Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c431fe5-1385-33f2-82b8-d519ac337ef2.roa
File:                     6c431fe5-1385-33f2-82b8-d519ac337ef2.roa (raw, json)
Hash identifier:          6f3b1Cljsuw/AS2U10/60azNxZytmx5TQ/o7NJ7Fgo4=
Subject key identifier:   F0:B8:80:21:83:6D:56:F3:AE:00:54:DE:C9:BF:82:F1:E8:53:13:FD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285839B8CDFC99B0DD4171E5C64358
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c431fe5-1385-33f2-82b8-d519ac337ef2.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        70.32.154.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:cd:fc:99:b0:dd:41:71:e5:c6:43:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=a536b26e-d500-4c72-80d7-ec7a70e345f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:d1:d4:95:47:30:fe:91:1f:28:b9:99:3c:
                    8d:b0:99:6d:64:bd:92:37:9c:52:3e:69:09:c4:cb:
                    86:81:84:94:9e:00:32:5c:4d:2c:b5:6c:b7:09:3c:
                    2c:fb:f3:a9:e3:6e:6f:1f:4e:b3:12:fa:e7:1b:e5:
                    d5:66:4f:ff:7d:23:b4:51:b0:e0:f1:69:79:95:81:
                    cf:b6:8a:e2:c9:aa:ef:95:dd:7b:a9:c3:91:95:4e:
                    ca:cf:b7:fe:0e:a8:81:7d:23:99:69:f5:d5:0c:e2:
                    1f:28:17:5c:93:28:79:80:96:e7:06:e1:95:83:ee:
                    b9:28:a3:8c:11:1f:7c:29:e9:71:32:ef:3b:6e:9d:
                    9d:2b:b1:23:ee:b1:82:29:a7:37:44:ce:e7:4f:14:
                    66:b3:66:a7:e0:cd:5c:3e:19:8a:db:fd:cb:fb:89:
                    78:00:a9:86:2d:72:08:ec:b4:d7:f9:29:db:48:b1:
                    a2:b0:8c:c7:68:bd:fa:23:8e:af:0a:34:52:c0:5f:
                    ea:d9:c4:22:1e:e3:c4:8d:be:fb:86:30:51:96:90:
                    05:24:38:b0:f1:53:b9:ec:43:b9:e1:0c:aa:d4:87:
                    62:79:c3:7f:44:56:85:92:07:b3:a0:ca:77:04:b0:
                    58:f4:43:3b:8b:74:eb:c9:ae:43:06:0d:c3:67:b0:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B8:80:21:83:6D:56:F3:AE:00:54:DE:C9:BF:82:F1:E8:53:13:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c431fe5-1385-33f2-82b8-d519ac337ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:87:17:71:ab:96:4f:06:77:99:63:69:4c:64:51:00:eb:
         61:e6:83:9b:27:44:2a:1c:39:04:ce:9d:ab:45:d6:6d:a2:07:
         6c:26:f0:04:75:b2:a2:29:65:60:f9:df:ae:1e:54:05:4f:f6:
         59:5e:86:56:ea:b9:4d:08:60:b1:95:f7:9c:82:7c:b7:95:2f:
         e8:55:8b:61:48:23:e5:cd:76:a8:60:51:9a:79:b5:55:6c:d6:
         aa:7e:6c:62:5b:94:57:35:70:a5:86:99:65:4e:de:1e:50:0f:
         ca:23:5d:69:6e:b9:7c:34:97:5a:e0:2b:ce:43:35:cb:69:71:
         b5:8c:94:82:cc:8b:dd:46:06:b3:c1:8f:d7:84:fd:63:4b:a5:
         54:c8:bf:ab:05:09:df:bf:c3:e6:40:16:77:12:b1:35:db:06:
         04:db:a9:35:04:cb:86:52:cf:42:49:af:70:60:55:4b:c8:34:
         53:64:b4:ea:6e:f9:d8:ac:9f:08:3a:01:6e:d7:f8:cf:82:3c:
         38:ac:43:e7:d3:74:c2:5c:19:70:77:a1:b1:87:76:e5:51:ae:
         db:89:70:d1:81:c7:45:72:0d:d4:d7:96:e3:96:b2:c2:9e:13:
         6c:7d:ba:67:9a:11:e0:bb:da:24:6f:89:a4:38:f4:28:5c:38:
         7f:fa:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 29 04:03:25 2023 by rpki-client on console-fra.rpki-client.org