Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be53da72-b931-388c-9f7f-d08db35a6901.roa
File:                     be53da72-b931-388c-9f7f-d08db35a6901.roa (raw, json)
Hash identifier:          1oKBFCtx5cYxZKo4XG5T2vCNRgLzLTUZtXylvisWfxs=
Subject key identifier:   89:9E:3E:97:B0:9A:0A:69:5D:84:F3:84:87:2A:B4:71:CA:2A:CB:53
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730C9CC50B
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be53da72-b931-388c-9f7f-d08db35a6901.roa
Signing time:             Wed 01 Jul 2020 23:01:07 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     7922
IP address blocks:        108.165.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0c:9c:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=171fedb8-401a-4f55-97bf-e23f184a4047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:b2:ed:e6:44:d5:80:60:79:81:fd:e8:eb:
                    0b:9d:5f:05:e0:04:8b:9e:8f:1d:46:d1:1e:ac:d6:
                    95:0b:2b:2e:7b:c5:04:48:27:4c:b6:7e:ce:6c:43:
                    c3:c7:ec:c5:93:58:61:ab:1f:e4:56:ac:39:0d:57:
                    2c:89:ed:17:3d:7c:ea:d4:44:5f:8a:51:30:c9:bf:
                    b2:17:11:e9:3d:ee:7b:3f:1c:9c:6e:c8:3d:d9:cc:
                    cb:e9:fd:69:18:8d:0f:7d:0c:5f:fe:8e:30:4b:0a:
                    84:c1:39:ff:cd:7a:3a:c4:09:88:56:eb:27:f1:95:
                    45:14:df:af:85:19:7f:39:ef:43:18:b6:a8:bb:2b:
                    98:0a:33:ac:35:78:91:1b:31:ba:de:ea:e7:af:f5:
                    3a:d2:51:fa:94:42:b9:d1:0f:38:78:78:49:73:7a:
                    fc:7a:f0:22:18:1a:58:3f:4a:46:3c:d6:23:8d:16:
                    36:d1:4c:35:0b:35:85:ad:bf:4a:2f:56:59:a9:ed:
                    bc:6e:f7:2a:e4:b1:6c:78:b3:26:9d:50:31:eb:24:
                    a7:e6:42:f9:19:7c:7f:9a:93:6e:1b:91:90:39:62:
                    86:b0:f1:4b:5e:2a:01:8b:d4:4f:b6:89:ec:6f:85:
                    cb:70:55:70:4e:97:01:b6:3c:f1:c0:33:04:da:0d:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9E:3E:97:B0:9A:0A:69:5D:84:F3:84:87:2A:B4:71:CA:2A:CB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be53da72-b931-388c-9f7f-d08db35a6901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:70:81:4d:e8:c5:fc:e1:a1:f3:36:5e:04:94:c3:29:c5:58:
         a0:bb:59:a6:d9:63:c6:4b:54:06:ab:51:d0:52:2d:15:43:41:
         6d:cf:eb:15:02:b9:ee:9a:bb:7c:24:7b:d9:40:66:52:86:ec:
         04:b6:53:5d:a7:93:4f:99:ce:f1:3c:99:d2:24:7a:f9:a3:ae:
         ee:1b:3c:e0:a2:98:c7:7b:2e:68:32:ac:20:ae:30:01:6b:12:
         a5:7d:e2:6d:4a:b2:fa:92:c7:cb:06:66:b6:e4:01:b5:85:86:
         04:34:4a:ee:24:99:0e:39:53:d7:8d:16:9f:ae:4a:14:27:f2:
         89:ce:51:53:24:c7:37:c9:e6:12:8d:f5:3b:26:c7:d8:9d:23:
         d0:7d:52:8f:82:43:8d:6f:2e:91:42:29:d6:be:aa:61:ea:02:
         ab:21:bf:2f:8c:ad:1f:25:72:43:e8:e8:d9:f5:6a:41:e4:66:
         37:ba:a3:46:ca:84:d5:8e:e9:2b:98:6a:44:9b:cf:cd:62:48:
         1f:26:60:f8:ca:fe:f5:fd:61:a5:53:d1:27:17:dc:89:5f:2d:
         3c:d7:ef:07:10:74:9c:f6:c0:69:7f:d5:1a:3d:aa:bf:e2:db:
         2b:94:f3:80:c2:f3:c8:c3:1f:e3:a4:15:a3:a7:e8:31:de:8b:
         7d:4b:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:05 2023 by rpki-client on console-fra.rpki-client.org