Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a2f4baa4-8263-333c-9efb-893ae6635ee2.roa
File:                     a2f4baa4-8263-333c-9efb-893ae6635ee2.roa (raw, json)
Hash identifier:          TB90MyPJf87QRV2wsyK6/y33Z1/mIe+mN9OYbCgmX34=
Subject key identifier:   4F:78:A7:2C:2D:EA:27:49:E0:6F:D3:24:05:C9:F4:8E:DD:FD:D2:D6
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583A57923340AB15100BB0CEB6C0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a2f4baa4-8263-333c-9efb-893ae6635ee2.roa
Signing time:             Tue 22 Jun 2021 04:00:00 +0000
ROA not before:           Tue 22 Jun 2021 04:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:57:92:33:40:ab:15:10:0b:b0:ce:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 22 04:00:00 2021 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=00092e03-e330-44fc-9816-e81a617a36a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:19:89:a4:f9:f2:7d:bd:b8:f5:af:68:e9:
                    96:cf:a8:58:42:98:b9:5b:21:47:c7:1d:0c:c5:6b:
                    1e:80:30:0b:fc:92:af:7f:4d:72:65:86:c2:a2:94:
                    8a:2f:13:53:3f:e3:8b:26:77:33:4d:67:04:db:86:
                    65:11:b0:82:a8:f9:41:9d:75:53:59:3b:72:fe:06:
                    6f:b1:70:8e:c1:c6:aa:2a:ec:34:ba:8a:8b:f6:da:
                    48:16:55:4c:c7:a6:ca:e7:02:8a:1c:19:75:18:78:
                    9c:44:92:1f:aa:0f:4d:61:b8:52:35:29:a7:84:93:
                    e5:29:66:0d:4d:34:16:05:76:a7:c4:dd:84:e9:e7:
                    21:b8:6c:dc:51:53:78:ec:76:1f:ed:a4:14:56:47:
                    87:bb:85:bd:57:db:05:0d:c8:45:5a:66:26:d0:e2:
                    2e:2a:07:30:2b:b9:47:b7:28:fd:b2:6c:6d:0f:da:
                    01:fe:f4:3a:de:7b:39:e9:6a:55:99:8e:61:84:34:
                    a6:73:46:9f:7c:a9:49:78:d6:9f:18:87:19:bd:f2:
                    ef:a9:48:54:89:1c:12:1c:2d:63:88:af:41:5e:5c:
                    0f:bb:5d:85:1f:26:78:f5:27:7e:de:97:35:a3:ba:
                    99:3a:ec:a0:8c:1f:8d:6d:ac:67:98:81:46:a3:1c:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:78:A7:2C:2D:EA:27:49:E0:6F:D3:24:05:C9:F4:8E:DD:FD:D2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a2f4baa4-8263-333c-9efb-893ae6635ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:98:ea:41:17:4f:f3:db:65:74:e3:7d:dd:4c:b0:86:96:b4:
         fe:84:5c:40:a6:0a:b0:9e:52:f5:07:a1:74:fc:57:eb:a9:2b:
         d1:f7:b7:dc:8e:43:b5:2f:aa:6f:08:dd:0c:54:41:7a:f2:e8:
         b7:e8:af:78:9d:e9:b7:95:2e:36:c0:28:a4:15:ff:0b:f7:a0:
         eb:42:24:84:bd:f1:76:91:84:4a:14:9c:2d:57:30:5e:20:90:
         5d:be:86:58:70:1b:11:14:cc:bc:56:43:7b:fa:2c:c9:9c:f3:
         75:04:1f:44:1a:a1:78:11:1b:16:9f:47:67:88:25:85:e2:7a:
         74:3a:3e:49:d4:19:3f:17:e3:d5:74:a7:71:32:db:a1:24:d7:
         05:6a:e7:f0:b1:03:8f:e5:49:62:ba:ed:82:4c:8a:96:92:5a:
         51:45:1f:5e:d5:5e:c8:81:5d:e0:59:42:21:fe:e4:e4:a8:77:
         9e:b7:54:5b:0d:b6:17:26:0b:8f:fe:f7:74:5a:83:02:ed:e5:
         11:e4:12:1d:69:84:f3:23:88:3f:f0:bb:20:29:81:c3:96:72:
         9d:53:de:17:b3:5d:4b:06:ef:98:e5:bf:7f:93:ed:0d:32:09:
         85:ac:b0:28:84:4a:6e:e0:e5:d3:c8:e3:83:6f:61:6b:09:21:
         44:a6:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org