Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/235dc101-d661-3965-9ca8-3674f1751e39.roa
File:                     235dc101-d661-3965-9ca8-3674f1751e39.roa (raw, json)
Hash identifier:          o8OHv/B8ILqOk3IKy7z+yCA6Mf8D8dHyVYOCGdjqCmo=
Subject key identifier:   6D:EA:2D:DF:29:B6:F3:59:67:93:4A:61:74:0B:6E:0B:42:91:5D:68
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837C0AA5C5837CCDC551F33871C
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/235dc101-d661-3965-9ca8-3674f1751e39.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     15247
IP address blocks:        208.38.56.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:c0:aa:5c:58:37:cc:dc:55:1f:33:87:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=8183b618-5ece-4f50-984b-f39593f89e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:21:a4:b0:70:0c:b1:22:ee:ee:e2:b8:39:
                    de:73:1d:c5:72:86:f2:aa:0a:dd:04:10:f5:ac:4c:
                    3c:a8:d2:d1:11:00:6c:a0:0f:6d:45:01:d3:2a:08:
                    52:65:48:26:24:94:2b:91:75:15:64:f5:2a:22:4b:
                    c7:5e:55:5f:7f:5a:b5:89:1a:d0:15:72:7c:9f:ab:
                    25:e3:f5:63:07:7f:2f:69:49:8f:2a:3e:9a:73:0a:
                    91:50:01:dc:29:80:cc:f0:c2:1c:79:c6:01:d9:7d:
                    f8:33:af:cf:23:32:ec:f0:3a:87:9f:e8:04:54:c4:
                    d7:fc:3e:b5:1d:ee:6d:37:56:cb:9e:e7:36:70:9e:
                    98:47:29:12:66:b0:ce:d0:c5:20:50:d2:ba:16:24:
                    80:b3:cd:5b:89:89:6a:ea:e6:58:75:8f:88:fd:81:
                    f8:a8:54:3f:ec:f7:00:14:27:fe:0a:53:49:92:48:
                    69:db:2a:e5:fa:fb:7d:45:6d:90:a2:e5:9f:e9:48:
                    ec:52:68:64:91:59:b6:bf:2b:bc:d2:40:ad:3d:19:
                    d6:71:3e:80:c8:4a:85:cf:f6:96:8f:fb:89:5a:ff:
                    5f:0f:5c:92:be:5e:97:92:11:48:34:83:be:15:a1:
                    8e:91:53:f6:31:82:4d:52:a4:a9:cc:83:5f:b8:c7:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:2D:DF:29:B6:F3:59:67:93:4A:61:74:0B:6E:0B:42:91:5D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/235dc101-d661-3965-9ca8-3674f1751e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:1a:07:17:92:ad:05:b8:ef:ed:b8:ea:b3:e6:8c:70:6d:c3:
         f5:b4:9f:92:d4:08:0d:04:70:2d:55:23:77:80:15:8d:82:29:
         55:71:8a:95:30:df:56:6a:d0:fa:2f:dd:c2:c7:a8:d1:3b:f4:
         0c:e4:de:b8:ba:d9:29:e5:52:b3:de:5a:fd:bd:92:1b:d4:fe:
         71:0a:ec:5f:7b:f4:a4:15:96:1c:01:b3:88:60:65:0f:72:b8:
         83:a1:98:d9:03:7b:b9:9a:c0:0c:df:61:be:42:e8:42:63:75:
         13:d6:d4:f4:fe:bc:a3:0b:c4:2a:25:5c:cb:ab:e1:59:79:8d:
         71:32:68:f3:73:7b:eb:44:83:76:d8:70:af:01:c8:d0:60:36:
         b1:30:b3:db:70:4a:d7:98:35:0d:44:fe:fd:84:a0:59:94:47:
         97:1b:bb:7e:cc:68:e7:2e:4f:2a:a9:d6:ad:8d:69:0a:8c:c4:
         5a:b8:2d:4c:65:79:11:be:93:4d:2c:59:d5:3c:ef:7a:77:c2:
         08:6f:b5:df:22:fb:e4:98:31:87:51:43:74:9e:39:2c:14:1e:
         ed:d8:d7:ba:06:1b:fa:f3:1e:84:2b:d1:45:17:87:6e:3d:4a:
         63:d2:56:7c:fa:94:04:35:45:26:d6:8b:92:ab:77:40:4f:30:
         27:71:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:01 2023 by rpki-client on console-fra.rpki-client.org