Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2c12a239-4860-3b65-a833-3467507e98ec.roa
File:                     2c12a239-4860-3b65-a833-3467507e98ec.roa (raw, json)
Hash identifier:          inbMtU2XeLCVoXC1CvWvyNw0inZ8qGh/smHYOkwt2sE=
Subject key identifier:   9F:40:57:00:8A:33:27:D4:80:EA:47:26:5B:20:9C:71:CD:8A:08:3C
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285841EBCC4DCF17ED78799665B040
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2c12a239-4860-3b65-a833-3467507e98ec.roa
Signing time:             Thu 18 May 2023 09:44:56 +0000
ROA not before:           Thu 18 May 2023 09:44:56 +0000
ROA not after:            Wed 16 Aug 2023 09:44:56 +0000
asID:                     16509
IP address blocks:        169.132.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:eb:cc:4d:cf:17:ed:78:79:96:65:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May 18 09:44:56 2023 GMT
            Not After : Aug 16 09:44:56 2023 GMT
        Subject: CN=698212c4-93d5-49db-abc0-6745b005c222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:af:9d:26:64:c5:e5:dd:37:91:1e:71:82:
                    61:2f:cf:a7:a7:c2:48:3b:83:32:45:2d:a4:46:28:
                    da:ec:0c:f3:7e:68:b3:0c:5e:2f:76:46:d4:2d:7b:
                    cd:87:78:1d:b0:83:43:d3:a1:49:8b:69:a9:c9:64:
                    f6:6b:f6:9f:25:c8:df:00:17:a3:e9:85:e4:e3:47:
                    1e:19:ea:dd:6c:23:c6:cf:09:99:3f:3f:58:df:8c:
                    7a:eb:3c:70:bf:15:72:6d:82:e7:7c:85:5c:40:c7:
                    3f:e5:30:71:d5:77:db:b4:19:bf:fc:6b:58:b8:1d:
                    89:b6:fe:0b:3e:c3:46:a4:10:78:ce:8a:cc:ad:4f:
                    9f:44:56:ab:2a:44:31:62:94:4c:83:9a:95:21:9f:
                    6d:87:f4:a3:1f:b2:24:13:16:52:72:e0:fe:2d:a7:
                    2a:0f:1e:a3:6b:07:39:8f:ea:3e:69:34:60:b5:e8:
                    e4:f2:db:79:20:dd:7f:f4:00:ca:1e:ab:78:f7:ed:
                    11:f8:dd:64:b7:dd:60:91:76:51:9c:11:ec:c9:8d:
                    f7:88:bd:56:e9:10:ff:27:5e:80:98:20:11:90:35:
                    b7:0e:fc:02:ac:e8:c8:43:ea:4b:3f:54:73:ae:12:
                    5f:aa:59:74:39:60:93:a6:cf:8c:30:92:34:38:0a:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:57:00:8A:33:27:D4:80:EA:47:26:5B:20:9C:71:CD:8A:08:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2c12a239-4860-3b65-a833-3467507e98ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.132.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:a2:5d:3d:72:cc:ec:0c:85:31:e6:55:fd:60:86:8d:86:
         fe:38:aa:ff:f8:99:72:4a:c5:c8:fc:79:ba:ba:78:47:02:82:
         d6:e1:f8:df:0f:65:be:da:c0:d8:f4:a6:57:eb:c1:41:e1:d5:
         20:ee:e8:66:81:98:5b:ae:97:9e:21:be:ba:31:fb:9f:6d:70:
         1d:1c:f6:32:be:5c:ec:af:0b:33:21:d0:5e:46:ed:16:c2:44:
         af:38:b9:64:b9:92:23:85:b3:c2:60:2a:6c:5c:a3:6e:58:4e:
         46:45:25:1c:ef:04:9d:c5:98:b7:d7:0a:2c:46:1e:13:8d:a8:
         5c:d8:47:f3:96:c7:41:82:15:e3:95:60:92:8c:52:d5:f7:fc:
         01:a1:66:e1:23:88:43:4c:6a:2c:2b:8c:ce:58:c8:e9:50:8d:
         69:81:3c:3a:59:e5:fa:c9:13:84:61:28:bf:f3:cb:47:0c:24:
         dc:16:de:ab:94:d2:b4:12:ff:4b:d4:91:c6:3c:be:2c:4d:d9:
         07:b0:7c:f7:6a:ce:8e:3c:b6:0b:2b:54:d9:2d:f6:47:15:66:
         49:d4:30:67:4f:25:67:d7:5d:59:b0:bb:c9:b8:d0:c4:e3:05:
         e5:34:f5:0d:b5:de:76:08:26:79:6e:78:32:a6:b3:23:40:b6:
         11:e9:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org