Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd631af0-3fe1-3ba5-86e0-7696db412776.roa
File:                     cd631af0-3fe1-3ba5-86e0-7696db412776.roa (raw, json)
Hash identifier:          /EGFerK9LZ0mu1YfDV09ASEOGT891pvyblknnAPFmAA=
Subject key identifier:   5F:09:38:53:E0:BE:82:F2:EE:54:A0:7E:40:53:AE:94:80:AD:3B:F6
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285841E46D41E4D16A572373864380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd631af0-3fe1-3ba5-86e0-7696db412776.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 22 Jun 2023 14:13:49 +0000
asID:                     18258
IP address blocks:        209.8.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:41:e4:d1:6a:57:23:73:86:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 22 14:13:49 2023 GMT
        Subject: CN=182ae58e-3b7f-4c14-88bb-1ee59269bdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:6d:12:d4:95:40:f6:fd:14:54:4a:7e:9a:
                    d1:89:ea:57:06:db:0b:5a:3b:68:6d:39:00:68:1c:
                    41:84:ad:1a:1f:c3:9b:4a:a9:2b:4c:f0:e7:a9:61:
                    95:1b:51:5d:5f:a9:cd:12:e3:a3:d8:43:00:26:88:
                    08:b4:9f:af:5b:77:3c:dc:01:6c:ac:44:79:65:37:
                    6a:0f:08:c4:dd:6d:3e:01:b2:bf:6f:21:a8:39:50:
                    f4:bf:2e:d2:00:94:31:89:37:be:e9:1a:e0:c7:fb:
                    85:ae:f6:16:ab:f4:08:9a:4b:d6:4e:91:57:a9:49:
                    9a:7c:4f:54:61:00:82:3b:6e:38:14:16:ac:e9:65:
                    f9:6f:b6:07:d9:35:6c:94:f9:3e:c1:ec:4a:c0:5e:
                    16:ba:fe:70:88:92:81:28:91:ba:3f:9c:c6:cf:2c:
                    bc:14:47:5e:15:f6:04:08:8c:8e:31:d4:28:02:4f:
                    ad:13:1e:d7:45:43:c8:1d:a7:54:ce:8b:3a:5d:be:
                    30:8a:98:7a:63:d5:0b:ce:1a:99:26:81:fc:fe:b7:
                    54:46:8e:e7:e9:ac:95:8e:5f:de:80:ba:6a:fa:bf:
                    c2:e2:e0:f1:57:6f:2d:57:33:b5:2f:26:ca:b6:b7:
                    fc:16:30:9b:74:68:25:66:15:19:07:cf:36:35:ba:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:09:38:53:E0:BE:82:F2:EE:54:A0:7E:40:53:AE:94:80:AD:3B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd631af0-3fe1-3ba5-86e0-7696db412776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.8.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:34:69:3a:b9:43:89:c3:cb:00:68:ca:85:e2:02:b6:39:
         9e:c2:c7:ac:87:48:d4:7c:0e:93:2c:cb:ec:77:b8:09:5b:f1:
         a7:8d:2e:c4:e9:60:53:6e:b1:d1:c0:66:63:dd:64:d6:3b:ed:
         f6:5e:7b:7f:cb:fe:3f:cb:f7:bc:ed:ce:75:87:9f:68:06:19:
         d9:3c:ea:b9:cb:45:03:73:5f:db:9b:01:32:ff:3c:fe:4d:c5:
         67:65:6c:79:02:6f:5a:37:5c:f3:f6:78:08:f7:99:f8:3c:e2:
         b7:fe:c8:ac:d4:ea:e0:01:34:fa:ae:8f:d6:92:df:f1:fc:6d:
         bc:27:ae:eb:6d:99:8e:00:5e:1e:a5:dd:14:e1:31:94:50:5d:
         80:df:2f:c4:c1:de:0f:8d:02:d3:53:62:bd:6b:4a:c2:cb:11:
         b6:9f:12:f2:b0:3d:db:9e:e6:d9:2d:41:2a:e7:77:77:8e:82:
         de:d1:82:8d:c6:f4:96:68:85:be:22:91:4a:cf:fc:49:76:ea:
         19:e3:64:51:01:08:c9:7a:c7:d8:51:4b:83:a7:43:70:f2:ba:
         90:f9:89:2b:01:15:5d:76:fe:84:a0:b9:01:eb:52:b1:12:7b:
         b2:8a:3d:07:7c:f3:bb:6c:f8:75:26:8a:8f:fa:d3:e2:32:7a:
         b8:0f:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org