Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/dcacf580-a42a-3b1c-a601-b10246c50426.roa
File:                     dcacf580-a42a-3b1c-a601-b10246c50426.roa (raw, json)
Hash identifier:          gWb+icYYB0nMmNMFX/wr+oyF0w7o2kn7M5Qcq8DmtiM=
Subject key identifier:   CF:0E:C4:FB:89:3E:65:BA:69:A2:AE:2B:63:1C:0D:D0:AE:FD:34:8B
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328576D51CC73C042CFC1715E652A34
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/dcacf580-a42a-3b1c-a601-b10246c50426.roa
Signing time:             Thu 09 Apr 2020 10:03:40 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Wed 13 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        164.153.130.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5e:65:2a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : Jul 13 04:00:00 2022 GMT
        Subject: CN=af247000-ce70-4619-93c0-a1f1a9c46e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:37:c8:46:bf:42:b3:5a:b1:60:6d:bb:6c:
                    dc:de:dc:06:95:d9:a7:c3:f7:f9:ee:01:74:22:84:
                    a0:d9:4c:31:60:38:0b:b0:0b:e2:04:d3:c8:a6:ed:
                    67:50:3b:e8:a2:5a:47:53:5e:82:ee:ad:69:f8:50:
                    a1:fb:f7:ba:34:ac:63:44:8f:73:a6:ea:76:e8:0a:
                    13:96:5b:a2:b5:3e:89:9c:78:cd:be:ae:29:6a:22:
                    04:44:16:b7:a8:8d:e8:e8:b9:0b:b2:7b:f3:2c:a6:
                    7f:2f:d2:eb:82:13:7c:59:69:64:13:c4:a3:57:20:
                    e5:51:fa:da:90:f5:23:6c:eb:98:d6:a5:db:e4:95:
                    9e:a2:9e:ec:9e:5b:4e:5b:fd:22:00:6f:0e:0d:b4:
                    b8:df:ea:e6:42:16:a9:10:98:44:55:62:c8:51:15:
                    5b:ca:55:b9:fc:d4:fe:1c:54:37:af:02:d5:6e:87:
                    44:ad:a6:e1:50:b2:c7:70:39:2d:d0:b8:7a:a1:8c:
                    f6:bc:cc:7f:cb:18:18:65:25:c0:e6:f0:3c:1c:2a:
                    66:d3:5a:e7:b9:c4:c0:13:95:65:c8:87:72:74:90:
                    b4:5d:ae:c1:5d:ff:f1:cb:3e:86:c7:8c:ba:02:84:
                    4d:f6:3d:da:b6:30:43:37:3a:22:a5:7b:0c:aa:0a:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:C4:FB:89:3E:65:BA:69:A2:AE:2B:63:1C:0D:D0:AE:FD:34:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/dcacf580-a42a-3b1c-a601-b10246c50426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:75:10:01:a3:d3:17:2a:1a:9a:e2:32:0c:bf:48:64:6b:
         11:91:52:7c:63:3e:3c:63:c0:13:83:95:9a:95:b9:4f:51:e1:
         9d:11:46:32:20:80:a7:c9:6b:d4:50:c7:83:f0:2f:37:38:e5:
         b9:59:0b:aa:bf:18:45:cb:cc:f5:41:25:48:8b:ea:ac:31:ce:
         6d:0c:15:ba:55:28:45:10:78:e8:4f:35:3a:42:d5:c6:71:b0:
         e2:76:68:6d:f0:5f:65:1c:7f:dc:c4:f4:95:7a:c9:65:6f:77:
         4b:c9:93:67:cd:8e:74:66:2c:00:af:23:eb:d6:bf:b2:96:19:
         e0:aa:22:a5:76:df:5f:28:de:e3:cc:9b:a0:c5:16:0f:ca:2e:
         e4:60:5c:82:eb:28:51:60:56:bf:4d:28:6c:9e:7f:11:45:c2:
         9e:08:24:e1:59:d4:b0:cb:01:68:6c:90:b8:3e:4b:70:fa:bd:
         09:68:ac:01:0c:bf:cb:1b:78:b6:c5:78:16:68:59:4d:4b:61:
         4d:29:33:ec:df:2b:a9:6d:18:98:39:07:5c:e5:1a:e4:a5:09:
         e5:84:c0:98:17:51:04:7c:33:6e:1c:d2:f2:2a:7f:3c:aa:2a:
         91:c4:5e:52:75:c4:27:1d:2f:23:58:21:f6:c8:14:b6:ea:85:
         03:83:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org