Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/90fadff8-e399-3b61-aa3f-a0bcb303b988.roa
File:                     90fadff8-e399-3b61-aa3f-a0bcb303b988.roa (raw, json)
Hash identifier:          dacg5S7kYWQfmpL9+fhG0t4BDdoF9zmz+KFG1bF0r2A=
Subject key identifier:   F4:7C:C4:88:22:C3:3C:5A:1A:4F:64:11:9B:21:86:ED:E8:9C:DE:C2
Certificate issuer:       /CN=6b40b2f9-8053-4405-96a0-dd415cb12c1a
Certificate serial:       010D0C9F4328576D51CC73C042CFC170C0BFFD3F
Authority key identifier: D2:DA:F2:C4:09:2B:FC:A1:08:8D:75:32:29:8D:BE:F2:04:EB:D3:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/90fadff8-e399-3b61-aa3f-a0bcb303b988.roa
Signing time:             Mon 09 Mar 2020 19:22:52 +0000
ROA not before:           Mon 09 Mar 2020 04:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     397672
IP address blocks:        23.173.224.0/24 maxlen: 24
                          2602:fe06::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:c0:bf:fd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b40b2f9-8053-4405-96a0-dd415cb12c1a
        Validity
            Not Before: Mar  9 04:00:00 2020 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=2352a479-1700-40e7-96b0-59314b5c72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:97:ab:cc:05:37:bc:9b:cc:78:c4:4f:e5:82:
                    8a:9b:9e:b9:08:ef:35:10:69:6c:aa:47:ed:fa:9a:
                    60:f2:a5:01:36:47:2b:58:f1:86:80:ac:b8:0a:57:
                    79:8e:0d:00:9f:10:20:be:7f:19:83:98:c6:fe:ee:
                    3f:8c:fe:76:29:c8:2c:a1:6f:86:36:56:5d:5b:ba:
                    2b:e4:9b:1b:cb:97:d8:80:d8:b7:8b:c1:0b:66:fd:
                    ce:12:6b:71:0b:a1:68:fd:9c:7b:15:61:29:79:f2:
                    7a:fd:52:74:ab:17:ef:c1:96:cf:76:9d:08:36:5a:
                    56:63:f2:af:86:04:b0:d6:73:4d:80:ab:e3:ea:c7:
                    c2:d9:fe:81:d6:a6:f6:ef:2d:c7:a3:ae:ce:09:0d:
                    cb:56:bd:81:3a:73:3f:f4:a9:2d:fd:90:4d:0e:8d:
                    b7:33:af:5f:41:77:d4:41:e9:1c:bd:a0:81:cc:d1:
                    cf:5d:60:37:91:84:fc:5d:63:92:20:eb:7a:df:80:
                    fb:78:9e:ec:bb:54:ba:aa:dc:8e:67:aa:0c:56:7e:
                    76:6e:c8:70:66:b7:67:7f:9a:e2:23:2f:7d:25:8f:
                    d4:36:d1:17:41:e9:9c:04:ff:77:39:75:c6:98:19:
                    b3:1d:84:20:39:e7:af:89:8a:9d:43:fc:b2:18:6c:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:C4:88:22:C3:3C:5A:1A:4F:64:11:9B:21:86:ED:E8:9C:DE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/90fadff8-e399-3b61-aa3f-a0bcb303b988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.crl

            X509v3 Authority Key Identifier:
                keyid:D2:DA:F2:C4:09:2B:FC:A1:08:8D:75:32:29:8D:BE:F2:04:EB:D3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.224.0/24
                IPv6:
                  2602:fe06::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:e0:76:55:17:c4:3c:0d:31:92:7e:9e:be:a7:90:24:7a:
         f8:cd:f3:2b:8a:3f:dc:db:43:88:71:a7:7b:1c:ac:86:a6:e1:
         2c:5e:59:7c:0f:55:c9:27:d9:d4:7c:7f:a9:67:a5:9c:9d:b1:
         45:ae:2b:1b:6a:9e:a1:48:00:e8:87:e8:75:06:c6:9d:39:85:
         cc:c2:9c:8f:12:bf:1a:b2:84:e7:8b:53:f0:ff:42:f4:cc:8f:
         d3:44:a4:55:33:d6:29:49:d1:e5:5c:c7:ad:33:03:9e:d4:c7:
         3d:b9:b8:0d:f5:c4:56:fd:21:ea:5a:8b:99:1d:52:2c:e7:3d:
         dd:56:c4:c2:e5:28:f1:2e:7e:82:8f:52:ee:8e:97:7c:0b:4f:
         d7:f8:34:a3:2b:f8:84:a6:02:f8:51:51:ea:09:41:dc:ea:90:
         1c:23:ec:dc:15:f5:17:d0:23:6d:30:1f:fc:ed:63:7f:b1:04:
         8b:23:3d:b6:62:3b:a3:07:92:4c:7f:51:7d:00:b4:26:86:cc:
         96:4f:0d:fc:2b:fe:47:aa:d1:a6:5f:ec:c8:2c:ea:e9:aa:ce:
         24:59:0e:07:2f:82:03:d0:b3:10:d2:4b:25:98:a3:16:b6:e4:
         4b:2b:93:ed:b2:62:2c:f4:41:df:1a:c2:bd:75:d1:ab:9f:25:
         38:61:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org