Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/378a0c56-4cd2-331b-a690-f757e7d6d03a.roa
File:                     378a0c56-4cd2-331b-a690-f757e7d6d03a.roa (raw, json)
Hash identifier:          jouto2haWHvETHD+gPjRy3oUrWwOvrNKxkPlh//Rhts=
Subject key identifier:   E4:0E:5D:23:3A:3C:96:5D:78:BF:F2:EF:F8:D0:09:CF:22:C6:86:F7
Certificate issuer:       /CN=20ea9630-c9c1-4094-9638-6a744ac37d2c
Certificate serial:       010D0C9F4328576D51CC73C042CFC173822E88CC
Authority key identifier: 4D:E3:22:F9:AD:80:31:94:78:2B:4D:8A:2B:E2:2B:5C:4F:5D:68:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/378a0c56-4cd2-331b-a690-f757e7d6d03a.roa
Signing time:             Fri 24 Jul 2020 18:55:54 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     14731
IP address blocks:        139.64.212.0/22 maxlen: 24
                          23.154.208.0/24 maxlen: 24
                          2602:fd69::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:82:2e:88:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ea9630-c9c1-4094-9638-6a744ac37d2c
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=3ff0ef50-5999-4d65-bed2-9b342624bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:6d:db:6a:3b:cf:e9:86:8d:e4:66:55:6a:
                    27:82:26:a7:31:b1:63:a7:b5:f6:72:07:88:45:9a:
                    8a:3b:f0:28:04:e5:d7:21:c7:58:75:1e:a3:19:72:
                    9e:0f:eb:7f:b9:c0:97:db:f1:d9:8f:c3:2d:00:6d:
                    5c:8c:4b:33:86:a8:7a:13:03:40:8f:37:8f:44:97:
                    e9:70:e8:af:70:2c:2f:e4:59:30:ac:f6:b9:ac:cf:
                    5b:25:c5:92:6a:f8:ec:00:91:56:a3:95:1f:98:c4:
                    d9:79:23:98:0c:6d:09:50:1e:30:b8:f2:cd:1d:dd:
                    75:45:b1:89:de:a6:78:43:d1:6c:d0:d2:e1:46:2b:
                    d8:24:3d:6a:39:66:3f:f5:3f:39:8f:51:c3:c4:2e:
                    3a:82:b6:ab:06:48:c0:d1:09:81:05:d9:d5:3a:c6:
                    d1:2d:8d:9e:ba:37:53:05:2d:49:ba:ab:75:49:2e:
                    50:55:53:cd:32:7a:8a:22:cd:20:27:e5:25:56:39:
                    21:cf:c1:aa:ff:13:57:1f:a1:2c:bb:0b:83:53:4f:
                    fa:8d:31:f0:02:34:39:f7:50:1a:5d:67:3c:f6:31:
                    80:f8:52:ff:59:52:49:b0:f0:54:08:bc:05:b5:52:
                    f2:17:9d:fa:9f:cc:57:f3:f4:aa:9a:48:5f:e5:4b:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0E:5D:23:3A:3C:96:5D:78:BF:F2:EF:F8:D0:09:CF:22:C6:86:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/378a0c56-4cd2-331b-a690-f757e7d6d03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/20ea9630-c9c1-4094-9638-6a744ac37d2c.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E3:22:F9:AD:80:31:94:78:2B:4D:8A:2B:E2:2B:5C:4F:5D:68:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.208.0/24
                  139.64.212.0/22
                IPv6:
                  2602:fd69::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:df:0b:10:1d:28:5b:42:ba:e4:a8:1d:1b:ee:40:e7:5e:
         a6:b2:a0:cf:7a:ee:25:9a:82:b7:ec:5e:47:b3:e3:19:e2:81:
         36:9e:be:9f:b2:01:0b:3f:08:62:62:96:27:b0:c4:7a:4a:db:
         3d:4e:7a:67:39:02:41:d8:0a:60:1d:70:69:5a:3a:16:19:84:
         0c:86:86:59:35:fa:a9:d8:52:a5:49:f5:95:de:89:ce:94:7c:
         30:f4:0e:28:da:44:69:a1:88:2c:bc:73:52:75:96:71:3f:95:
         d2:f7:28:99:1c:d1:27:07:42:1c:bd:6f:88:eb:dc:91:66:6f:
         6c:fa:7e:63:6b:b0:cf:da:14:c4:89:d0:2e:fb:16:43:08:67:
         17:10:b5:6e:d1:75:35:3e:75:67:e5:07:54:68:ff:4a:d5:d9:
         88:07:81:6c:f9:85:89:b7:e7:25:83:71:1b:88:fc:a8:c7:e0:
         8e:90:ba:fc:9d:78:5d:ab:ea:73:0e:ac:da:70:d2:23:4b:cc:
         f0:4f:ee:79:d3:66:e2:1b:6f:a7:a4:63:76:93:ed:13:ac:f5:
         10:d2:79:8f:f0:09:ac:a5:8b:46:b9:ff:85:92:0d:39:af:3a:
         71:2f:2c:2c:1a:de:a4:4e:2d:fb:22:10:83:8e:82:19:e8:29:
         94:a9:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:53 2023 by rpki-client on console-ams.rpki-client.org