Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/2efa9ff5-5a92-3bfe-9e3b-c27babdac644.roa
File:                     2efa9ff5-5a92-3bfe-9e3b-c27babdac644.roa (raw, json)
Hash identifier:          rI8n8CUMONmqyo5EfN5j5OGYJLKdupyUU4aQ3Dk/wcw=
Subject key identifier:   36:67:F6:66:FB:06:CD:DB:4F:A9:98:DB:A9:1A:6C:5A:51:0A:C3:E3
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F43285838C0A7BFE1DB5DC03F8364D880
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/2efa9ff5-5a92-3bfe-9e3b-c27babdac644.roa
Signing time:             Mon 02 Dec 2019 05:00:00 +0000
ROA not before:           Mon 02 Dec 2019 05:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        161.199.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c0:a7:bf:e1:db:5d:c0:3f:83:64:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: Dec  2 05:00:00 2019 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=4bae14f9-e8aa-473f-99ea-ce2534131d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:f9:b5:04:07:fa:4a:36:68:3c:d8:26:ac:
                    f4:0f:64:30:5a:e8:f3:aa:8f:c6:1f:7d:e8:34:0b:
                    b5:7b:2f:b8:34:ea:c8:79:0e:5d:df:b0:2d:b3:4a:
                    85:d0:fa:73:1e:89:2a:5f:45:27:79:e5:86:8d:fb:
                    3d:aa:23:a9:e4:99:e2:4d:12:e0:d2:cb:1c:8c:d9:
                    9f:af:22:b7:7e:f7:9b:f1:6b:7f:10:bd:f3:80:31:
                    91:b4:17:d7:fe:3b:d8:27:48:cf:b8:4d:ad:bd:2c:
                    b9:6f:56:7a:2f:60:89:0d:0c:3a:97:b7:44:41:0e:
                    35:4a:11:7c:8f:9e:05:d1:99:59:29:fa:a8:f8:ed:
                    75:5c:a4:a8:0c:d9:4f:08:d0:52:e5:04:8c:7e:89:
                    0b:9a:ed:62:66:f5:e5:09:92:78:65:30:a2:dd:23:
                    1a:6e:c8:62:c5:11:33:a0:4b:71:27:2a:95:b5:fa:
                    bc:6d:55:fd:03:56:44:34:e6:d1:64:39:f7:8c:48:
                    c7:49:a5:1d:46:97:5a:66:55:6b:99:32:a2:05:cf:
                    50:93:ed:82:f9:cb:ab:34:f0:2b:ea:8a:f4:7e:d7:
                    9d:cb:67:71:5e:77:33:f6:2c:e0:0d:06:5e:14:d0:
                    3a:b0:19:00:32:a4:a8:e2:8a:00:39:73:3f:b1:9a:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:F6:66:FB:06:CD:DB:4F:A9:98:DB:A9:1A:6C:5A:51:0A:C3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/2efa9ff5-5a92-3bfe-9e3b-c27babdac644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:37:fe:96:f3:b1:f6:c7:8f:eb:7d:75:c3:8d:74:fd:3d:9f:
         a6:bd:f0:b1:1c:63:67:1a:7f:e4:59:5f:aa:94:ad:7d:dc:47:
         67:6b:71:10:96:69:9d:35:0c:44:d9:08:d3:7c:c4:03:fd:4c:
         e9:31:1e:16:bd:e1:5e:68:d2:85:95:6c:55:5f:fc:0b:5a:f8:
         3a:b3:7f:08:4a:d8:6e:70:6b:58:29:00:f1:e8:58:a4:22:3f:
         c4:0c:98:20:08:18:f9:ef:58:2d:69:a4:67:7a:90:fc:2e:36:
         2e:60:77:04:76:7d:34:f5:a1:d9:e4:37:45:8d:c4:c3:2d:7f:
         41:19:ae:44:aa:c2:26:9a:e7:0c:d5:fd:c5:d6:fe:04:b4:ac:
         56:51:e0:04:01:b8:68:27:d6:c0:91:c2:1c:76:89:17:3d:4b:
         7e:29:a9:72:54:a7:c0:df:41:3f:d8:03:cc:4a:c2:8e:85:35:
         03:47:86:15:a5:20:44:9c:b0:11:f6:0a:6c:a5:5d:b0:a1:f1:
         e5:f0:26:e0:1e:fa:c2:5a:2f:7e:ea:b0:28:bc:3a:32:99:63:
         83:6d:15:76:a2:4d:ef:d4:b2:4d:e9:d6:b0:eb:56:1b:12:a6:
         a0:1f:ea:e2:42:a4:05:af:3f:88:39:83:9a:66:84:5d:ab:db:
         05:c5:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-ams.rpki-client.org