Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a5c0b9c2-8d5a-38d5-bbac-cd8e44559049.roa
File:                     a5c0b9c2-8d5a-38d5-bbac-cd8e44559049.roa (raw, json)
Hash identifier:          2gBv3Mg39TE3zfwExr0ggncpFo7UlDMMFtBrtrAD32E=
Subject key identifier:   50:2B:40:71:2B:D0:4F:E7:A6:3D:D8:F5:DE:AC:12:15:C9:14:8C:C2
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17409D47707
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a5c0b9c2-8d5a-38d5-bbac-cd8e44559049.roa
Signing time:             Mon 10 Aug 2020 04:00:00 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     20278
IP address blocks:        107.174.31.0/24 maxlen: 24
                          107.174.21.0/24 maxlen: 24
                          107.174.18.0/24 maxlen: 24
                          107.174.16.0/24 maxlen: 24
                          107.174.17.0/24 maxlen: 24
                          107.174.19.0/24 maxlen: 24
                          107.174.20.0/24 maxlen: 24
                          107.174.22.0/24 maxlen: 24
                          107.174.23.0/24 maxlen: 24
                          107.174.29.0/24 maxlen: 24
                          107.174.72.0/24 maxlen: 24
                          107.174.73.0/24 maxlen: 24
                          107.174.74.0/24 maxlen: 24
                          107.174.75.0/24 maxlen: 24
                          107.174.77.0/24 maxlen: 24
                          107.174.98.0/24 maxlen: 24
                          107.174.99.0/24 maxlen: 24
                          107.174.134.0/24 maxlen: 24
                          107.174.135.0/24 maxlen: 24
                          107.174.168.0/24 maxlen: 24
                          107.174.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:09:d4:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=1d60bfd7-22f2-45b4-a3ca-7a1a70db18df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:98:d7:06:dc:b3:8b:ac:74:76:9c:dd:a2:
                    a0:bf:29:80:5c:0f:99:56:fb:c9:6b:81:e0:ff:21:
                    51:d8:77:27:bc:90:85:60:d7:a9:c0:8c:05:08:5c:
                    ba:ef:5b:01:41:5b:8d:26:ec:1c:d1:39:6f:74:ec:
                    9d:14:e0:d0:66:4a:e9:33:6d:56:ac:77:ba:5c:aa:
                    9f:bd:d1:bd:8d:92:10:ac:d3:5e:f9:74:53:cd:58:
                    45:91:c0:c3:33:b1:dd:c7:99:13:b3:eb:11:db:2c:
                    1b:50:56:47:c5:bb:f6:85:94:a0:e7:8b:fd:d1:f9:
                    e6:24:9d:45:6f:99:db:6e:6c:86:68:6a:3b:04:ea:
                    9a:ff:97:4a:b2:58:c3:46:81:85:92:3d:be:38:80:
                    07:c2:b8:4b:da:da:ff:52:9d:d8:6d:f8:12:c9:0b:
                    f6:50:9e:ab:94:a5:10:1c:a7:0a:1d:ab:1f:f3:d1:
                    1e:96:0a:7e:18:8a:a3:0a:f6:bd:bb:c2:93:37:70:
                    f5:fb:08:99:ef:1e:06:72:da:b0:3a:92:29:fc:92:
                    71:37:42:98:b8:3b:94:a9:e0:0e:d6:9a:b6:0f:9d:
                    c9:47:2d:3e:80:82:cf:8a:55:e2:b7:f3:6b:b2:cb:
                    ea:96:54:7e:2a:d3:e2:13:3b:9d:26:7e:ca:de:fc:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2B:40:71:2B:D0:4F:E7:A6:3D:D8:F5:DE:AC:12:15:C9:14:8C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a5c0b9c2-8d5a-38d5-bbac-cd8e44559049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.174.16.0/21
                  107.174.29.0/24
                  107.174.31.0/24
                  107.174.72.0/22
                  107.174.77.0/24
                  107.174.98.0/23
                  107.174.134.0/23
                  107.174.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:15:59:8f:e0:96:06:e9:b2:ff:6c:23:e3:83:bc:2d:42:71:
         c9:3e:ac:af:72:cc:e3:47:fe:8b:60:a8:f8:be:6d:eb:eb:67:
         3b:04:f1:52:3e:01:78:1a:b5:f1:79:b4:ba:fe:61:2f:06:cb:
         12:fa:e7:f0:6b:03:22:b2:5d:4d:0a:62:48:88:c5:1d:cd:c6:
         33:7d:7b:86:e2:e2:fb:76:16:ac:1d:16:1b:c9:36:40:07:4b:
         2e:d7:d5:bb:ed:62:55:05:9f:5e:4a:0b:84:59:dc:eb:d3:42:
         72:a4:cf:38:40:49:0f:6d:66:ea:ba:22:7d:15:65:12:fb:33:
         a7:f3:69:62:cd:0e:43:5e:0f:52:ef:e3:6b:d1:95:79:95:cf:
         61:39:ec:e5:5f:8b:f1:08:85:53:69:49:34:be:fb:bc:5d:33:
         0b:40:b2:08:43:15:7f:21:99:5c:70:87:98:c2:17:c2:6b:f2:
         2a:74:93:53:93:ef:cc:6f:c8:ec:d3:b9:13:20:b3:7c:8b:2c:
         8b:f9:6b:ff:d6:ad:83:3d:01:9b:b8:e3:b1:33:20:de:55:ff:
         cb:da:72:f6:f3:b2:2b:dc:9d:5b:3e:f6:bf:78:f7:01:da:1a:
         66:ac:d7:87:29:8b:1e:09:ae:cc:e7:7b:c1:1f:92:1e:12:33:
         94:55:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:23 2023 by rpki-client on console-fra.rpki-client.org