Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9f2cfe3a-ee1c-3988-99c0-dee897918060.roa
File:                     9f2cfe3a-ee1c-3988-99c0-dee897918060.roa (raw, json)
Hash identifier:          Dbi/Wmk5Oqq9tlqfht+HxaAWFUTkKuJmYJADnqGp4MY=
Subject key identifier:   F6:52:DB:91:3B:30:26:44:27:E7:CE:9E:A2:DD:F8:0F:53:76:41:FE
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1713174D81C
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9f2cfe3a-ee1c-3988-99c0-dee897918060.roa
Signing time:             Tue 31 Mar 2020 16:37:53 +0000
ROA not before:           Thu 04 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        23.233.0.0/17 maxlen: 17
                          23.233.0.0/18 maxlen: 18
                          23.233.64.0/19 maxlen: 19
                          23.233.96.0/21 maxlen: 21
                          23.233.104.0/21 maxlen: 21
                          23.233.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:31:74:d8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Apr  4 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=fc7edd18-1a8c-4449-a1e9-934dcf462b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:ce:56:c3:cc:3e:44:73:04:76:dc:29:4e:
                    7d:10:9c:a5:4e:94:60:3c:8d:4a:e2:a9:b6:c7:1b:
                    59:16:33:65:5b:ef:dc:88:7c:84:b9:eb:ea:8e:19:
                    bc:70:dd:dd:8b:fe:b9:2b:88:13:99:0b:cf:66:38:
                    5f:09:ce:4e:38:a5:ef:5e:49:d8:dc:e6:e1:15:63:
                    05:2b:4f:a4:55:6f:28:55:fc:a6:44:93:bb:f5:85:
                    f6:9d:00:a6:81:2b:a0:9e:45:78:48:de:aa:be:49:
                    35:47:8a:64:c6:06:1c:d7:16:64:8e:d7:0d:24:b4:
                    39:e4:0b:a2:cb:02:08:ea:45:da:ad:55:e4:a3:04:
                    90:03:93:1a:a6:91:27:2a:b7:d3:48:fa:d2:ca:25:
                    f5:f9:33:23:db:85:6e:bc:b0:1e:7c:b0:a3:e1:9f:
                    5d:76:cd:db:97:25:ba:7c:8b:f9:ce:20:f4:a1:31:
                    a2:34:b6:81:9d:3d:44:24:c5:99:8b:e0:b4:43:bb:
                    a7:0c:94:18:14:4d:e0:5d:50:02:42:26:f0:8c:d0:
                    2d:aa:27:de:1e:d0:a6:69:3f:01:5f:c6:e1:8a:c8:
                    9b:83:c6:a3:6c:2c:d4:c9:a7:b4:bd:1e:44:94:0b:
                    5e:a1:e5:dc:a1:71:3f:e1:41:47:6c:41:77:0e:5c:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:DB:91:3B:30:26:44:27:E7:CE:9E:A2:DD:F8:0F:53:76:41:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9f2cfe3a-ee1c-3988-99c0-dee897918060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.233.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:f2:67:5d:5a:49:b8:a3:f3:e2:e7:fa:96:d3:73:a1:d7:
         70:c4:74:20:d0:a5:a4:8d:80:33:02:5b:95:d3:98:c9:4a:1f:
         d1:17:dc:c8:b7:c5:88:2c:64:20:85:e9:27:49:98:37:0f:e9:
         6f:b5:c3:5a:10:fc:ad:56:48:6e:41:d9:71:19:25:67:6f:87:
         55:51:8f:6b:22:11:36:8d:6f:87:24:a9:cb:0f:23:0d:29:97:
         11:50:33:f8:fc:27:9e:b8:02:0a:d6:6a:03:0b:31:e0:3d:14:
         64:e9:9f:bb:9f:74:2e:1d:70:83:3e:0f:90:ca:fd:23:35:22:
         a0:ca:8f:74:50:16:54:92:28:50:a0:83:43:d4:bb:27:eb:1a:
         5c:7d:fb:9e:e6:51:01:db:97:67:e3:b9:29:9f:4c:ae:7d:24:
         7d:78:d9:bf:b4:37:e8:d7:30:97:9f:fe:1b:ec:26:ee:09:d6:
         4f:45:0f:3c:2d:46:b7:31:a9:25:38:e7:00:8d:f3:e7:4b:61:
         df:39:1b:58:bb:df:ed:0f:60:e0:ad:2c:21:89:bb:77:e0:2b:
         bb:dc:c9:96:b8:0a:01:c1:4c:f3:99:35:b1:88:9a:87:57:f5:
         87:10:47:ca:91:35:d8:f9:1c:0b:33:18:a8:85:a0:a8:73:49:
         00:28:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org