Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/dc227e5a-c90f-3fec-b793-9ffd426952a2.roa
File:                     dc227e5a-c90f-3fec-b793-9ffd426952a2.roa (raw, json)
Hash identifier:          m9mFVQdY9tCu5CARH3LRuWBs7U3ohGi83DyNiU1DNUk=
Subject key identifier:   53:3D:12:79:06:B2:2F:99:D8:25:B2:2C:AE:0B:1E:89:5E:29:54:A9
Certificate issuer:       /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial:       010D0C9F43285838BEB642FBD32BA498AECD7000
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/dc227e5a-c90f-3fec-b793-9ffd426952a2.roa
Signing time:             Thu 03 Dec 2020 05:00:00 +0000
ROA not before:           Thu 03 Dec 2020 05:00:00 +0000
ROA not after:            Mon 01 May 2023 04:00:00 +0000
asID:                     62533
IP address blocks:        104.219.70.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:be:b6:42:fb:d3:2b:a4:98:ae:cd:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
        Validity
            Not Before: Dec  3 05:00:00 2020 GMT
            Not After : May  1 04:00:00 2023 GMT
        Subject: CN=5e693ade-fd8f-4598-ba71-f89b85822189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:9a:20:ee:dd:69:b2:d6:50:b6:b4:33:c1:
                    39:e5:fa:53:09:a2:11:49:a7:88:a3:76:c5:5d:e7:
                    c0:2f:ff:5f:e9:d4:34:d9:8d:cc:24:f4:75:74:2b:
                    85:ee:be:4f:bb:ff:1e:60:b3:11:60:c5:7a:14:3b:
                    da:9c:2a:dc:d4:02:84:e6:a0:74:01:40:25:02:de:
                    cf:ab:2e:d5:c8:a0:c6:b3:b3:56:d5:46:b0:fe:b5:
                    cc:24:dd:f8:50:d3:8e:38:0d:3c:5e:ac:17:05:a5:
                    49:95:8b:a1:e7:5e:a8:66:95:02:28:15:0a:10:0d:
                    36:f2:33:15:d9:89:ec:3c:e7:0c:53:47:30:9f:3c:
                    64:60:17:9b:be:b9:d4:66:97:97:a3:61:04:be:84:
                    2f:48:f7:de:c1:6e:6d:c4:4e:61:c1:27:78:b5:50:
                    1e:98:db:cd:e0:b3:a7:c8:a5:fb:f7:09:f3:49:5f:
                    8f:e6:85:86:18:d2:92:2c:36:03:66:dd:32:d4:9d:
                    c1:b3:da:09:e8:42:31:d9:68:51:ef:73:ce:62:37:
                    97:21:4a:29:6e:da:c7:71:41:30:02:bd:a4:d3:d1:
                    07:fe:8a:2b:be:d6:a4:f0:63:90:d1:e1:9a:06:f8:
                    b9:c0:b7:a3:2e:68:f5:4c:a6:2d:79:07:2a:5d:73:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:12:79:06:B2:2F:99:D8:25:B2:2C:AE:0B:1E:89:5E:29:54:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/dc227e5a-c90f-3fec-b793-9ffd426952a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl

            X509v3 Authority Key Identifier:
                keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:ad:46:a0:34:db:b0:b9:fd:31:ac:f7:83:69:51:68:b9:
         02:02:be:2b:28:4a:68:76:13:82:4e:72:fe:17:b5:43:b7:c4:
         6a:d9:fc:7d:2e:3b:7c:85:87:74:06:7c:98:99:17:9b:9f:88:
         53:0d:18:0c:40:5b:bc:cb:45:a7:22:96:cc:12:a7:b7:6e:dc:
         ed:51:33:8f:74:d2:cd:0a:0b:c7:a5:be:ad:51:f9:99:69:ae:
         cb:e0:30:84:b5:23:28:12:d5:6a:7e:ce:0c:a7:5f:5a:98:7f:
         73:b8:c5:ff:ea:6c:24:5f:fc:29:ac:7f:fe:9d:ce:77:05:be:
         59:37:7d:a6:7b:51:f0:a1:b7:06:cd:a2:f3:ab:4b:56:5d:21:
         a5:4e:d5:ed:aa:f1:d8:02:db:b3:25:40:7c:1e:87:5c:d1:44:
         5e:22:d7:9a:cd:2a:7b:8e:eb:1a:1c:8d:32:09:3e:ad:05:6e:
         d9:2e:b9:70:59:e8:8e:d3:c7:69:b2:31:03:a3:39:ef:b7:25:
         e7:07:81:bc:c7:45:72:90:a7:ed:90:fd:55:2b:0e:13:27:5c:
         33:d4:24:2f:0b:37:76:09:c5:ce:89:0e:84:a3:06:f1:f1:7d:
         8f:c4:5b:cc:6e:29:70:52:f9:8e:3b:13:67:9e:c9:05:dc:8d:
         34:65:8c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:07 2023 by rpki-client on console-ams.rpki-client.org