Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/94639b6f-cb5a-31b3-a504-67608ba7cce4.roa
File:                     94639b6f-cb5a-31b3-a504-67608ba7cce4.roa (raw, json)
Hash identifier:          c0+rsDjgf6crwptMykLo2Hlq12XTaDlwD703Bxju5KA=
Subject key identifier:   0F:FD:40:E5:9C:D6:23:3E:14:D4:33:7F:A2:D6:C7:5D:38:9B:34:42
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285843A1154DC95824EA7F2E24F500
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/94639b6f-cb5a-31b3-a504-67608ba7cce4.roa
Signing time:             Sun 22 Oct 2023 01:00:15 +0000
ROA not before:           Sun 22 Oct 2023 01:00:15 +0000
ROA not after:            Sat 20 Jan 2024 02:00:15 +0000
asID:                     834
IP address blocks:        72.14.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a1:15:4d:c9:58:24:ea:7f:2e:24:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct 22 01:00:15 2023 GMT
            Not After : Jan 20 02:00:15 2024 GMT
        Subject: CN=377c9892-c3fa-47b0-8fa5-f28800c36e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:32:1f:e1:25:41:2c:37:15:80:2f:42:4c:
                    93:4d:0c:d3:e9:8d:41:79:d8:46:ad:1f:b8:6d:b6:
                    08:c2:d3:7e:0f:ae:26:75:47:28:d7:71:7c:69:d4:
                    b4:0a:96:b7:b4:54:60:ca:67:86:20:47:ef:41:4e:
                    0f:e3:ce:c2:23:9a:2b:eb:fc:86:25:70:27:66:da:
                    1f:43:9f:48:b7:3b:68:28:41:d6:0e:64:7c:b7:20:
                    cf:da:0c:de:20:99:1e:d8:49:14:89:79:fd:a9:8a:
                    79:c1:16:b1:70:26:b2:fe:64:19:f9:90:75:e1:5f:
                    c0:5b:27:7a:9f:6a:7a:2e:c0:c5:ec:b8:65:27:00:
                    3e:66:41:cd:81:d2:55:68:b8:55:d5:c2:a3:72:c5:
                    16:36:85:e6:85:66:da:3f:54:53:aa:19:86:10:70:
                    2b:b4:24:8a:1f:97:64:8a:ef:30:4c:e7:16:6d:e6:
                    a3:ae:d4:2c:1e:70:92:97:80:86:0a:76:bb:ae:63:
                    84:0e:c5:6e:73:19:0d:6b:5c:9c:6a:85:79:38:ea:
                    a5:5e:d4:80:91:6e:c7:2b:9a:ba:bc:d5:5f:6e:db:
                    b0:3d:67:74:56:d8:cc:17:96:10:7e:ae:ba:e3:4a:
                    cb:de:70:63:eb:be:3c:1f:04:d8:49:0d:78:59:3c:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FD:40:E5:9C:D6:23:3E:14:D4:33:7F:A2:D6:C7:5D:38:9B:34:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/94639b6f-cb5a-31b3-a504-67608ba7cce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4a:10:d8:0f:10:92:d9:d5:fb:90:ce:87:7d:ed:d2:2a:5b:
         f9:55:21:79:1b:e6:cf:21:f3:00:ae:34:5f:44:e3:10:44:66:
         f0:19:b0:26:7a:8c:f1:2f:c1:0f:96:2a:64:5c:c9:64:06:9b:
         51:62:f0:ac:5b:b9:cd:8e:47:a1:22:49:a1:44:e9:36:6b:2f:
         17:19:bb:90:b8:76:f7:56:f5:4f:e8:36:86:b4:2d:bc:54:70:
         fa:03:af:ba:99:6a:ce:18:ad:0c:2b:c0:87:12:89:cf:18:02:
         e1:31:cb:b2:a2:bc:a2:7e:60:d3:f0:5b:fc:7a:e3:1d:39:0d:
         9e:35:d7:47:32:84:7c:b8:bf:3f:4d:4a:c4:17:9f:cd:24:e6:
         44:29:2f:2f:0c:97:c6:5e:38:b8:63:ce:33:5a:77:fe:45:eb:
         5e:c0:94:71:c5:db:0d:b0:36:6b:d4:bf:52:f6:69:ad:36:73:
         0a:f7:00:cc:e1:a0:f8:f6:0f:ca:ed:e4:08:19:48:bd:7d:83:
         4f:89:a5:ec:15:68:c2:4f:d6:03:04:5f:f5:24:a6:51:a6:ef:
         3a:c1:c8:55:cc:08:83:9b:1f:cf:e7:40:d6:8b:4c:79:05:ce:
         b0:d5:7f:5d:0e:b5:72:ff:98:03:77:b0:8b:19:25:bb:65:6f:
         22:a3:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:06 2024 by rpki-client on console.sobornost.net