Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32b4c155-9749-3786-a325-368016cb3727.roa
File:                     32b4c155-9749-3786-a325-368016cb3727.roa (raw, json)
Hash identifier:          sSUQEskeIoAd+FH6sMK3IrKtqI4UUBdTDdFiqrCsl2U=
Subject key identifier:   A8:3A:AE:E2:14:3C:BF:8A:CF:6C:09:58:FF:2C:C4:53:9E:86:DA:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285841076DBC0796A33ECE4ECBB480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32b4c155-9749-3786-a325-368016cb3727.roa
Signing time:             Fri 24 Feb 2023 12:00:00 +0000
ROA not before:           Fri 24 Feb 2023 12:00:00 +0000
ROA not after:            Fri 25 Aug 2023 04:00:00 +0000
asID:                     31769
IP address blocks:        66.160.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:07:6d:bc:07:96:a3:3e:ce:4e:cb:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 24 12:00:00 2023 GMT
            Not After : Aug 25 04:00:00 2023 GMT
        Subject: CN=8cadceff-55d8-48c3-9556-b875f177e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:35:82:4f:4d:f3:01:cd:28:71:ec:4c:e0:
                    33:d1:1a:f1:c1:fa:97:f6:c1:cb:3d:05:ff:fd:7f:
                    02:d2:b5:69:aa:42:c4:50:b2:a4:96:1b:89:3e:ab:
                    81:f9:a1:fa:2c:be:0c:81:92:22:17:ae:b3:9a:81:
                    d1:aa:87:c2:61:5e:80:70:8e:ce:76:33:1d:2e:b4:
                    7d:12:1d:40:ee:bc:cc:0b:7e:28:7d:c6:14:ce:61:
                    28:39:e0:5a:25:0a:15:fc:c0:58:aa:80:3a:1d:57:
                    08:46:e3:37:99:7b:89:97:70:2a:ce:45:7e:fa:9b:
                    9f:73:82:0d:55:04:ef:b5:ed:09:a5:a6:a6:e0:f1:
                    f1:a4:eb:97:a1:9e:09:ef:fd:38:5b:31:8f:60:a6:
                    19:85:ea:cb:d5:c8:26:b7:fb:92:35:8c:ed:5e:98:
                    de:5b:df:f9:3d:75:6e:d3:e0:66:e9:d6:cc:a6:b9:
                    0b:5c:87:94:e7:99:33:5f:38:e1:f3:83:fb:56:5a:
                    a4:6f:d2:16:91:b5:62:c0:66:c4:7e:ed:c9:6f:42:
                    9e:60:0c:e4:d7:1c:e4:55:8b:d7:57:47:7f:c1:7f:
                    04:0a:6d:18:7a:4c:89:9d:eb:e6:94:c0:8b:6f:71:
                    b3:65:01:3e:22:15:3e:5d:fe:7e:97:17:8e:f0:64:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3A:AE:E2:14:3C:BF:8A:CF:6C:09:58:FF:2C:C4:53:9E:86:DA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32b4c155-9749-3786-a325-368016cb3727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c5:d5:84:cc:08:19:90:3b:54:7c:96:01:89:aa:2e:a4:8b:
         de:d7:4c:27:e3:bf:3c:82:ef:2c:f5:a0:a6:53:bf:e7:32:78:
         25:e7:a7:7d:a8:ed:d0:5c:44:aa:84:24:75:28:5f:01:37:0f:
         d7:22:0a:fa:1e:50:e8:8a:c5:41:f4:d1:aa:7d:ee:aa:4c:7f:
         7d:c6:9d:ae:b3:07:75:c1:d0:ef:9c:b3:7b:83:e1:f3:30:67:
         8d:6d:df:0c:67:39:0a:24:95:36:01:21:a7:67:51:ba:03:b4:
         41:5a:5d:7c:99:be:35:57:60:aa:7b:72:b5:92:62:b7:5c:69:
         8e:fb:7d:0b:99:ab:e3:8c:5c:3d:32:2c:a6:45:63:f5:25:45:
         d3:ad:75:3a:1f:11:20:3e:b3:61:d7:df:f4:36:45:24:9e:39:
         86:7f:f8:99:0a:52:22:e0:68:47:47:e7:87:de:3f:f9:37:14:
         3f:8b:df:0e:e5:d1:9c:b3:14:06:64:6d:94:9f:e7:9a:1a:b2:
         28:d2:e1:a5:8a:6a:23:2c:90:4f:ac:84:52:a3:56:bc:16:7c:
         ee:d5:9c:6e:c7:1b:ce:88:2a:aa:20:4d:4e:be:78:fe:f7:53:
         06:b4:ac:56:2c:4a:56:16:03:ef:44:f1:2a:da:cd:b7:2e:c7:
         c9:2e:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 04:12:47 2023 by rpki-client on console-ams.rpki-client.org