Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/18acf5bd-1f24-3c8c-aa74-3f999aa09dac.roa
File:                     18acf5bd-1f24-3c8c-aa74-3f999aa09dac.roa (raw, json)
Hash identifier:          RMfJeE67wJpwTVQsofG56P5CtzevO6P8H36UYTeDJOg=
Subject key identifier:   C7:B7:2E:FC:0A:0F:81:25:BE:80:22:28:BA:34:B8:29:49:EB:89:0C
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F43285841E471B51B43FC1659B694B380
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/18acf5bd-1f24-3c8c-aa74-3f999aa09dac.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Wed 09 Aug 2023 17:13:14 +0000
asID:                     61317
IP address blocks:        23.151.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:b5:1b:43:fc:16:59:b6:94:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Aug  9 17:13:14 2023 GMT
        Subject: CN=d31e39ca-85e7-490f-b3da-7bff93abbd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:af:a9:b4:a1:7a:25:5b:33:0c:b5:75:34:
                    44:a0:f8:84:ea:e1:23:e2:6b:3a:18:83:4c:27:28:
                    ae:85:6b:f8:ec:fa:c9:a1:d5:6f:57:37:e6:44:04:
                    cb:46:4c:cd:19:df:83:de:02:0c:32:0f:ee:f0:fb:
                    02:e3:58:f8:cc:97:6b:63:74:aa:28:50:66:25:05:
                    31:5b:d2:6e:40:96:3d:56:4a:78:23:00:32:1a:c3:
                    6a:d1:26:be:a6:79:c1:e3:be:37:40:71:60:92:bb:
                    77:f3:30:bb:e3:cf:31:88:ba:bb:f8:91:cc:59:42:
                    e3:3d:aa:7d:21:5f:e9:9c:93:d4:1a:3c:d2:0a:f6:
                    6b:bc:39:86:38:74:2e:da:d2:db:9e:8c:62:55:2a:
                    4e:d5:33:14:bb:a4:bf:3a:dc:b6:31:fe:e8:6a:66:
                    66:a7:0e:45:68:8f:bf:6c:a5:c1:4d:d2:c9:bf:0b:
                    0b:c2:49:87:c0:d0:23:74:5e:9a:ba:28:e4:f0:2b:
                    cb:d6:a7:43:b6:33:55:55:9d:ad:d0:dd:ed:ea:45:
                    ad:60:2f:73:e4:98:d2:ce:72:cc:75:d0:ed:42:93:
                    4e:0e:5e:c6:85:9e:b8:f3:97:08:6a:57:bf:d4:02:
                    85:9b:78:33:62:37:e2:b0:0e:92:45:17:32:29:1e:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B7:2E:FC:0A:0F:81:25:BE:80:22:28:BA:34:B8:29:49:EB:89:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/18acf5bd-1f24-3c8c-aa74-3f999aa09dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:91:d9:c4:79:95:99:fd:e4:e0:52:18:33:9a:86:e6:e8:
         eb:57:85:4f:6c:b2:fe:0e:3e:09:fb:4a:fd:63:29:bb:d2:98:
         88:02:68:85:ce:8f:64:9c:18:d3:d5:fd:56:5f:32:bd:a2:8e:
         dc:cd:a6:77:58:fa:ad:6d:f4:65:e9:0c:a0:69:05:2c:62:9f:
         41:64:ff:41:d1:e5:75:05:d5:6e:bb:ac:b8:19:c4:70:01:88:
         4a:62:fd:c1:e4:38:12:7f:dd:a5:ed:7e:8e:60:53:91:76:76:
         c6:4c:19:35:db:ac:83:30:23:d0:87:46:6b:c6:86:7e:e3:e3:
         0f:21:36:1c:be:14:4f:1d:06:fb:5e:33:be:c4:38:b6:62:09:
         73:07:af:d8:c0:34:cc:f8:95:e8:f2:56:b4:fa:46:f3:4c:26:
         a5:d9:76:ff:c5:77:a9:a9:88:bb:67:98:ea:39:8b:da:05:d4:
         70:49:76:0b:46:1b:35:12:1e:e6:8c:4c:48:8a:8b:e5:b0:b9:
         75:ad:b3:4c:0f:cf:e1:fc:25:27:a7:31:6b:45:22:a5:52:fd:
         e2:31:e5:cd:16:87:24:f2:8f:69:fe:81:82:4b:72:5c:5e:6c:
         09:2c:e1:e1:e1:5d:c5:89:36:68:7e:7e:da:a6:b9:c6:7c:98:
         70:13:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org