Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/2ed12f23-b8f9-3a81-9110-e6e46750e459.roa
File:                     2ed12f23-b8f9-3a81-9110-e6e46750e459.roa (raw, json)
Hash identifier:          gAQYItaxA0WqjZRWbGz6wdcd2zDVHQM5qDgMTKpmumc=
Subject key identifier:   DA:7A:26:78:21:0E:AC:F3:85:69:70:3A:AD:CC:60:D6:BA:1F:59:C2
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584321E5F8674FC885E634DD13C0
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/2ed12f23-b8f9-3a81-9110-e6e46750e459.roa
Signing time:             Wed 06 Sep 2023 11:37:14 +0000
ROA not before:           Wed 06 Sep 2023 11:37:14 +0000
ROA not after:            Tue 05 Dec 2023 12:37:14 +0000
asID:                     14041
IP address blocks:        129.19.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:21:e5:f8:67:4f:c8:85:e6:34:dd:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Sep  6 11:37:14 2023 GMT
            Not After : Dec  5 12:37:14 2023 GMT
        Subject: CN=1df83e9f-ad55-4e27-a47b-4992e332dbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:87:77:8f:36:16:6b:08:af:32:7a:d1:c9:
                    23:2d:a5:1a:b1:8f:0e:a6:19:d7:f8:69:b9:dc:54:
                    d1:80:c3:7e:eb:5d:79:54:38:e9:4a:44:68:34:3c:
                    e3:70:25:48:fa:1a:c5:99:23:5f:de:2f:32:c7:0c:
                    61:99:1d:10:1c:9c:39:32:6d:7e:1f:f6:6a:14:89:
                    e3:0e:26:90:3c:04:d0:e3:35:5e:91:cd:e8:2c:bd:
                    df:2e:74:36:92:25:fb:ca:c1:56:4b:2d:38:54:19:
                    58:33:55:29:b9:57:39:56:81:c7:b0:7e:4c:e0:c9:
                    57:d3:6b:1a:e6:e2:2e:34:c9:1d:c5:3b:08:a3:3f:
                    2d:b1:6a:b9:ed:f5:5b:4d:79:5f:91:d5:55:2d:ea:
                    8b:ff:20:54:05:e1:9f:e5:f5:25:38:c9:51:49:a8:
                    dd:07:f5:19:c2:dd:88:f3:98:67:73:ee:4a:0b:a6:
                    be:7e:11:3a:57:e5:cd:bf:68:96:59:59:e6:24:db:
                    b6:2b:2a:e7:b1:1d:5d:38:4e:d3:2c:ad:25:d0:22:
                    aa:ca:bc:69:ad:00:7c:42:bb:b9:f3:db:64:ff:d4:
                    f5:d7:4b:99:9c:c5:01:ff:bf:61:82:e4:5c:ac:bd:
                    23:6a:c6:79:4c:3e:ab:37:c7:7f:6d:c5:77:00:df:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7A:26:78:21:0E:AC:F3:85:69:70:3A:AD:CC:60:D6:BA:1F:59:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/2ed12f23-b8f9-3a81-9110-e6e46750e459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:25:f1:9b:9a:72:f0:54:09:6b:66:ba:d2:d8:eb:22:86:69:
         13:17:41:98:c3:86:11:d0:73:2c:ca:98:92:5c:5a:2b:39:11:
         d6:ed:36:ba:2b:43:d2:81:10:fa:6d:a5:f9:02:d9:49:49:8b:
         53:99:f8:b8:7c:72:c7:39:c7:a4:37:bd:6e:2d:c4:e1:a4:01:
         69:9c:05:d8:ed:17:60:2b:04:31:83:c2:77:6a:a2:44:24:89:
         c4:f9:cf:3f:16:84:fd:cc:9e:58:8d:38:f5:b5:0a:2f:78:b9:
         4a:b6:56:8b:48:c6:9b:fd:d5:7a:37:99:f4:27:c4:a1:14:19:
         ca:9c:47:47:ed:1f:56:f5:c4:5c:2e:21:36:0a:64:cd:bc:24:
         c1:c8:33:53:ef:cc:fa:36:28:9a:c1:29:94:a2:72:2f:1c:29:
         86:3f:fa:b4:da:39:ab:fc:2a:7c:95:a6:d7:a7:d5:30:8b:0e:
         ae:16:77:6b:fc:54:03:05:78:81:dd:52:b0:3b:b5:4f:9a:9e:
         91:9d:8d:a8:53:8f:21:bc:5e:b7:93:c8:d3:55:63:84:ac:47:
         86:c2:ff:16:51:4b:9e:61:88:78:23:40:b8:c6:06:a7:4b:fc:
         d6:a2:8c:36:2f:bc:c1:fb:c0:91:40:1d:fd:6b:23:ab:2a:09:
         c1:d5:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:54 2023 by rpki-client on console.sobornost.net