Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5b9cc46e-bcc3-384b-8b59-e38118cf66c8.roa
File:                     5b9cc46e-bcc3-384b-8b59-e38118cf66c8.roa (raw, json)
Hash identifier:          HSddUvYu2553B7trkiVL6iLK8a7cuzKxU5b9LSTXRqA=
Subject key identifier:   75:3A:99:23:14:67:54:F8:9F:BF:D9:27:0C:5B:69:E7:42:5A:C8:45
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584289E8F13614EB5F0AC3CD88C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5b9cc46e-bcc3-384b-8b59-e38118cf66c8.roa
Signing time:             Fri 14 Jul 2023 01:00:16 +0000
ROA not before:           Fri 14 Jul 2023 01:00:16 +0000
ROA not after:            Thu 12 Oct 2023 01:00:16 +0000
asID:                     1239
IP address blocks:        74.81.64.0/22 maxlen: 24
                          74.81.82.0/24 maxlen: 24
                          209.51.159.0/24 maxlen: 24
                          74.81.78.0/24 maxlen: 24
                          74.81.81.0/24 maxlen: 24
                          209.51.128.0/24 maxlen: 24
                          209.51.132.0/24 maxlen: 24
                          74.81.85.0/24 maxlen: 24
                          74.81.87.0/24 maxlen: 24
                          209.51.152.0/24 maxlen: 24
                          209.51.156.0/24 maxlen: 24
                          209.51.134.0/24 maxlen: 24
                          209.51.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:89:e8:f1:36:14:eb:5f:0a:c3:cd:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 14 01:00:16 2023 GMT
            Not After : Oct 12 01:00:16 2023 GMT
        Subject: CN=b913b20b-a231-472d-9053-603b5ba88fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:f2:f0:d5:1f:9f:04:37:63:60:c7:f2:3b:
                    6a:77:50:f9:59:4c:90:de:77:27:f0:82:55:b8:1b:
                    fa:8c:eb:1d:c0:aa:3b:ef:d5:5b:74:89:ea:99:69:
                    f7:96:75:1a:24:58:81:34:3f:b9:9b:d6:eb:63:02:
                    18:e9:90:a8:5a:f0:69:2b:d1:ba:bd:88:9f:5f:a0:
                    32:e3:8f:9b:65:d3:31:12:89:45:04:33:17:28:c1:
                    fe:a3:fe:a5:f8:54:e8:3a:9b:d4:67:a2:1c:a4:ec:
                    b4:3d:f2:f1:5a:94:3d:28:91:81:e1:48:8e:72:4f:
                    c9:7a:4d:6f:89:f5:9d:ab:50:fe:72:54:a7:f5:70:
                    55:3e:7a:e9:b0:b6:02:a4:46:c2:1d:56:86:15:83:
                    df:4c:a1:8a:83:bb:9c:65:15:7b:f3:9b:61:50:c7:
                    e7:66:3e:f6:34:90:71:50:bc:99:ca:f9:96:09:d7:
                    97:ce:d1:78:0c:a9:2c:09:f6:ee:10:f6:1d:41:d5:
                    38:b7:68:9b:97:a1:c4:fb:3b:49:a5:f8:a9:4f:11:
                    b6:59:76:9f:8b:1b:71:db:db:1a:09:7a:16:3a:ad:
                    8a:c6:a0:1f:63:5d:43:48:cb:76:c8:89:1e:8c:73:
                    3f:8c:dc:4b:6f:df:d0:6f:e7:a7:4b:e4:6a:a6:54:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3A:99:23:14:67:54:F8:9F:BF:D9:27:0C:5B:69:E7:42:5A:C8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5b9cc46e-bcc3-384b-8b59-e38118cf66c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.64.0/22
                  74.81.78.0/24
                  74.81.81.0-74.81.82.255
                  74.81.85.0/24
                  74.81.87.0/24
                  209.51.128.0/24
                  209.51.132.0/24
                  209.51.134.0/24
                  209.51.136.0/24
                  209.51.152.0/24
                  209.51.156.0/24
                  209.51.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:ea:70:70:bf:ce:b6:8f:12:a3:9a:5e:a9:08:19:0b:ff:
         a5:7d:31:df:08:a6:25:86:83:d2:3a:3e:22:ff:a5:ea:f5:9e:
         98:eb:28:79:70:7a:b0:20:dc:1c:8c:f5:9c:de:4a:f5:68:8d:
         92:28:1e:ae:1b:7e:af:75:20:ba:1e:0d:16:63:27:a9:71:c5:
         af:9f:fc:24:8d:63:76:68:c2:15:7b:cd:9d:c3:12:a3:be:f0:
         a4:97:d2:bd:e0:03:59:9f:2b:91:f4:fe:1b:3f:32:85:a7:82:
         6d:85:f3:b4:eb:21:cd:61:4f:82:a2:e0:4f:72:13:d8:94:30:
         3f:be:9f:84:a9:6b:54:84:60:c3:64:9c:42:6e:9e:85:85:c7:
         3f:77:5f:9b:e6:0f:e2:36:52:83:23:84:f5:12:61:26:41:e9:
         c6:64:86:2b:48:4b:9d:79:bd:b5:24:29:a4:cd:91:38:db:69:
         04:71:42:c6:a7:f5:59:21:c2:f8:7a:72:df:af:c3:e3:07:80:
         27:c8:d7:36:4e:dc:d5:85:72:aa:a2:78:e8:22:aa:9a:61:aa:
         1e:34:2b:d7:77:5d:de:6d:7b:32:79:af:3c:f8:d5:fb:b5:16:
         6f:32:2f:2f:61:72:6a:d5:25:ef:8b:fd:87:78:ec:a9:4d:40:
         8b:7d:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org