bf:ba:1b:c9:cd:d5:6f:ed:13:f6:d7:2d:50:66:
         94:99:58:8e:ee:5d:2c:37:01:bd:cc:a1:3b:ae:39:13:30:fc:
         bb:cd:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org