Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5d8e48a0-b765-3660-91c7-fc98dfba0199.roa
File:                     5d8e48a0-b765-3660-91c7-fc98dfba0199.roa (raw, json)
Hash identifier:          lCz+rsqRb7X8dNFCdBMtBBs7YnHRwYPKowKbcb0OJfQ=
Subject key identifier:   7D:58:75:BF:06:E9:C5:FD:05:5F:E5:68:DC:7F:71:0B:0B:1A:6D:E9
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1713B709AE5
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5d8e48a0-b765-3660-91c7-fc98dfba0199.roa
Signing time:             Thu 02 Apr 2020 15:09:27 +0000
ROA not before:           Thu 04 Apr 2019 04:00:00 +0000
ROA not after:            Wed 06 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        107.179.128.0/17 maxlen: 17
                          107.179.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:3b:70:9a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Apr  4 04:00:00 2019 GMT
            Not After : Jul  6 04:00:00 2022 GMT
        Subject: CN=92ec671b-2896-42be-86cd-24545b146895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:28:32:a4:02:e6:38:3d:66:b7:33:bc:0c:
                    5d:9a:a4:56:08:4f:f6:59:be:3e:1d:3c:5b:57:9a:
                    0f:43:49:a5:5d:8b:a9:d1:7d:37:2e:dc:dc:a4:eb:
                    6c:3d:0a:fc:c2:f7:0d:8c:40:56:c1:f5:5c:47:03:
                    3b:46:fd:e0:0c:b3:f9:63:69:9f:ec:5f:0f:ee:43:
                    d7:fa:96:8c:6a:a7:43:68:14:3c:5b:88:f8:f1:77:
                    66:ae:f7:c8:51:69:64:a9:07:cf:13:21:3b:96:5d:
                    f9:31:83:c0:07:76:66:18:0e:e0:4d:c8:c7:df:1b:
                    41:2b:67:fd:12:15:b1:5d:c3:4e:6b:ea:d7:23:86:
                    b7:79:a5:98:a9:5f:c4:8b:fd:7c:af:f9:15:6c:ae:
                    bf:97:a1:85:b7:40:81:ae:f9:98:bb:ab:6a:0f:26:
                    53:26:2c:ff:7a:d8:24:d3:e5:e7:d9:c8:20:ae:c1:
                    d9:1b:5b:ba:e8:0d:51:82:13:27:32:7e:d9:da:eb:
                    29:18:ab:d3:50:fb:19:18:34:9f:2f:e3:e0:a0:be:
                    ce:7d:5d:af:b9:52:d0:2d:7b:b5:f8:01:42:aa:83:
                    0e:bf:c1:ce:f2:d3:40:c5:ae:3f:b3:de:63:c8:22:
                    6b:c8:b2:3a:4f:81:12:f4:65:42:e8:94:7d:d6:f4:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:75:BF:06:E9:C5:FD:05:5F:E5:68:DC:7F:71:0B:0B:1A:6D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5d8e48a0-b765-3660-91c7-fc98dfba0199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.179.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:1e:f2:2d:79:25:a3:3b:dc:ce:24:05:81:7b:98:4b:b7:
         94:0d:dc:83:65:6c:05:f8:59:7e:2d:17:6c:3c:19:f6:bc:95:
         1f:94:41:4c:35:0c:75:b0:ba:76:69:b2:4c:43:13:a9:d1:a7:
         fb:1c:06:73:72:41:1b:f8:86:5f:0b:5f:b0:46:c6:15:b1:ea:
         71:9b:5c:fa:06:15:8a:f4:0e:fe:4d:6b:13:fc:0e:ef:7a:96:
         5b:98:42:91:d7:d0:52:36:22:59:1d:05:77:e2:b7:dd:b2:38:
         3a:36:6d:16:a7:a8:84:e6:c2:fa:05:d9:2a:4b:91:05:83:50:
         6a:af:86:7d:8b:ac:ec:6e:1b:cb:89:4f:10:01:92:69:cd:de:
         1f:ed:c5:c6:3e:b9:71:a9:c8:c2:eb:58:14:a2:52:40:43:01:
         c7:bc:4b:c2:8e:36:39:7f:ef:0f:4a:f3:da:c8:3c:c1:e3:13:
         fd:08:a6:e7:96:62:2e:46:f8:d0:a8:bc:01:3e:8b:9b:22:de:
         07:cf:8e:db:b6:b9:0b:e1:b3:81:35:a7:10:f8:e3:65:8a:82:
         a0:15:3a:39:04:59:b7:8b:1e:b7:32:d2:cd:6a:57:b6:f4:aa:
         22:f9:cc:c9:07:9b:8b:27:c9:5f:7c:fd:4b:8e:37:5a:9f:c3:
         97:01:3f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org