Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/53c8693c-fc0d-3991-9ac2-00a75bea0b7d.roa
File:                     53c8693c-fc0d-3991-9ac2-00a75bea0b7d.roa (raw, json)
Hash identifier:          r55UkdxZo3TVolGgHs/tGiksZYbvGqNpoPyJdSrR7tc=
Subject key identifier:   38:12:B1:A3:0A:33:6A:80:E1:3F:12:BF:1E:9D:A7:A0:1D:AB:33:26
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285843AD97E83F03EAFE99C30066C0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/53c8693c-fc0d-3991-9ac2-00a75bea0b7d.roa
Signing time:             Thu 26 Oct 2023 12:33:07 +0000
ROA not before:           Thu 26 Oct 2023 12:33:07 +0000
ROA not after:            Wed 24 Jan 2024 13:33:07 +0000
asID:                     7018
IP address blocks:        162.255.46.0/24 maxlen: 24
                          206.212.241.0/24 maxlen: 24
                          206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24
                          206.212.249.0/24 maxlen: 24
                          206.212.250.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24
                          206.212.252.0/24 maxlen: 24
                          206.212.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ad:97:e8:3f:03:ea:fe:99:c3:00:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Oct 26 12:33:07 2023 GMT
            Not After : Jan 24 13:33:07 2024 GMT
        Subject: CN=395c333f-a33e-49ce-bdef-1be0b6c4a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:33:e9:0c:c1:e4:af:6b:f1:8b:f5:3d:fe:
                    61:81:d7:e1:6a:ff:ef:e7:91:03:fd:30:66:2e:35:
                    16:17:b7:69:45:de:eb:1f:8c:d5:bd:18:8b:21:15:
                    01:a8:bf:4d:a4:2e:61:0a:4a:2c:34:7c:eb:1c:03:
                    7e:8a:19:64:7e:53:28:21:eb:74:81:44:52:6b:f5:
                    0d:73:35:f5:26:4f:ac:e6:62:fc:f2:8a:d4:e1:e2:
                    4b:c0:6a:17:9a:c7:bf:10:1d:36:5f:a5:b3:58:22:
                    38:26:50:be:8f:b7:e1:28:df:2e:9e:b1:6d:7a:d4:
                    39:d2:7f:c1:1f:a7:dc:03:cd:04:0b:df:5a:b4:e9:
                    54:a4:d1:0d:91:fa:b3:d0:0a:fe:27:0d:30:5f:b3:
                    1b:b2:ce:67:8f:39:99:b6:2e:cf:3c:58:e5:2b:8a:
                    df:ff:8c:6e:73:02:48:03:51:15:53:f3:65:02:51:
                    d9:7a:34:de:35:2b:c5:3f:b4:60:43:da:ec:00:f3:
                    f4:15:b3:de:06:68:8d:2c:c3:2d:22:0b:6b:37:1f:
                    1d:b1:41:47:8d:a9:92:70:9e:ce:ff:18:62:c2:dc:
                    3c:79:9e:4c:7e:ea:5c:f1:be:63:26:8a:66:87:9e:
                    cd:ac:51:27:df:5f:fe:1e:dd:53:77:bb:42:ff:ac:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:12:B1:A3:0A:33:6A:80:E1:3F:12:BF:1E:9D:A7:A0:1D:AB:33:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/53c8693c-fc0d-3991-9ac2-00a75bea0b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.46.0/24
                  206.212.241.0/24
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24
                  206.212.249.0-206.212.252.255
                  206.212.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:5d:0e:f0:10:32:3f:68:a9:1f:1e:b4:38:96:05:c1:cb:
         02:22:ce:7e:63:8e:e6:23:82:49:2f:df:86:e7:29:b7:0b:c4:
         61:78:c0:b1:99:43:b3:e8:1d:e6:89:66:25:88:27:de:b7:34:
         d5:96:a8:3c:fd:71:3d:50:c0:5e:97:f1:0d:60:ba:62:b6:99:
         5b:d1:fb:5b:ca:dd:a1:f3:8f:f3:3d:ce:87:59:55:bd:f0:de:
         7a:52:98:79:12:35:c9:52:6b:9e:bd:56:aa:5b:19:cd:e1:90:
         be:00:69:fa:f2:4b:ef:05:ff:73:49:d2:88:d8:fb:49:4d:e9:
         67:6c:71:0c:c5:1a:e2:c2:9b:72:5e:1e:66:de:7d:b7:99:e8:
         93:48:1f:5a:21:1f:b7:24:d8:25:dc:33:07:8e:5c:ce:43:96:
         c7:04:11:0b:51:60:85:29:23:c4:5f:ff:ce:cc:1b:26:08:ab:
         b0:3e:67:d9:4a:a0:bd:50:06:3c:b5:99:16:58:b2:1b:87:f2:
         10:79:75:4d:76:c9:de:5b:64:b7:0c:2e:5d:be:c7:52:12:12:
         f3:ef:f4:c7:88:19:7b:16:bf:09:a3:9a:eb:49:56:22:00:6e:
         fe:06:69:b1:bc:f6:62:77:e6:b7:b2:83:b2:ec:fa:bb:cf:c3:
         69:9b:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:04 2024 by rpki-client on console-ams.rpki-client.org