Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/c97f520f-67cd-3343-b3c5-e206920e4d20.roa
File:                     c97f520f-67cd-3343-b3c5-e206920e4d20.roa (raw, json)
Hash identifier:          PvLYpUbZ6HRnTQrIBnxXvNzhXXT0NL2qdx8QmJcUazY=
Subject key identifier:   A7:E7:6E:C2:05:3D:3A:73:4D:FC:8B:5B:04:17:CD:43:06:50:5C:FA
Certificate issuer:       /CN=8b7c3819-41ee-4cfb-b484-d4f3f475a19b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1714BACE300
Authority key identifier: 6A:78:CC:5F:32:F9:9C:E9:37:D5:0F:A8:FA:96:DE:8D:BA:70:2C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/c97f520f-67cd-3343-b3c5-e206920e4d20.roa
Signing time:             Sun 05 Apr 2020 18:49:13 +0000
ROA not before:           Thu 02 Apr 2020 04:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.15.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:4b:ac:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7c3819-41ee-4cfb-b484-d4f3f475a19b
        Validity
            Not Before: Apr  2 04:00:00 2020 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=08965f47-7494-4542-b455-761639453d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:d0:37:ba:fa:90:f2:79:d3:88:73:88:cf:
                    27:21:df:dd:47:1b:c3:b2:ef:90:9e:02:7b:9b:fc:
                    5b:da:23:e2:c9:64:30:9e:24:7c:8f:90:b0:fd:11:
                    7c:dc:5f:33:33:d8:9a:55:1e:96:87:7f:f7:7e:3e:
                    5f:67:b8:d3:5c:ed:28:c2:ff:eb:cf:9d:6b:28:27:
                    06:75:98:95:57:fe:71:44:53:4c:4c:28:78:61:be:
                    cc:c6:18:c0:70:77:b3:b4:68:17:84:b1:0a:c7:59:
                    7d:68:ab:ec:ab:80:06:25:3f:54:9c:44:4e:1a:c6:
                    d3:19:08:96:f9:43:20:26:3b:6b:01:be:fe:ff:90:
                    1d:68:84:d7:41:3f:87:20:20:1f:b8:62:3b:0f:47:
                    fe:d4:4c:fd:18:33:27:60:b2:a0:74:a6:57:96:42:
                    33:6d:a3:ba:0a:fa:b1:cd:19:fb:1a:eb:52:8e:a5:
                    7f:f7:b4:dd:1e:ad:67:ad:3c:bf:af:5e:75:49:25:
                    65:0a:e3:4b:03:89:7d:43:53:39:3a:cc:1d:8f:94:
                    d9:52:c9:d8:75:f3:04:29:d3:07:26:d7:db:47:0d:
                    da:77:b5:39:bc:8d:06:18:19:25:90:b4:c3:32:44:
                    2b:2a:4f:3f:36:ed:79:24:2b:c8:bf:a2:3e:0c:e9:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E7:6E:C2:05:3D:3A:73:4D:FC:8B:5B:04:17:CD:43:06:50:5C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/c97f520f-67cd-3343-b3c5-e206920e4d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:CC:5F:32:F9:9C:E9:37:D5:0F:A8:FA:96:DE:8D:BA:70:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:dd:23:3b:3c:73:b4:f5:e3:0d:d1:a1:75:13:9f:fd:72:
         f1:53:b3:84:cc:c7:2c:ac:e1:31:11:99:c5:d3:66:1c:51:93:
         7e:ae:82:ef:7e:c2:86:7d:15:e3:f9:f2:9d:22:46:fe:c9:7a:
         e6:7e:5f:49:8d:15:3c:54:8c:92:09:bb:d1:03:f2:04:5f:a3:
         63:bd:58:7a:d9:43:df:d5:6e:44:a5:f6:8f:8d:63:20:c0:6f:
         0c:a1:da:93:af:e5:03:9b:f5:fc:2b:d6:2d:56:5e:37:40:b2:
         0a:7e:2a:22:a0:30:d9:b3:d5:a6:74:9b:44:7a:cd:2d:b7:61:
         b3:ea:0f:af:f5:69:9c:bb:7d:4a:92:16:a9:4d:3e:64:79:49:
         95:e1:40:7f:5e:33:4c:cb:a8:a7:a6:24:57:81:4c:52:9b:34:
         93:3f:9e:5a:ab:c6:8a:e5:ff:65:8c:4a:58:c2:89:33:77:ed:
         a9:c6:b7:4c:30:5b:18:69:fb:9f:75:37:a2:f8:4e:b2:6c:23:
         9d:a3:16:8b:cf:67:43:a4:2e:f9:bb:c1:5d:89:68:04:90:d6:
         7e:cd:0b:66:0b:b3:84:19:ef:9f:b3:aa:10:ae:33:a2:91:8c:
         21:b6:bc:c5:d4:12:de:02:3e:ed:37:9e:d8:20:d4:6c:c2:01:
         50:ce:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org