Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d393ea9c-bb9a-372d-b2ae-dc4d3ba32bec.roa
File:                     d393ea9c-bb9a-372d-b2ae-dc4d3ba32bec.roa (raw, json)
Hash identifier:          dAbTa2eB5d+t4GG1A8WsDX08gemINkzU6EJ5vsz0uJ4=
Subject key identifier:   2B:58:BC:12:36:46:E3:C1:56:78:C3:56:BD:56:2A:DC:7F:63:3E:78
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC170784FBA2F
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d393ea9c-bb9a-372d-b2ae-dc4d3ba32bec.roa
Signing time:             Mon 24 Feb 2020 17:47:35 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     13760
IP address blocks:        170.249.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:78:4f:ba:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=bf98a60b-b4bd-47bb-a771-48918d982311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:2b:f2:e9:48:93:79:74:21:cb:cf:04:7b:
                    f5:5a:85:b0:ff:05:fa:f9:ee:0f:27:28:77:4e:ec:
                    40:5f:ce:58:e7:fa:24:cb:f2:8d:ee:00:63:fe:25:
                    12:15:f2:d6:e3:75:ca:1d:d1:6e:31:36:1c:1d:3f:
                    6d:a3:0c:00:a1:4b:71:0a:b5:27:14:75:c2:3c:bd:
                    8a:a1:a9:f3:d5:33:26:94:43:06:a6:99:73:9e:48:
                    5b:cb:f5:16:61:ee:c4:99:bf:26:48:d8:c6:f6:87:
                    6d:bc:4a:17:01:c4:56:66:4b:f8:1e:a7:5d:25:b9:
                    67:fa:31:8d:c0:9c:be:64:21:09:f5:fb:5f:fc:da:
                    25:25:bd:27:e5:bf:a6:e5:fa:64:ec:c7:e4:b7:38:
                    52:50:a9:c8:ed:cc:81:12:61:48:12:06:49:9d:0e:
                    66:9a:23:b1:2b:0f:18:25:a1:e2:06:1f:a0:ec:b3:
                    05:b5:94:16:ca:8f:c4:41:49:86:71:b5:69:26:9a:
                    1e:3c:7e:ba:06:a3:1f:fd:58:d7:f7:a5:1a:f2:50:
                    e2:c6:cf:c7:81:9f:4c:13:2c:ee:fd:b0:3f:76:f5:
                    78:3e:2b:64:50:a1:86:0a:3e:cd:d7:fb:dd:f8:82:
                    cb:90:4a:24:7d:ff:9b:cb:dd:27:44:52:56:15:3b:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:58:BC:12:36:46:E3:C1:56:78:C3:56:BD:56:2A:DC:7F:63:3E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d393ea9c-bb9a-372d-b2ae-dc4d3ba32bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:97:d5:04:97:72:0c:c2:b5:c9:73:ca:9b:74:cc:8b:03:26:
         04:d9:7c:8b:46:64:c1:40:bc:2e:c9:96:34:ef:e3:2a:68:30:
         53:ba:d6:81:9b:44:50:04:46:2e:0b:de:41:bf:10:4d:26:be:
         1d:28:11:2c:3d:4e:cf:3c:d1:cb:fc:a8:cb:fc:8c:41:7c:4b:
         1b:9f:e4:26:25:26:55:1a:5d:b1:0e:e1:81:59:9e:e7:2c:1b:
         6f:a8:0f:c5:c1:28:57:99:f4:7b:59:87:44:f5:e7:e0:b9:78:
         be:1d:9d:28:5c:57:83:e4:fc:62:8d:53:40:11:90:11:ce:2d:
         69:1e:f2:fc:9b:78:9a:62:ae:09:f2:a0:22:00:c2:33:34:ea:
         81:4e:cc:6f:f9:ed:bf:8c:07:3b:38:1c:0e:e1:c1:9c:00:8f:
         12:dd:d7:9a:20:7b:b8:e9:21:60:ce:36:70:cb:37:79:56:95:
         a4:6f:29:79:74:17:fb:37:70:46:fb:9a:2b:b7:9a:31:75:06:
         4b:6c:bc:77:28:33:eb:17:17:96:3b:6b:4d:b7:9e:01:c9:3f:
         61:3f:2c:66:a1:2c:db:e0:44:73:8d:4d:bb:29:dd:d2:49:8d:
         9f:fc:ec:ca:d8:8b:6d:1e:82:39:74:3e:14:94:e6:58:d3:86:
         38:63:39:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:04 2024 by rpki-client on console-ams.rpki-client.org