Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d9288f69-6412-3c73-9067-6c193570b0db.roa
File:                     d9288f69-6412-3c73-9067-6c193570b0db.roa (raw, json)
Hash identifier:          mAgQ9oTGVthNI2Vni54ak9fqRAON6b/JhTpGxEHnL2Y=
Subject key identifier:   08:88:4C:84:54:13:4C:29:81:4A:BF:F4:B4:75:B2:8B:D1:EE:EB:4D
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328576D51CC73C042CFC17132035764
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d9288f69-6412-3c73-9067-6c193570b0db.roa
Signing time:             Tue 31 Mar 2020 19:13:32 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        104.222.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:32:03:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=943a2e75-4d62-46c2-b8d5-c4b1f46aeccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:51:80:f5:6b:48:86:01:95:53:13:72:d3:
                    bf:ff:ee:89:d4:b8:12:0d:49:3e:fe:8e:f1:3f:72:
                    de:24:92:f7:eb:94:ab:0c:b8:81:51:4e:1b:d8:ff:
                    89:ec:cc:37:1d:1e:56:4e:2d:e2:f1:29:50:50:43:
                    7a:19:7b:1a:b1:be:5d:07:d5:0e:80:ab:fa:b9:91:
                    94:aa:28:77:26:af:3b:c3:ab:4c:ec:23:bc:0d:e4:
                    42:4b:94:14:d9:ca:30:f4:bb:00:2c:54:30:44:fa:
                    36:4d:4d:59:97:07:84:81:73:c7:22:88:dc:91:87:
                    65:8e:be:38:35:3e:35:66:30:24:e4:3c:28:a5:d2:
                    30:57:09:81:81:8b:f9:f5:90:c8:c1:8a:0c:16:d6:
                    95:d9:f6:b5:1b:a7:f0:d6:26:c0:cf:15:42:10:35:
                    1b:69:49:d6:38:00:fd:cb:ee:cc:63:b3:04:cc:51:
                    92:c7:de:00:28:8c:4d:18:45:9f:3b:95:43:33:6a:
                    54:47:78:64:aa:b8:ac:f6:32:4e:2e:d9:ed:6d:80:
                    9d:e6:3e:de:46:42:56:df:e2:bc:13:e4:25:7c:1a:
                    2b:6c:ac:08:bc:d0:b5:3a:f2:5f:d1:3c:db:39:12:
                    bd:4d:aa:f5:21:d9:88:72:ca:77:a7:29:0e:25:d7:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:4C:84:54:13:4C:29:81:4A:BF:F4:B4:75:B2:8B:D1:EE:EB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d9288f69-6412-3c73-9067-6c193570b0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.222.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:f8:eb:c2:06:4a:5b:ec:31:ca:3b:d4:62:13:3d:df:95:
         a5:fe:2b:0f:42:70:a8:66:81:4e:fe:f7:85:54:f8:31:1a:c9:
         f3:17:bb:6a:2e:ca:cd:83:50:94:39:ed:51:ee:b4:a6:c2:1f:
         3a:d2:4d:1c:20:7a:76:ad:ef:e2:9b:49:69:4b:86:be:b5:00:
         b2:8e:f1:ea:db:af:9a:0d:b3:6a:50:76:12:9d:b4:04:de:63:
         ba:37:80:77:02:38:4f:b7:5a:d9:5a:6e:f9:21:9b:d7:6e:15:
         c6:9f:89:4a:91:59:f0:33:0b:51:cf:5f:f5:ff:7a:d6:ca:f6:
         96:43:d2:95:f4:8b:46:92:19:d2:03:15:a4:92:7b:ff:22:d9:
         2e:e4:9c:78:9b:22:46:2f:89:f6:5c:5a:32:b1:e2:05:b7:88:
         d4:eb:88:ed:14:cb:eb:8c:68:61:c8:93:1e:d8:90:8e:a6:12:
         13:06:8f:c0:d9:2c:84:9a:71:4e:53:bc:83:4d:fa:20:9a:d5:
         b5:15:d2:53:8f:e2:e0:14:c0:24:dd:75:49:00:40:be:d2:50:
         ae:28:0d:f0:cc:02:c8:02:25:26:c0:54:ba:79:0d:25:20:48:
         d3:89:98:ff:fc:aa:0d:73:ad:65:26:8c:ae:ce:1a:3c:2b:d8:
         45:41:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org