Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/5bef15e9-c87d-3821-9e6d-a5c18513e43c.roa
File:                     5bef15e9-c87d-3821-9e6d-a5c18513e43c.roa (raw, json)
Hash identifier:          XHoKeATMnhKq219U+772lpmV45uAtdYmd6kv7C9mQv4=
Subject key identifier:   A7:7E:D4:8E:7B:75:77:23:3D:C1:90:CC:DC:EE:2F:F9:DD:27:F6:02
Certificate issuer:       /CN=6ca1d2e4-e187-4392-94cb-47e223f67ae4
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108EEB50
Authority key identifier: 33:86:E0:11:E6:22:B7:CD:01:DD:E9:B3:90:7C:BD:A2:C0:15:85:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/5bef15e9-c87d-3821-9e6d-a5c18513e43c.roa
Signing time:             Thu 02 Jul 2020 17:24:28 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     54228
IP address blocks:        170.39.90.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8e:eb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca1d2e4-e187-4392-94cb-47e223f67ae4
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=3d82feda-c56c-42b0-8acb-74a74fd4c9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:09:10:0e:81:f6:21:a2:ac:41:a3:41:94:
                    ac:03:c4:32:02:e2:69:a7:f1:5f:fa:91:02:37:f4:
                    3e:c6:cf:62:4a:ae:1c:0f:30:b8:8e:55:4e:de:fe:
                    63:00:75:c9:95:bb:d5:ef:a6:b3:47:f4:1c:e5:fc:
                    8e:ae:fb:a9:df:e9:4c:a6:60:64:35:8b:c8:49:3b:
                    9d:34:17:d0:2f:98:b8:4f:3d:39:8b:d8:4c:70:e5:
                    12:54:29:95:d7:b9:32:15:50:d3:bd:2b:02:74:be:
                    0b:74:20:7e:2d:49:88:47:47:08:c4:7d:38:d5:be:
                    14:98:73:06:c0:ac:84:ed:00:3c:f2:39:14:85:a9:
                    bf:5b:32:a0:5d:d6:a7:04:ce:a1:81:bf:2d:cd:e3:
                    14:49:c9:c4:a0:63:53:9d:da:2f:75:9f:b9:34:bd:
                    ad:3b:61:7e:af:40:fe:c5:8d:ff:59:13:42:3f:e9:
                    ed:5c:4c:2e:96:15:e4:95:47:55:7d:3b:f2:9e:da:
                    2e:1d:c8:4e:66:ca:53:3a:bb:7a:ed:dd:27:cc:f1:
                    8d:8d:fa:1d:cb:88:40:d7:ed:b9:89:a5:a2:ad:d0:
                    9b:ce:88:83:3a:37:8e:5e:ea:0b:ac:9a:4b:90:31:
                    0a:05:5b:6f:cc:0e:a5:9e:12:52:6f:34:ec:e1:b4:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:D4:8E:7B:75:77:23:3D:C1:90:CC:DC:EE:2F:F9:DD:27:F6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/5bef15e9-c87d-3821-9e6d-a5c18513e43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/6ca1d2e4-e187-4392-94cb-47e223f67ae4.crl

            X509v3 Authority Key Identifier:
                keyid:33:86:E0:11:E6:22:B7:CD:01:DD:E9:B3:90:7C:BD:A2:C0:15:85:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5c:e9:e7:8f:fa:02:e5:8e:3f:b0:2f:2e:d5:f5:48:56:b0:
         5f:f7:eb:c1:fd:0d:1a:75:a1:17:de:c5:f3:bb:dc:d5:0e:ed:
         be:7b:a7:12:0e:1a:0f:2a:56:8f:6a:5a:90:2e:5e:7a:6c:7b:
         a2:38:bb:c6:c3:98:b8:c0:5a:73:a6:d3:ee:0b:da:a1:b6:55:
         5e:e0:37:5e:67:cf:63:25:04:ab:5e:34:73:3c:a4:2d:c3:58:
         d5:34:bf:1c:be:be:06:e3:a5:f4:7f:5c:d3:f4:af:46:3e:c9:
         a1:b4:dc:40:66:d8:b0:bb:81:4b:4f:b3:e3:a1:80:86:e0:de:
         d0:d3:c0:65:4e:bd:d9:33:64:dd:91:f8:3f:dc:e8:e4:c7:8c:
         16:4c:d3:fe:ee:a6:d8:c2:1c:ee:17:7f:b1:d8:b5:de:95:89:
         a5:bd:79:e4:93:a8:c3:6e:08:78:e2:66:14:f4:a9:05:6f:3a:
         c7:b8:34:6f:9a:f6:35:3b:92:28:91:0e:a2:cf:fb:9e:8f:33:
         84:12:17:d6:f8:70:59:53:33:fd:b9:75:90:bc:e5:ee:b6:7a:
         55:c1:2a:03:c4:8a:5f:1c:d4:a6:b6:ee:18:f7:d8:83:e1:2f:
         e7:5f:59:78:84:51:ba:3c:ad:3a:66:bf:b5:9f:5b:8e:e9:2d:
         c6:2c:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:14 2023 by rpki-client on console-fra.rpki-client.org