Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e506e8fc-38e3-338d-8858-79c38a375aaf.roa
File:                     e506e8fc-38e3-338d-8858-79c38a375aaf.roa (raw, json)
Hash identifier:          XEsLO2taxHgGYiUN/48BteV05PswLfo0ooUdVxKMywc=
Subject key identifier:   E5:2B:36:A2:C0:51:E5:E6:00:49:36:CC:C6:1E:20:3E:86:98:53:D9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D7065A54165C50CDDD9C9F40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e506e8fc-38e3-338d-8858-79c38a375aaf.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        209.89.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:06:5a:54:16:5c:50:cd:dd:9c:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=6b63a46d-870c-4df4-8b01-13f5a2558856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:70:e6:14:10:59:9e:fd:2b:ef:5e:32:1c:
                    78:18:c1:a2:65:cf:17:d0:e4:86:7a:a0:b3:86:e5:
                    c2:4c:48:62:b9:06:c8:17:1b:52:7e:92:80:fc:95:
                    81:43:3c:8a:60:28:6c:cf:0c:08:6b:d1:20:2f:35:
                    f9:a9:7d:90:6f:1c:30:f7:b3:3d:e7:aa:fe:25:e9:
                    0e:28:bf:88:27:3d:e6:d7:a7:a5:b7:b4:49:5a:12:
                    fc:e9:80:d8:34:63:ad:13:17:76:57:e6:9f:b7:91:
                    c4:4e:ec:31:0c:9f:d3:67:12:17:4a:82:7c:0c:37:
                    2b:ed:68:2d:62:98:14:fd:ca:f7:f1:ba:51:a8:86:
                    c6:aa:2f:07:4e:e4:6e:d4:f2:9e:6e:d1:76:83:19:
                    88:ae:b5:3a:26:49:62:93:a1:ed:97:f7:c3:66:60:
                    c0:fb:b5:cc:55:4f:55:4a:f0:56:51:0c:26:3f:b1:
                    ca:a6:54:80:c9:59:09:38:54:37:74:a9:a3:6b:19:
                    37:6b:4f:f1:f5:0e:14:98:1d:61:17:64:c6:ff:7c:
                    30:61:2b:40:ac:11:f2:c2:3a:14:3c:ac:eb:b4:07:
                    9e:31:df:c3:ba:4e:92:4a:2b:88:5c:92:db:59:84:
                    8d:a1:b7:6c:53:57:66:10:ed:fb:48:b8:be:c5:99:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:36:A2:C0:51:E5:E6:00:49:36:CC:C6:1E:20:3E:86:98:53:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e506e8fc-38e3-338d-8858-79c38a375aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.89.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:ab:30:6b:f7:dc:23:b8:b8:0b:ba:c4:87:9f:e6:28:d2:
         2a:1e:38:7e:ae:f1:bc:b1:c5:45:71:c3:e1:a4:24:c4:00:55:
         9c:26:af:e8:9b:92:07:aa:49:bb:47:50:9c:1f:09:81:0c:e6:
         b0:15:11:40:54:6a:38:82:28:0b:af:30:71:5b:ac:60:d1:40:
         e8:04:fb:22:71:1f:a7:7b:b5:98:e0:13:c6:85:65:68:84:71:
         26:11:4d:2c:51:17:c1:68:b9:a9:a4:3e:f2:ee:71:b4:d6:5b:
         c5:65:8b:87:31:f6:4c:26:4d:40:4d:96:f9:98:f5:ff:39:23:
         53:6a:47:97:2f:ed:8b:ac:b8:c9:4a:2d:80:64:75:da:f2:9a:
         59:3b:c5:a7:3f:b9:72:82:58:87:cd:90:24:8f:72:2d:75:26:
         de:b5:8b:b8:66:33:cd:25:bb:c0:ba:67:c7:f9:9f:1e:cb:17:
         fc:98:7e:7e:6a:4f:e8:7f:6d:af:3a:86:9c:1d:cd:3a:61:22:
         2e:c9:24:75:f0:21:9e:f6:a8:78:a0:4f:67:f9:39:bc:0d:fe:
         6e:11:6c:60:b7:04:45:f3:98:57:48:e4:43:4f:94:3a:1f:66:
         82:9b:41:75:35:14:85:3a:8f:40:fa:0a:b1:4d:d7:c0:9b:55:
         bc:d0:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:06 2023 by rpki-client on console-fra.rpki-client.org