Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/95c4b9e7-d61f-3a90-9f50-bb38003b34a4.roa
File:                     95c4b9e7-d61f-3a90-9f50-bb38003b34a4.roa (raw, json)
Hash identifier:          NX9+PpHm6GQ3IFpKtiuJjm1tHTp7av2n5+GA3VkfOGU=
Subject key identifier:   18:F7:24:E0:BE:19:A9:6A:E8:8D:30:5E:45:DC:D2:56:76:BC:B7:06
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285842769B9C118E69B0B4E00B9080
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/95c4b9e7-d61f-3a90-9f50-bb38003b34a4.roa
Signing time:             Fri 07 Jul 2023 03:04:11 +0000
ROA not before:           Fri 07 Jul 2023 03:04:11 +0000
ROA not after:            Thu 05 Oct 2023 03:04:11 +0000
asID:                     6498
IP address blocks:        75.78.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:76:9b:9c:11:8e:69:b0:b4:e0:0b:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jul  7 03:04:11 2023 GMT
            Not After : Oct  5 03:04:11 2023 GMT
        Subject: CN=c41c532c-3214-436e-99ff-3901ebb4427b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:54:66:15:f9:92:1d:60:76:09:47:ed:cd:
                    cd:b5:3b:86:73:98:b6:8e:b2:d6:9e:a7:bb:13:04:
                    70:30:c2:32:86:9f:2a:f6:d3:25:43:38:80:04:7c:
                    0f:d6:24:22:4a:9f:57:81:0b:99:87:8e:f5:3d:8e:
                    6a:13:e9:96:6b:1f:e7:ea:44:81:ea:6d:05:f5:ff:
                    93:36:ab:01:bf:80:29:c2:7a:4f:22:18:20:a4:13:
                    49:e9:f1:3f:e9:fb:15:7a:a5:0a:24:f0:dd:94:38:
                    6f:90:29:21:54:71:a3:f3:57:a1:ba:cb:8c:b8:b7:
                    a9:da:82:dd:67:3d:f2:5a:d6:2e:f4:72:f9:35:59:
                    dc:cc:ff:00:e8:a6:3d:63:96:8b:07:03:ce:5d:d1:
                    df:fd:02:31:60:ad:93:38:3a:7d:4e:6d:0a:ed:e1:
                    63:c0:9c:88:1b:a5:56:a3:28:15:e9:14:00:44:70:
                    eb:72:15:c5:f8:d4:a7:2b:92:85:d7:ac:df:d3:01:
                    ff:0c:54:5a:18:51:99:d7:bf:2b:2e:14:05:fd:5a:
                    50:c7:04:46:bc:9a:76:71:08:ca:e4:05:b6:f7:3b:
                    1f:2f:ea:5e:93:8f:57:0f:ab:db:d8:42:68:0e:cc:
                    7f:3c:4c:56:ef:42:d8:ce:e5:55:c3:cf:f0:1b:24:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F7:24:E0:BE:19:A9:6A:E8:8D:30:5E:45:DC:D2:56:76:BC:B7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/95c4b9e7-d61f-3a90-9f50-bb38003b34a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:95:9f:69:36:73:fb:e2:c2:6c:93:2f:dc:c3:de:28:a3:ad:
         f2:04:90:89:25:36:d7:21:0b:a7:2f:e3:79:09:e2:18:b9:75:
         94:57:18:1d:81:4d:fa:10:49:82:fb:c8:fb:2f:e9:7e:88:77:
         78:56:bc:4b:10:64:2a:4c:a0:31:c6:8b:21:e4:3e:fb:3d:11:
         6d:4d:3a:c4:a5:30:52:6a:f4:eb:ea:15:0b:62:15:84:b3:88:
         f9:e6:0f:b6:96:1a:4f:5e:90:7f:a6:78:43:ce:92:f8:e5:37:
         1e:51:28:a2:be:97:b4:22:43:98:87:72:4e:04:9b:c6:9c:14:
         d6:7d:33:ae:42:9c:4b:2d:d8:9e:cb:f2:ec:2e:bd:4f:b7:6f:
         1b:6b:a1:65:72:8f:6c:d4:d4:bf:1a:14:83:c4:af:bc:fc:1d:
         3a:76:0a:f1:52:49:7d:27:cb:cc:36:ef:24:f5:11:c0:ff:8d:
         99:dc:4c:ab:23:9e:bd:a9:b5:61:68:dc:a4:28:d4:8d:73:d1:
         88:9e:aa:3f:b1:1a:f0:21:de:b5:0e:22:c6:e2:9d:f5:70:bc:
         72:b0:e4:63:c1:55:28:26:78:30:9d:3f:68:35:da:c1:eb:e2:
         b1:0d:76:f5:16:55:d6:0c:06:64:7c:59:38:98:a1:e6:00:99:
         be:6c:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org