Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/3be0664c-8450-34f4-922c-9361049585b6.roa
File:                     3be0664c-8450-34f4-922c-9361049585b6.roa (raw, json)
Hash identifier:          vLMjc4Ox2hOCrTuaxSC+vTkfikVtvkk1DVfBhSIYHAc=
Subject key identifier:   E1:FB:1E:B7:4F:E3:F9:88:03:07:9F:00:26:5B:F9:8E:91:D2:52:76
Certificate issuer:       /CN=78a35d59-5267-4ec6-965e-2346bd05cddd
Certificate serial:       010D0C9F43285844D62074AB7612B58C1B4A6000
Authority key identifier: 91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/3be0664c-8450-34f4-922c-9361049585b6.roa
Signing time:             Fri 09 Feb 2024 17:47:31 +0000
ROA not before:           Fri 09 Feb 2024 17:47:31 +0000
ROA not after:            Thu 09 May 2024 16:47:31 +0000
asID:                     10750
IP address blocks:        216.146.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d6:20:74:ab:76:12:b5:8c:1b:4a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a35d59-5267-4ec6-965e-2346bd05cddd
        Validity
            Not Before: Feb  9 17:47:31 2024 GMT
            Not After : May  9 16:47:31 2024 GMT
        Subject: CN=af4c5807-9f1b-45b1-b4a1-6beda859dd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:b6:1e:26:2c:c5:95:f6:07:47:95:ec:a5:
                    24:83:e4:00:ba:9a:37:37:18:08:1b:1c:18:20:26:
                    a7:47:24:86:54:51:47:00:01:25:5f:60:f1:a9:fb:
                    c6:c3:ef:60:f0:03:d0:67:34:6c:21:8a:7b:b3:64:
                    df:32:98:1f:67:f2:b2:36:d3:29:5e:88:15:01:1c:
                    53:7d:1f:1c:ce:89:46:0e:c7:1e:66:52:b6:b0:60:
                    c0:19:1e:1f:f4:ca:ae:66:70:b8:51:9d:bf:1f:ec:
                    d0:c2:0e:d4:6f:70:95:1f:bd:27:34:8b:18:95:95:
                    97:c1:c9:47:93:a1:ad:4a:05:ff:2d:59:e7:df:73:
                    8d:31:dd:ff:e1:a0:08:a2:ce:48:30:b8:7d:ba:fd:
                    fc:85:a7:31:70:cd:13:6e:a7:7b:22:3e:f2:39:a3:
                    08:8a:a6:3b:a1:9a:45:8f:65:db:f9:63:c1:f6:19:
                    6c:cf:a7:2a:cd:76:b1:93:24:a9:ef:32:71:3d:67:
                    53:1b:fe:62:64:42:1e:9f:7e:59:0f:a1:22:1e:f0:
                    74:4e:9a:9f:3c:14:ce:37:ed:50:f3:13:ca:33:ac:
                    6a:f4:4e:dd:18:7f:0b:0c:9e:2d:90:3a:93:cd:bc:
                    6e:18:db:4b:90:34:00:90:90:62:70:ef:e0:ac:a9:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:1E:B7:4F:E3:F9:88:03:07:9F:00:26:5B:F9:8E:91:D2:52:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/3be0664c-8450-34f4-922c-9361049585b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl

            X509v3 Authority Key Identifier:
                keyid:91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2f:05:00:3d:de:bd:e2:a0:a1:3c:da:75:09:32:59:00:a3:
         b4:27:04:9e:a4:a5:cd:61:0c:47:cc:3e:e0:2f:fd:6f:50:65:
         1f:6e:54:61:a0:0a:1c:4d:55:45:e3:46:d7:bc:9a:28:b3:2f:
         ff:74:56:33:76:f6:d5:76:6a:f1:30:2b:86:05:91:8a:ab:dd:
         c6:9d:0f:f3:ac:fb:d9:31:6c:f8:10:42:ab:53:71:18:b2:94:
         a4:b4:04:ff:53:07:81:e7:41:ef:ee:d6:73:b5:93:fd:1d:15:
         b2:a0:db:ec:cf:0e:25:00:00:5d:64:2f:01:66:83:6a:b7:1c:
         39:6e:95:c0:38:1e:c7:dd:00:f3:e3:3b:47:38:d2:bf:c2:98:
         c9:fc:7f:f6:7b:2c:e1:14:d6:5b:73:2e:d5:e0:6e:c6:37:36:
         a3:d7:98:af:e5:cc:97:79:f0:85:7a:4c:6f:39:75:68:79:64:
         cd:3f:91:73:09:d6:cd:ec:7e:84:8a:57:23:a1:be:d9:18:75:
         2f:41:a6:ff:9e:57:a1:3e:55:32:69:6a:d1:75:47:00:d6:86:
         a4:c2:aa:78:80:80:a9:01:3b:f3:2d:7a:f2:9a:fb:46:f4:43:
         ea:0e:a5:e9:0f:b7:9e:09:66:10:e2:7f:80:5c:a5:f0:64:a1:
         ac:68:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org