Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/ccc908a6-b3bf-3874-8a22-fcb3b07b85be.roa
File:                     ccc908a6-b3bf-3874-8a22-fcb3b07b85be.roa (raw, json)
Hash identifier:          pf00TVVyj5jgKnrOgL2jTkv2w+URCVjzSTBYLw1Kwws=
Subject key identifier:   CD:B1:33:08:28:22:58:11:AE:67:AF:21:64:04:D5:AF:95:BD:17:53
Certificate issuer:       /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial:       010D0C9F43285843A81023D395EE33BC3DE7BA40
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/ccc908a6-b3bf-3874-8a22-fcb3b07b85be.roa
Signing time:             Tue 24 Oct 2023 13:00:20 +0000
ROA not before:           Tue 24 Oct 2023 13:00:20 +0000
ROA not after:            Mon 22 Jan 2024 14:00:20 +0000
asID:                     834
IP address blocks:        199.15.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a8:10:23:d3:95:ee:33:bc:3d:e7:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
        Validity
            Not Before: Oct 24 13:00:20 2023 GMT
            Not After : Jan 22 14:00:20 2024 GMT
        Subject: CN=3dbfc84d-e765-4fbd-aa0b-6048c4e38632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:43:e1:70:15:00:7b:43:89:63:55:1d:fd:
                    8f:89:d9:21:6e:82:28:ba:12:c6:aa:87:f7:06:0f:
                    f2:ba:fe:0f:91:55:f6:23:98:c9:54:97:42:bc:5c:
                    01:45:5f:68:05:3b:f0:26:73:55:37:a2:48:94:00:
                    c4:df:5a:f7:8f:b1:5f:fd:33:fe:b4:ef:1e:30:33:
                    8f:1c:25:48:33:97:81:f4:7a:00:d1:ce:41:dc:59:
                    b5:45:c3:7a:15:c2:dc:26:f3:e3:e5:57:44:68:02:
                    7a:37:f4:c6:a4:ae:dc:3c:9c:08:aa:2d:15:2f:6e:
                    8d:44:1a:7a:76:a8:4a:ba:2d:a1:fa:91:78:c8:ac:
                    5d:89:4a:be:87:61:ec:53:0e:ed:89:c0:5e:8b:69:
                    60:fe:c3:4e:2c:ce:db:d4:3e:bc:ed:08:f2:22:25:
                    ba:89:e3:fe:02:c6:1f:b1:05:cd:ba:49:87:49:d9:
                    5c:11:0f:50:74:2f:e5:15:c5:6c:42:1d:51:3a:47:
                    5d:f4:3a:3e:1c:26:36:ed:f4:ac:d4:a0:86:1b:9d:
                    c2:72:b6:fb:8e:aa:81:f6:8f:8a:4e:30:2b:03:2a:
                    70:36:33:07:56:da:1e:84:c9:d7:0a:9e:86:92:db:
                    3c:e0:7d:0c:24:30:f8:1c:02:b0:ab:b3:ab:fc:f6:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B1:33:08:28:22:58:11:AE:67:AF:21:64:04:D5:AF:95:BD:17:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/ccc908a6-b3bf-3874-8a22-fcb3b07b85be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl

            X509v3 Authority Key Identifier:
                keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:66:58:6f:f9:a2:c2:39:81:85:80:83:f4:6d:16:77:cb:
         5e:40:e2:67:2e:e9:dc:22:5f:9d:24:4e:b3:ca:ad:c9:a5:b2:
         60:98:70:6a:17:27:c6:51:1c:de:d0:f7:4d:da:12:21:92:6c:
         bb:34:e9:56:24:ef:2d:c8:eb:e7:09:98:da:cb:56:de:47:18:
         f1:65:f0:45:1e:6f:5d:31:fb:b7:89:78:f5:6d:47:4f:54:d5:
         21:8f:e2:40:f3:8d:f4:92:52:35:f0:fc:80:22:bb:9a:56:30:
         d2:9c:ec:93:75:06:27:cc:4e:a3:68:da:67:d9:02:3d:f2:6a:
         f2:b8:33:be:0d:13:8e:99:26:2d:f2:f5:e2:05:9f:9c:66:44:
         e9:98:27:6d:23:64:ae:51:ae:ba:4f:1e:a9:9a:c7:ec:8a:5a:
         13:d9:7b:a4:c4:a3:53:ef:84:16:9d:88:07:24:86:6e:06:86:
         b7:5f:45:c7:85:b1:4a:59:77:32:85:cb:94:7e:89:37:8b:d9:
         88:f1:53:0d:57:b2:05:22:b2:c6:67:67:5f:46:b8:eb:cd:3f:
         de:3b:07:5a:87:06:47:6f:99:39:0f:e7:ba:80:1a:e3:47:8e:
         1e:22:8b:61:f9:64:7f:53:c1:c4:bd:22:65:c3:eb:6d:95:54:
         71:22:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:06 2024 by rpki-client on console.sobornost.net