Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/6de4b33c-329a-324d-b949-cd99893e8ca4.roa
File:                     6de4b33c-329a-324d-b949-cd99893e8ca4.roa (raw, json)
Hash identifier:          U+QuuAQwKtQXqvTy7n3xOggb6QcgsRSHu0/gNpCG/+g=
Subject key identifier:   26:BB:76:F6:E0:DA:FB:A4:08:F2:EC:54:1F:7B:5C:79:A7:5C:7D:0B
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729943C22C
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/6de4b33c-329a-324d-b949-cd99893e8ca4.roa
Signing time:             Tue 09 Jun 2020 13:27:34 +0000
ROA not before:           Wed 21 Oct 2015 04:00:00 +0000
ROA not after:            Mon 12 Sep 2022 04:00:00 +0000
asID:                     40676
IP address blocks:        202.5.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:99:43:c2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct 21 04:00:00 2015 GMT
            Not After : Sep 12 04:00:00 2022 GMT
        Subject: CN=9029a9fa-6a6b-4137-bc16-beb21f387b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:07:91:69:d4:db:ad:d0:f6:30:b6:58:56:
                    31:12:48:53:d9:ce:c9:63:42:db:04:35:66:4e:df:
                    2f:1a:90:f2:cd:ad:4d:74:31:13:ed:60:08:41:41:
                    04:74:22:da:39:25:d5:7c:a4:4c:af:50:db:78:70:
                    5b:9c:0d:00:5f:24:19:5b:22:a9:28:55:c0:0e:4d:
                    6b:36:eb:90:16:66:aa:7f:22:03:cb:15:e1:66:30:
                    db:80:6c:63:8a:47:ed:c1:ee:b8:0c:4b:81:26:95:
                    cd:32:38:d3:d3:3a:3e:88:59:25:10:1f:ac:54:71:
                    b2:c9:3b:4f:ff:c1:3f:3d:70:14:12:1a:2d:a4:10:
                    a0:0c:cd:d9:11:23:92:5e:be:d5:5e:96:d8:02:09:
                    2f:19:b4:66:51:71:dc:24:bc:26:a2:57:83:19:fb:
                    5d:da:32:63:61:1c:5f:12:37:35:f9:94:6d:a0:ba:
                    86:f5:e9:39:6e:c5:86:78:f8:c8:d6:37:03:46:01:
                    0d:ea:0e:26:f9:6f:ef:f6:b6:c9:df:d3:8e:70:2f:
                    0b:a7:9b:9e:d0:2c:a7:a0:99:98:93:86:6a:cb:27:
                    6f:9d:00:8a:fe:5e:6a:a0:be:8a:47:a1:0f:76:eb:
                    42:80:25:3a:55:c8:9a:b0:b3:da:ed:a8:11:93:c3:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:76:F6:E0:DA:FB:A4:08:F2:EC:54:1F:7B:5C:79:A7:5C:7D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/6de4b33c-329a-324d-b949-cd99893e8ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:32:53:bc:aa:db:84:5c:cc:40:b9:3d:16:b8:38:a7:97:a6:
         aa:3a:3b:2b:3f:24:97:22:93:f2:57:f1:02:45:32:a8:92:cd:
         db:1e:d5:77:32:52:4a:a7:7f:dd:f5:76:74:a6:bd:9f:0c:eb:
         5e:26:93:df:03:bf:ec:ad:8c:65:af:40:d5:68:6b:ef:e1:49:
         5b:22:e3:59:6b:a0:ae:4b:88:a1:74:23:f8:f8:1c:20:70:33:
         4c:57:22:d7:79:5c:00:ee:3c:76:97:b3:5e:ef:ba:84:7d:5c:
         1e:5d:27:9d:34:42:32:0a:08:15:32:b2:38:ab:03:32:a1:6a:
         36:7c:10:0e:75:b0:86:aa:4f:d5:53:e1:1f:eb:0f:c7:b1:72:
         31:8a:4c:f1:5d:d5:41:10:87:a5:9e:08:8e:58:0a:d9:8d:1e:
         15:77:5a:35:82:95:ea:a8:39:7e:1e:e3:68:77:a7:ab:a3:a3:
         2f:c4:87:e2:da:81:59:02:db:09:4b:a3:2c:9e:98:8b:a9:22:
         ce:32:cc:50:aa:77:0c:ac:c6:e6:20:f0:de:f3:5e:16:b8:45:
         0c:a1:1f:c0:ae:b1:c4:0d:90:a4:d6:bd:3a:f6:5e:24:b5:3a:
         d8:91:65:77:16:5d:dd:72:43:d1:81:27:19:7e:55:de:d2:59:
         94:67:1d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:04 2023 by rpki-client on console-fra.rpki-client.org