Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/fb15fb28-cca0-3c7a-841e-fba27b6e58b9.roa
File:                     fb15fb28-cca0-3c7a-841e-fba27b6e58b9.roa (raw, json)
Hash identifier:          mChzFbxKxAR1CzR8qKLZh5TiH0f72keiUvVNAgolNZ8=
Subject key identifier:   7C:53:DE:EC:96:92:44:D9:34:E0:C5:C6:07:25:49:90:3A:E4:5F:4D
Certificate issuer:       /CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
Certificate serial:       010D0C9F4328584363AA50BEC22A8E506DF4A000
Authority key identifier: C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/fb15fb28-cca0-3c7a-841e-fba27b6e58b9.roa
Signing time:             Sat 30 Sep 2023 01:00:22 +0000
ROA not before:           Sat 30 Sep 2023 01:00:22 +0000
ROA not after:            Fri 29 Dec 2023 02:00:22 +0000
asID:                     208287
IP address blocks:        216.9.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:63:aa:50:be:c2:2a:8e:50:6d:f4:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
        Validity
            Not Before: Sep 30 01:00:22 2023 GMT
            Not After : Dec 29 02:00:22 2023 GMT
        Subject: CN=27dc5cfb-dbea-4108-beaa-a103276847d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:37:a9:d8:0d:df:12:1f:25:74:47:67:a8:
                    d4:4b:45:8e:11:fb:32:75:f6:b9:e2:fc:bd:d1:3b:
                    7a:65:2c:c4:a1:b9:55:cc:f6:f6:55:aa:4d:4d:42:
                    11:27:a1:ac:8b:1a:0c:db:42:97:3e:3f:05:2b:b2:
                    af:28:8d:9c:06:a8:c5:65:3a:2b:5c:cd:8e:f3:55:
                    34:12:c4:f9:76:7e:ef:c1:5a:b2:51:47:c4:4d:27:
                    65:91:99:87:9b:d2:ef:e3:2b:c4:a6:97:01:dc:3a:
                    74:97:02:12:64:4e:da:ed:e4:85:61:29:90:f0:81:
                    f4:a3:22:b0:d7:16:74:be:f2:1e:06:c2:7f:c7:5e:
                    8b:86:32:16:a8:d0:84:a2:d6:0b:89:e7:7a:0b:5f:
                    15:42:53:aa:06:90:e6:90:0a:65:87:0a:82:fb:fa:
                    bc:13:fa:fa:da:5c:e6:41:88:ba:85:92:53:59:66:
                    43:83:63:cb:63:34:a4:61:73:4f:e0:b2:f7:7b:83:
                    8b:8e:0e:cf:ff:90:2c:69:7f:92:49:59:3c:07:4d:
                    4d:34:12:fc:37:bd:f5:ee:df:a3:3d:c6:33:6d:aa:
                    96:9e:78:2e:c4:72:e8:f7:16:49:b0:be:89:31:34:
                    19:ea:9a:75:a7:a0:ba:54:2a:d6:18:24:4b:4c:36:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:DE:EC:96:92:44:D9:34:E0:C5:C6:07:25:49:90:3A:E4:5F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/fb15fb28-cca0-3c7a-841e-fba27b6e58b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl

            X509v3 Authority Key Identifier:
                keyid:C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:5a:75:55:e9:f5:d7:51:37:3e:b0:fd:96:bb:5b:22:81:
         7f:8b:42:26:7f:7b:95:37:43:37:92:b3:a5:d0:e8:67:07:f1:
         64:37:b1:f4:f4:bd:7e:74:d6:15:13:69:41:13:f8:c1:d4:45:
         4b:e6:76:f1:ba:19:d3:44:fc:ab:c9:2a:56:45:c7:57:04:8e:
         70:f6:59:bb:d7:20:09:dd:19:ef:5b:94:39:6c:ef:47:54:f1:
         4c:d4:01:49:c7:36:ed:c3:7a:58:3a:39:ea:b2:81:4c:75:2c:
         8b:5f:59:fa:0c:d4:69:85:a1:ae:47:d7:d9:00:b7:6a:43:1b:
         1d:88:e0:f0:53:16:b9:4f:16:ed:95:8f:a7:1e:2f:7c:b6:48:
         e8:fd:b7:7c:78:bc:0d:6b:01:25:2d:52:19:2e:e7:85:b8:8e:
         c0:25:0f:d9:79:2d:46:27:bb:57:64:14:7d:54:5b:5a:f2:2c:
         3e:f7:50:87:1a:e6:25:cd:c2:88:d4:20:6c:8d:a5:40:fb:8c:
         4d:21:93:bb:ca:93:89:e0:74:ab:1c:6d:64:48:b9:12:ff:56:
         45:0b:d1:c6:71:69:98:36:ed:32:98:9f:04:7a:a0:76:e0:67:
         45:91:57:32:71:6f:50:2a:ae:e0:f4:ec:7c:5f:88:5b:bb:6a:
         a8:c1:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org