Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e340d0eb-a0c6-324b-9677-33ad0d558a3c.roa
File:                     e340d0eb-a0c6-324b-9677-33ad0d558a3c.roa (raw, json)
Hash identifier:          EzTpsb6QGXcYjENPXfZHrbXCGZLScpEdzu1+8uUHuRM=
Subject key identifier:   C2:72:C2:E8:1B:F7:5B:EA:6A:9C:CB:60:8E:CD:2B:0E:29:C7:F2:46
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858436008129576A41C9BDBF25220
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e340d0eb-a0c6-324b-9677-33ad0d558a3c.roa
Signing time:             Thu 28 Sep 2023 17:46:04 +0000
ROA not before:           Thu 28 Sep 2023 17:46:04 +0000
ROA not after:            Wed 27 Dec 2023 18:46:04 +0000
asID:                     397235
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:08:12:95:76:a4:1c:9b:db:f2:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 28 17:46:04 2023 GMT
            Not After : Dec 27 18:46:04 2023 GMT
        Subject: CN=e6a93259-7712-45a3-8846-556d8c9e4cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:11:1d:39:df:b8:40:4d:cf:be:2c:a5:07:
                    32:ff:9d:9e:cb:bb:39:50:0c:12:50:8a:65:9c:41:
                    bd:59:5f:a0:07:a5:e0:d0:e3:0a:5a:c3:4a:12:84:
                    bd:2b:62:3a:5a:8d:8a:bc:1c:95:0a:7a:cc:8c:a0:
                    ba:08:4d:c5:38:0f:e4:87:c1:11:0d:4d:32:f3:38:
                    c8:7d:fa:74:ee:23:d1:a8:3c:be:cc:3e:2b:52:08:
                    3a:f3:94:2d:cf:ef:a4:de:15:28:05:4a:5b:42:00:
                    7a:96:5e:a2:a6:60:38:27:a7:0b:1c:34:43:12:f6:
                    2e:0a:4e:69:a0:59:b0:6d:db:57:a9:a5:cc:ee:56:
                    f8:05:93:c0:88:03:15:c5:7d:d5:5d:30:ae:28:7d:
                    f7:6f:3e:f6:47:f8:97:63:30:44:64:8f:33:82:7b:
                    c1:b4:30:12:12:c0:f8:ad:a7:e7:7a:2f:2f:42:dc:
                    28:ac:7c:7a:33:d3:f4:2a:df:8b:d5:7b:6b:ff:59:
                    d7:c8:d9:33:8e:2d:d5:14:f1:08:21:7d:e9:5a:d1:
                    6b:82:13:1f:0b:be:1b:7c:4b:4a:8b:9e:66:d2:50:
                    32:3b:52:06:1a:01:2e:24:64:16:41:57:fc:10:ac:
                    84:bd:6f:d6:8c:c5:b4:0e:12:ea:5c:00:1b:6f:bf:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:C2:E8:1B:F7:5B:EA:6A:9C:CB:60:8E:CD:2B:0E:29:C7:F2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e340d0eb-a0c6-324b-9677-33ad0d558a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:a7:7f:96:b2:df:97:32:c9:2a:eb:31:42:01:f9:e6:e9:
         0a:8b:3a:48:f4:73:1a:6c:0c:a9:f6:41:9a:84:bd:c5:59:a4:
         69:79:44:7a:e3:f6:5f:24:12:99:88:59:3a:3a:b4:f8:f6:df:
         ac:c1:77:68:e2:b3:9b:c9:02:3f:d0:6c:82:b8:be:48:9b:10:
         71:c5:3f:58:8b:eb:96:4b:5c:a7:94:2c:b9:cb:54:00:ce:10:
         e4:8c:1a:2e:6b:bb:33:c5:0c:5d:4a:99:6c:12:48:a6:92:02:
         df:52:8e:7f:66:1b:f2:4e:cc:d9:fb:3b:ea:4e:98:d3:3f:1e:
         01:3a:e4:3b:af:bf:f5:ac:44:4b:3a:14:11:b5:81:c4:e7:41:
         7d:64:c2:20:7a:ea:cb:6c:33:c5:97:39:c5:7b:f1:40:17:d5:
         89:ec:50:00:b1:2b:a9:ce:87:3c:3b:af:72:f5:69:7d:c9:3e:
         26:15:b2:49:07:0b:49:2d:ee:f1:be:e9:72:a9:3b:f1:25:73:
         8a:21:9f:3e:39:c5:e5:fe:c6:df:19:9e:83:a9:19:88:63:90:
         af:14:e0:ad:43:c8:8f:6f:9e:53:49:d3:c3:15:c6:d7:2b:3c:
         02:39:b0:10:3b:fc:9b:dc:44:3e:54:96:ec:05:1c:41:4c:49:
         5f:44:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org