Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/c0368022-16d2-3499-8dee-4f2c4d9d2e87.roa
File:                     c0368022-16d2-3499-8dee-4f2c4d9d2e87.roa (raw, json)
Hash identifier:          mnLT9tgQJPnSsFCD5owNuI+ydXhuo542mlhVHlNN7J0=
Subject key identifier:   AA:70:A1:34:5F:0E:7C:A3:BC:09:A8:85:85:E4:7D:D6:C9:E4:1D:7F
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584424E721CAAF50D15685B92F60
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/c0368022-16d2-3499-8dee-4f2c4d9d2e87.roa
Signing time:             Fri 08 Dec 2023 06:13:56 +0000
ROA not before:           Fri 08 Dec 2023 06:13:56 +0000
ROA not after:            Thu 07 Mar 2024 06:13:56 +0000
asID:                     6498
IP address blocks:        75.78.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:e7:21:ca:af:50:d1:56:85:b9:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Dec  8 06:13:56 2023 GMT
            Not After : Mar  7 06:13:56 2024 GMT
        Subject: CN=05fb821a-23f3-4ca6-b6d2-e49c9f9a6306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:cc:36:e9:63:47:5d:ea:91:45:9b:45:18:
                    7c:14:70:eb:7c:19:91:b2:da:ef:2b:5e:7d:f3:17:
                    21:2e:69:d1:5e:9f:ab:b7:af:35:46:bd:8e:3e:44:
                    61:41:d6:43:7a:55:22:c8:6a:ae:f9:dc:85:40:af:
                    ab:5f:77:c5:8c:47:06:02:b3:7a:7a:56:38:51:4d:
                    21:95:05:f9:39:98:15:1b:25:47:0b:73:07:1b:be:
                    13:2d:ec:70:45:d1:8a:6e:88:08:64:bc:8c:51:b0:
                    7b:93:bc:7d:28:12:c3:3c:e4:ef:48:30:ee:21:ed:
                    73:f7:cb:c6:bb:83:9f:5e:8b:cf:06:3a:47:35:74:
                    50:53:44:8f:7d:d1:b9:3a:70:14:b9:26:eb:73:aa:
                    7c:25:96:3d:08:40:6e:4f:c8:59:8c:65:f9:6f:05:
                    06:88:ef:e1:d3:04:2c:34:1b:af:32:64:91:c9:ac:
                    24:ea:15:aa:b6:45:00:d7:a2:26:e6:c4:ac:fa:94:
                    13:aa:96:b5:18:57:c4:0b:74:29:4f:24:90:64:fb:
                    e7:f1:50:63:e5:20:22:2c:26:d0:e8:54:b3:86:84:
                    29:46:47:f6:02:62:a0:a6:66:74:d9:4d:25:6d:9b:
                    23:4b:6c:09:2d:33:d5:4a:fa:13:15:1d:9f:9d:33:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:70:A1:34:5F:0E:7C:A3:BC:09:A8:85:85:E4:7D:D6:C9:E4:1D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/c0368022-16d2-3499-8dee-4f2c4d9d2e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:80:fb:ca:a4:e6:f2:a5:3f:ef:6a:fe:05:3f:39:f3:2a:d0:
         39:2f:64:86:47:f5:87:d6:e0:7a:e6:d1:e3:7f:ab:21:5f:a0:
         6e:01:1b:ca:7c:54:24:49:b6:fc:61:b6:4e:4c:67:ab:87:e8:
         27:15:3c:08:0c:37:7e:34:66:a2:ca:b2:59:14:0f:a2:fd:c8:
         99:8e:6a:ff:f2:2a:60:4c:85:40:08:6b:da:75:1c:96:7e:16:
         96:04:a0:bb:9a:51:04:d8:b8:bb:63:42:0c:22:61:21:00:19:
         3a:b5:1d:84:94:b5:cf:43:6d:02:f9:fa:d6:71:ae:c5:74:82:
         30:8e:53:a3:8e:08:75:bd:67:1e:01:eb:08:80:2c:20:25:c9:
         3e:36:4d:38:97:f4:dc:05:6d:5a:69:75:ff:98:91:7d:f9:ba:
         e0:03:8e:0d:87:c5:46:6a:a7:35:dd:32:36:0e:b2:29:95:e9:
         0b:26:bf:7b:f2:d0:e5:1c:49:ef:c1:0c:4f:02:62:bc:3e:31:
         2a:ba:d0:d1:d0:ca:14:af:17:9b:24:91:1a:6c:df:f8:dc:c9:
         d3:3c:d4:21:47:76:6b:ae:18:80:b0:98:49:7a:26:e6:2b:54:
         4d:46:c7:6e:2a:24:28:4f:75:20:2e:6d:cf:4f:5a:1b:d9:a9:
         95:68:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org