Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa
File:                     533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa (raw, json)
Hash identifier:          kdBgzG1s/qoRp/Pn+N6lPaHabechRqX1bh6MshPm7AY=
Subject key identifier:   C1:39:A7:91:E9:5C:F9:82:98:11:1B:4A:D1:8B:DE:4D:7D:85:5A:26
Certificate issuer:       /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Certificate serial:       010D0C9F432858442672ED2A2D34105678837F80
Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa
Signing time:             Fri 08 Dec 2023 19:31:25 +0000
ROA not before:           Fri 08 Dec 2023 19:31:25 +0000
ROA not after:            Thu 07 Mar 2024 19:31:25 +0000
asID:                     13438
IP address blocks:        104.232.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:26:72:ed:2a:2d:34:10:56:78:83:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
        Validity
            Not Before: Dec  8 19:31:25 2023 GMT
            Not After : Mar  7 19:31:25 2024 GMT
        Subject: CN=0b090715-a469-4969-b854-55bc3d44376f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:6b:55:98:e8:b5:36:c6:dc:82:23:44:86:
                    8d:01:8c:39:99:93:bf:90:a9:bc:f3:de:a9:f8:a9:
                    c8:e2:68:b0:a0:b8:8d:32:87:af:4d:a5:1b:45:27:
                    b0:62:a7:41:2e:76:fa:f6:f8:18:c8:51:3c:5f:e7:
                    8d:5a:4d:ba:2c:48:6c:9c:ea:e7:34:36:0c:cc:83:
                    9b:0a:ae:40:29:33:ce:1f:5d:fc:2a:69:f9:da:42:
                    63:55:bb:0d:1b:7a:35:65:ca:5d:a1:08:81:78:ac:
                    5a:a3:48:8b:f7:0f:b5:e1:96:88:27:bf:7d:48:8f:
                    07:fc:f3:7e:f8:79:7d:f3:86:81:ec:89:9f:ac:08:
                    7e:6a:8e:6b:e7:b3:fd:d9:62:f8:bf:b5:eb:33:f9:
                    7c:7a:7b:56:3d:1d:c0:93:09:d9:4a:a1:0d:c9:52:
                    ce:be:ed:de:95:34:96:35:53:0d:c7:d1:3c:32:95:
                    ba:30:87:dc:18:20:82:a9:46:60:53:ea:53:46:9e:
                    93:c0:b9:f4:7b:f6:64:4c:2f:dc:d2:4b:59:9b:dd:
                    08:8e:9b:16:39:cf:5e:19:24:f6:33:de:b7:1c:2a:
                    8b:78:41:78:72:31:a6:dd:09:6f:24:b5:84:13:cb:
                    be:d6:df:24:da:fc:04:19:97:11:13:b6:18:85:5c:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:39:A7:91:E9:5C:F9:82:98:11:1B:4A:D1:8B:DE:4D:7D:85:5A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl

            X509v3 Authority Key Identifier:
                keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:83:60:f8:af:5e:01:fe:7b:96:d3:51:4e:ed:dc:42:2a:
         d1:8e:42:bc:10:40:ad:ad:ae:5e:2e:e1:e2:59:ee:f7:fa:6a:
         89:38:41:6a:0a:d8:85:8a:1a:52:34:ee:02:7f:52:9f:cd:fd:
         a0:50:e4:e3:98:28:ec:bf:b5:5e:07:81:6c:3e:3c:c3:15:9b:
         d0:ef:1c:ef:0a:c7:6f:1b:f7:b1:f0:7f:33:05:a6:e0:7f:07:
         c3:3b:70:bb:7a:b7:88:af:f2:f3:c4:28:90:12:52:c0:0a:ad:
         fd:b0:04:9a:5f:cf:0f:85:09:44:b6:60:d5:8a:03:a3:0f:e8:
         ed:01:97:11:f7:d0:82:be:aa:5a:b6:0e:d4:ce:bd:4b:70:c5:
         3a:86:38:a4:6f:5b:6d:1c:42:30:69:41:be:6a:c4:fc:65:15:
         ce:d1:33:cd:f6:56:9a:e2:01:5d:a0:93:9c:eb:c2:e7:26:58:
         7f:a4:eb:c5:1a:81:77:62:a3:dd:92:7a:24:c8:bc:d8:4f:16:
         4f:1e:2f:ce:cd:ae:1d:59:73:9c:04:c5:e0:22:a7:c8:10:49:
         ad:92:08:00:f9:63:47:b2:5c:c7:1b:c0:fd:19:fc:72:2d:69:
         24:56:a2:80:16:68:20:7d:f7:69:2b:d7:d0:31:12:51:b2:e7:
         82:90:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org