Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/67d29b15-15c6-34f0-ba89-ff5b56c66a99.roa
File:                     67d29b15-15c6-34f0-ba89-ff5b56c66a99.roa (raw, json)
Hash identifier:          LpYDczwLCts0GH3PNhEybMG5aFrNRu3X1h5ivaJkQ+0=
Subject key identifier:   BA:F4:EC:DB:E9:BF:53:A7:5D:2C:0C:89:62:80:C1:24:7D:B1:A0:EC
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285841E47198597E26A01F1AEB0944
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/67d29b15-15c6-34f0-ba89-ff5b56c66a99.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Sun 30 Jul 2023 01:18:34 +0000
asID:                     174
IP address blocks:        74.80.147.0/24 maxlen: 24
                          74.80.146.0/24 maxlen: 24
                          74.80.153.0/24 maxlen: 24
                          74.80.188.0/24 maxlen: 24
                          74.80.152.0/24 maxlen: 24
                          74.80.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:98:59:7e:26:a0:1f:1a:eb:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 30 01:18:34 2023 GMT
        Subject: CN=dac73f82-bc1c-4e43-9fdf-e0541e5a075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:e6:a9:5e:d8:f1:21:62:5b:64:b9:38:9f:
                    dd:0e:0f:ac:b5:9e:78:1d:7a:48:ea:c9:dd:7a:21:
                    f6:a3:4f:2c:06:05:05:73:2c:30:2a:ed:2e:c9:fc:
                    98:bf:9d:52:32:3b:d3:f3:63:db:bb:88:8a:a3:3c:
                    83:7e:81:af:c1:3c:12:e0:04:d5:8c:29:2a:ed:e0:
                    9d:42:12:76:b3:fd:eb:a2:fa:dd:9e:08:85:64:c6:
                    a3:55:d8:24:a2:78:5f:cc:b0:db:79:20:8e:17:97:
                    92:9e:d9:bb:c2:49:17:2d:ad:db:aa:5f:70:6f:c8:
                    c4:b2:88:cf:fa:30:ef:bb:48:46:5c:a2:6c:74:11:
                    bf:58:90:ff:09:80:65:02:13:3b:a7:ab:58:47:c6:
                    2e:5f:4b:7b:04:3a:8b:6f:52:a2:1c:20:e3:bd:c4:
                    07:52:b9:a6:0f:20:10:3f:32:38:77:4d:53:57:fd:
                    e8:b5:04:38:c6:3e:ca:68:50:a2:29:e0:fe:f2:52:
                    57:4f:bb:23:a8:54:1a:55:c8:e0:fe:6e:9d:24:ce:
                    a9:de:69:4b:46:6c:f2:22:02:d9:62:8a:69:13:e8:
                    34:30:46:50:01:ea:ff:cd:5f:82:6e:bb:cc:92:9d:
                    84:9a:6d:54:09:b6:2a:73:a7:0c:61:91:2d:bc:2a:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:EC:DB:E9:BF:53:A7:5D:2C:0C:89:62:80:C1:24:7D:B1:A0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/67d29b15-15c6-34f0-ba89-ff5b56c66a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.146.0/23
                  74.80.152.0/23
                  74.80.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:39:6f:c3:59:7b:00:a4:7c:29:fd:ad:ce:d4:6d:a8:4e:90:
         33:29:83:25:75:9c:f4:b2:17:ae:00:90:cf:d4:47:55:b6:46:
         10:12:82:7c:67:2f:40:42:52:82:a2:5b:83:60:e8:26:03:c4:
         26:1d:4c:73:22:c4:2a:e1:29:c9:2d:f3:b7:8b:cb:cc:74:b0:
         7f:2e:d1:ea:92:ea:84:ca:87:9b:78:d6:d8:91:e1:17:4c:07:
         09:e6:e5:c0:e6:9e:e0:b4:0b:e9:4b:6b:37:43:21:ae:7e:23:
         51:b8:1f:51:0e:46:c4:3c:ed:2b:0a:ef:e0:d5:05:90:75:00:
         ff:f2:e1:03:32:0f:20:b9:03:8c:7c:a0:93:e0:8a:7e:36:6d:
         3e:a2:b7:05:8d:d6:0f:94:da:58:49:e3:25:41:be:ec:c8:df:
         c1:ff:a9:d5:55:f1:be:f7:ad:f2:ec:a6:13:47:9a:26:66:f2:
         82:07:5c:c0:9f:eb:65:44:3e:90:2f:38:0e:31:31:32:57:5a:
         60:6c:94:c6:93:1c:ee:ca:7d:a2:d5:fb:78:4c:93:53:f2:46:
         f4:bd:78:69:b0:51:09:77:87:98:b1:97:75:06:ae:a9:98:95:
         0a:1a:bb:c1:44:23:3d:6a:7f:f6:63:e2:20:84:a9:97:fc:33:
         5b:a7:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org