Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/636c4f41-9d64-3e34-83ce-b1887a97e0dd.roa
File:                     636c4f41-9d64-3e34-83ce-b1887a97e0dd.roa (raw, json)
Hash identifier:          vKCh9g0KROKw1J9xZsKNFqR6ufUvyDnegeEJEw94VAQ=
Subject key identifier:   B4:E1:F8:2A:E1:78:61:A3:99:FC:1A:2F:19:74:56:D2:3C:17:79:F5
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285844CDA5C7326F58E384643CC840
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/636c4f41-9d64-3e34-83ce-b1887a97e0dd.roa
Signing time:             Tue 06 Feb 2024 16:53:52 +0000
ROA not before:           Tue 06 Feb 2024 16:53:52 +0000
ROA not after:            Mon 06 May 2024 15:53:52 +0000
asID:                     54600
IP address blocks:        67.214.180.0/24 maxlen: 24
                          67.214.181.0/24 maxlen: 24
                          74.80.144.0/24 maxlen: 24
                          74.80.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cd:a5:c7:32:6f:58:e3:84:64:3c:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Feb  6 16:53:52 2024 GMT
            Not After : May  6 15:53:52 2024 GMT
        Subject: CN=4bd9d5f2-780d-4cb6-a9e0-06ee9f19e3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:28:03:b3:6a:c0:69:34:ee:bd:29:07:eb:
                    a6:65:a2:d9:f5:61:4b:1a:2a:2f:8d:93:7e:4f:33:
                    98:66:cd:23:6a:86:fa:f2:bb:c7:5d:5d:01:e4:98:
                    e0:f5:3f:b4:94:dd:04:63:b5:c0:ff:a7:4c:24:1d:
                    08:c4:a7:ba:0c:96:ef:a2:38:e6:03:8a:ff:e8:0b:
                    6c:a4:6f:c4:bd:cc:6b:fa:89:ac:3f:4e:a0:64:4c:
                    1f:5f:95:5e:f9:16:da:0c:31:15:e5:3d:53:b7:19:
                    ed:f8:be:bc:ee:f9:c2:f7:d1:cc:2f:ff:7c:f8:99:
                    44:45:44:99:e6:86:3c:46:4e:10:10:53:15:09:a3:
                    b6:a5:22:91:41:b5:1b:6e:20:2c:a5:66:4e:58:e6:
                    11:9c:70:ea:ef:72:74:ee:3d:98:48:15:61:ee:95:
                    84:97:2e:f0:70:ba:96:c7:a8:61:d8:77:c7:30:56:
                    d3:61:48:cf:91:b5:ce:89:c7:76:2d:6d:f8:11:54:
                    94:bc:23:7f:9b:22:80:d8:ad:9e:b2:c7:6a:66:88:
                    f9:9e:61:2f:bb:2a:a4:01:66:48:0c:8e:66:40:91:
                    d3:43:87:f4:0e:84:e2:2c:4a:24:33:e8:3b:64:ee:
                    5f:b2:f2:71:b9:bc:61:67:b7:1b:18:b7:d3:ee:91:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:F8:2A:E1:78:61:A3:99:FC:1A:2F:19:74:56:D2:3C:17:79:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/636c4f41-9d64-3e34-83ce-b1887a97e0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.180.0/23
                  74.80.144.0/24
                  74.80.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:c8:f6:10:30:9f:7c:3a:f8:95:ba:3f:e7:8b:e0:73:6c:
         df:2b:34:9e:82:b8:6d:ae:b4:1f:28:d7:92:ce:12:35:11:94:
         d8:d0:ae:cc:86:2a:9a:e4:06:a7:6a:9d:7b:10:41:1d:37:fb:
         63:04:b3:a3:84:bf:07:80:38:57:89:7a:d3:7d:d5:23:dd:f4:
         ab:64:de:cc:bf:86:f4:f6:3b:33:33:fb:10:3e:22:7d:14:2f:
         1c:3d:55:09:40:58:15:da:bb:05:0c:ac:a0:5f:f8:37:6c:24:
         f7:82:1f:80:e8:37:fe:2f:47:41:31:50:b6:25:91:d5:bd:8f:
         55:eb:ce:52:06:b3:62:0d:93:9d:bb:2e:9e:35:f0:49:9e:91:
         81:95:56:76:70:a3:10:e6:88:27:56:77:46:3d:28:ca:19:73:
         fa:e4:71:9d:62:05:94:21:b7:48:29:b7:32:96:f0:49:26:74:
         e1:d1:b7:6c:6a:94:c6:e4:bc:5c:62:c3:e0:32:b1:86:e3:29:
         67:58:6a:64:c7:33:e1:00:fd:e5:32:49:65:6d:19:30:e4:8e:
         82:34:74:22:ed:f1:0d:39:7c:b2:50:c0:1e:12:6b:4f:82:18:
         f2:d5:9c:d7:67:43:6c:f2:61:f8:f2:e8:51:d5:ca:f1:f6:fd:
         43:1c:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org