Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/d9c12db5-2c70-3b8b-af0a-fe580c740edc.roa
File:                     d9c12db5-2c70-3b8b-af0a-fe580c740edc.roa (raw, json)
Hash identifier:          TsJyuZunonvyq8NI4l+Z9s7IHEONTaLuNLv82iGDwjY=
Subject key identifier:   C0:BC:0A:F2:1A:7F:EC:70:A8:C1:7E:53:2C:9D:0A:B8:88:55:A5:AD
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735D4D931F
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/d9c12db5-2c70-3b8b-af0a-fe580c740edc.roa
Signing time:             Fri 17 Jul 2020 15:03:51 +0000
ROA not before:           Wed 15 Jul 2020 04:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     27364
IP address blocks:        24.154.0.0/19 maxlen: 19
                          24.154.32.0/19 maxlen: 19
                          24.154.64.0/19 maxlen: 19
                          24.154.96.0/19 maxlen: 19
                          24.154.128.0/19 maxlen: 19
                          24.154.160.0/19 maxlen: 19
                          24.154.192.0/19 maxlen: 19
                          24.154.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5d:4d:93:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Jul 15 04:00:00 2020 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=f2c85bd9-6ba2-45b1-ac0a-0a67a5dd568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:47:c6:59:cc:68:a7:7e:ea:d2:ac:cc:1c:
                    62:ed:7d:9b:08:97:a7:07:41:a8:75:87:b4:d6:a5:
                    f3:dc:45:45:1c:e0:8c:d5:a3:69:18:f7:a4:5d:ce:
                    07:ff:f5:3e:fa:9e:83:0a:82:80:82:0f:6c:01:6d:
                    31:f2:a1:6d:bf:e8:7f:9e:c4:f0:84:97:8e:89:c9:
                    83:84:90:b4:02:8c:23:ed:89:08:3a:b2:ac:ad:5c:
                    e1:47:df:01:f9:81:5f:f4:ce:b3:43:6d:ea:97:0f:
                    86:c4:92:fd:07:07:e5:c4:0c:04:6a:37:2f:ed:fa:
                    9c:c0:2f:7f:20:3b:cc:28:4c:d5:4a:e8:8a:ab:f0:
                    38:89:cf:49:2f:2a:a4:0c:f7:6a:24:1f:2c:88:ef:
                    ce:aa:36:ce:e7:1a:68:fb:4f:14:66:9e:81:0b:f2:
                    af:5d:9c:be:7e:4a:80:1d:b8:8a:ca:bc:bb:a0:59:
                    89:4b:42:3c:91:c2:6d:b0:3d:06:cd:0d:37:e0:22:
                    cf:3f:0c:6e:46:ae:ff:ea:0b:c5:ec:1a:50:5b:c0:
                    7b:28:b0:5e:a3:b0:e1:bb:4a:0a:4f:98:6e:83:35:
                    67:74:83:92:ed:50:05:7c:77:77:62:37:6a:cf:c5:
                    ea:49:32:b3:e3:10:f3:b2:46:5b:e0:eb:a6:14:3c:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:0A:F2:1A:7F:EC:70:A8:C1:7E:53:2C:9D:0A:B8:88:55:A5:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/d9c12db5-2c70-3b8b-af0a-fe580c740edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:64:08:b5:ff:49:b4:30:91:83:34:b9:12:6c:9d:00:0f:27:
         18:ed:17:f6:3f:20:b6:67:ee:b9:9e:66:6d:85:9e:02:8e:e7:
         ed:c5:ab:9e:43:5d:b5:8c:28:62:d0:ff:a0:76:7d:33:3c:4a:
         44:6e:b2:9a:6a:d4:db:d8:4d:27:65:1e:77:74:c0:8f:33:41:
         f7:03:3e:db:c3:57:e9:69:ab:05:71:7b:d1:85:86:52:0f:c7:
         23:01:22:a8:d9:fe:77:a8:a5:1f:f0:8d:43:ef:e8:4f:77:f8:
         fb:4d:f9:4d:f3:0e:7f:21:57:e4:13:c5:db:ac:bf:2e:15:c5:
         3f:99:bf:79:3f:ea:ea:e0:cb:5f:77:f9:eb:57:f4:00:69:9a:
         3e:f8:b5:c6:46:cc:a1:a6:03:72:94:de:9f:0d:e6:ba:46:8f:
         fc:d3:38:0d:66:0a:3f:81:fc:1e:d9:14:62:eb:c1:f4:fb:e9:
         1e:b0:2b:d2:9d:6b:68:31:8a:1a:55:b1:2c:57:81:5e:e4:ac:
         0f:8d:6f:1d:b6:57:ba:00:5d:6c:10:e4:e2:e1:92:e6:1a:c4:
         76:fe:42:25:db:81:16:20:06:86:22:58:db:69:b1:6b:98:3f:
         a6:5e:a4:32:97:6c:a1:4c:76:89:a2:f2:70:1c:22:9d:7e:28:
         94:ef:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-ams.rpki-client.org