Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/43affd27-4c4d-3f9a-863e-f356e3365e5f.roa
File:                     43affd27-4c4d-3f9a-863e-f356e3365e5f.roa (raw, json)
Hash identifier:          8oFJUgUYZ8skAJcDV3DOdhdY63OaRt9fKrDkaMYxbLA=
Subject key identifier:   B4:C4:0C:DC:F9:20:56:24:2F:C2:3A:BA:02:61:52:D0:93:B1:40:B4
Certificate issuer:       /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial:       010D0C9F43285838278DACDFAD6D3FB059114B00
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/43affd27-4c4d-3f9a-863e-f356e3365e5f.roa
Signing time:             Thu 03 Dec 2020 05:00:00 +0000
ROA not before:           Thu 03 Dec 2020 05:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        204.75.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:27:8d:ac:df:ad:6d:3f:b0:59:11:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
        Validity
            Not Before: Dec  3 05:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=c2cdc609-408b-407a-92a8-62f5675a6519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:22:52:92:dd:1e:ba:b5:eb:c2:b3:6e:06:
                    94:a1:b5:89:76:93:47:9b:2b:df:9f:62:f8:9d:17:
                    33:1b:7f:bf:44:7e:78:75:63:51:b0:90:bc:3e:b3:
                    d0:ff:4e:ef:08:6b:9c:33:8c:c2:1a:76:4c:5e:57:
                    a6:39:b3:e2:dc:f4:d9:dd:53:eb:4a:e4:6a:e1:97:
                    45:1c:a3:02:ee:5b:1a:5f:83:65:96:40:b4:83:6c:
                    1c:57:72:21:16:cd:06:ca:a1:45:d8:28:9a:06:d3:
                    28:ef:25:bb:66:31:44:c6:29:b7:0b:ac:54:98:b9:
                    ff:79:cf:da:aa:65:77:c5:d4:17:7e:4a:68:c1:ce:
                    97:81:20:da:fc:b7:ab:25:c9:9b:d1:d0:e4:2e:4d:
                    f4:77:48:10:46:e3:be:5f:f3:09:8e:c2:8e:60:97:
                    95:71:4c:ed:e4:ff:27:cc:84:11:ec:a4:53:77:35:
                    69:ea:ab:06:d6:ee:23:c6:96:d1:44:e0:0d:02:9e:
                    bd:dc:a3:7a:a2:b3:94:9f:7b:01:08:dd:53:6d:82:
                    45:a6:aa:48:e2:bb:7e:3e:68:88:9a:cf:45:2a:74:
                    d9:c4:47:a2:92:03:4d:09:02:6b:1b:cd:6a:48:d4:
                    61:ad:e2:06:40:11:d9:3c:bf:0e:41:57:a2:45:a6:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:0C:DC:F9:20:56:24:2F:C2:3A:BA:02:61:52:D0:93:B1:40:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/43affd27-4c4d-3f9a-863e-f356e3365e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl

            X509v3 Authority Key Identifier:
                keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.75.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:8b:6d:6f:5a:59:5d:96:d3:95:4f:55:6e:02:d1:24:e4:
         4b:eb:1c:64:fb:17:dc:ed:6b:4c:d3:0e:08:45:2b:5d:5c:35:
         dc:ed:e6:b3:1e:36:6b:2e:3f:d4:12:35:db:a4:71:1e:cb:6d:
         36:ca:15:24:5c:92:8f:02:d3:b9:be:15:93:f2:a4:d0:36:1e:
         8c:bd:37:ce:ec:f1:51:af:31:ba:0e:54:a5:33:98:70:9e:e6:
         4d:c5:74:8a:87:11:83:f9:fe:ae:de:e3:21:6f:f1:6a:12:10:
         38:6b:a0:5c:0c:db:4a:58:fe:5a:74:40:eb:8f:d9:ba:17:08:
         24:a1:58:b7:44:88:1a:42:69:b1:e0:4e:be:4e:c9:22:1c:bf:
         5e:31:c1:8f:c1:9f:b2:01:5f:af:65:4b:1e:0b:51:fe:b1:fa:
         b9:bd:26:96:0e:bc:58:fb:65:8d:c3:fa:fd:b3:37:3f:bd:b9:
         77:85:b5:ce:02:02:77:b4:60:0e:1e:38:6d:3d:bf:38:43:e3:
         49:48:cb:96:21:2f:9f:55:eb:74:a6:36:34:5f:0a:df:41:c8:
         3a:69:91:b0:b5:a2:5a:23:3d:74:fd:0e:77:79:72:3a:4b:4a:
         1e:25:0d:d9:62:fd:77:c8:62:86:fb:e8:31:ae:ed:a7:71:aa:
         d5:c8:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org