Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edd3123e-f385-38bd-aa8b-faeed925190b.roa
File:                     edd3123e-f385-38bd-aa8b-faeed925190b.roa (raw, json)
Hash identifier:          q0dAbPlNjQ3UIh0ZaAvrOAkntAE6SFbS5V5gd1Jab+M=
Subject key identifier:   A7:2C:1E:E7:24:99:8C:1A:C0:62:9B:1D:D6:B0:64:A4:17:21:08:2D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858435AA2BE6AF03A76035E2E57E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edd3123e-f385-38bd-aa8b-faeed925190b.roa
Signing time:             Tue 26 Sep 2023 19:22:52 +0000
ROA not before:           Tue 26 Sep 2023 19:22:52 +0000
ROA not after:            Mon 25 Dec 2023 20:22:52 +0000
asID:                     397213
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5a:a2:be:6a:f0:3a:76:03:5e:2e:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 26 19:22:52 2023 GMT
            Not After : Dec 25 20:22:52 2023 GMT
        Subject: CN=6e1ccbaa-b9c2-4271-bb65-e9ae858552c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:e0:4d:0c:a4:38:3e:6e:26:93:06:41:23:
                    5d:4d:c0:37:55:1c:f7:9d:78:ba:1d:07:1c:a0:d4:
                    d4:02:08:26:b3:bd:85:89:b5:76:54:e2:04:fa:38:
                    77:6f:01:96:ef:b9:06:1c:65:9f:59:51:07:84:94:
                    5c:9c:d5:93:7e:9f:b9:a0:18:ec:16:0a:04:76:b4:
                    8d:a4:97:ca:05:07:f7:30:a6:21:90:7b:1e:9d:7d:
                    ec:db:7e:64:82:43:11:fb:a6:a5:26:43:d9:dc:a0:
                    11:aa:03:c3:8e:de:1c:91:f2:33:a7:80:54:e0:ea:
                    bd:c2:88:1c:82:44:db:8d:79:d1:52:a0:fd:f3:36:
                    f8:f3:fc:46:58:0c:61:7a:bd:80:28:2e:82:57:2a:
                    46:d7:36:53:4a:8e:a8:68:f8:20:4e:a5:09:4e:3c:
                    5c:45:1d:43:e1:0a:71:e9:20:38:33:e2:fc:66:88:
                    15:f3:34:a3:11:22:92:59:b6:66:4b:86:fa:68:85:
                    2c:4d:e7:9f:57:eb:d5:b9:14:f0:3d:ff:a3:d1:09:
                    4e:30:58:e6:db:98:37:79:8e:34:19:ab:32:99:37:
                    9a:a3:a6:fc:5d:54:24:d1:19:bb:5b:bc:1c:50:82:
                    66:0c:55:46:b5:7a:79:f6:5f:b3:3f:8b:8b:69:8b:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:1E:E7:24:99:8C:1A:C0:62:9B:1D:D6:B0:64:A4:17:21:08:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edd3123e-f385-38bd-aa8b-faeed925190b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:7e:36:d6:b8:ab:e6:d2:2c:32:98:c4:13:2e:88:e6:3b:
         cd:2c:89:8d:86:13:0d:e5:a4:97:88:9e:01:80:26:86:90:07:
         e0:9e:fb:20:01:bb:5d:7c:72:4c:ca:38:64:0d:84:50:c1:65:
         82:68:50:c1:dc:ce:6d:9a:da:11:9d:0a:b8:59:0b:97:a9:44:
         24:73:70:09:7d:04:09:c9:fa:4a:ea:5e:36:4f:f3:96:50:71:
         5c:3e:ca:4e:88:04:1d:25:f3:a7:86:80:46:34:9b:5e:b8:96:
         0b:7c:b2:6d:0e:dc:b4:7e:7e:f0:b7:41:8a:71:7b:49:69:66:
         5f:f5:c4:b4:3d:c3:1a:a1:0a:42:78:ce:0c:90:d6:7a:88:d2:
         a1:e2:dc:72:cf:f8:19:69:00:45:4f:92:4c:31:02:05:b2:19:
         2d:07:3d:b9:25:64:94:be:ce:87:b9:70:06:97:af:97:02:69:
         16:0d:c5:22:cf:f1:c2:02:2a:8f:a6:20:ac:ee:44:80:ae:3e:
         bb:a4:35:7d:51:a8:f4:aa:be:71:d2:cc:51:a1:53:ba:2a:27:
         5c:91:b1:26:b2:d9:6f:df:12:78:c2:36:fa:a6:0d:52:0e:83:
         64:fc:52:5d:50:da:11:2a:57:54:c5:b5:8c:b2:fd:96:d5:c4:
         87:34:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org