Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/1a0a6560-0aa7-379d-9456-c2d5ad966512.roa
File:                     1a0a6560-0aa7-379d-9456-c2d5ad966512.roa (raw, json)
Hash identifier:          rzB95MDNtPIx/SV4eHl/n47qUiau51MnotOITdHUvds=
Subject key identifier:   3F:44:E0:E0:85:08:63:B3:D7:B0:7A:3A:65:34:24:E7:90:29:76:D6
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F43285842FDC4626D4D20A28D564F5E00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/1a0a6560-0aa7-379d-9456-c2d5ad966512.roa
Signing time:             Thu 24 Aug 2023 13:00:26 +0000
ROA not before:           Thu 24 Aug 2023 13:00:26 +0000
ROA not after:            Wed 22 Nov 2023 14:00:26 +0000
asID:                     5050
IP address blocks:        147.73.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fd:c4:62:6d:4d:20:a2:8d:56:4f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Aug 24 13:00:26 2023 GMT
            Not After : Nov 22 14:00:26 2023 GMT
        Subject: CN=b8db590b-097b-410e-a15d-e2516d471ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:9e:35:d2:48:8e:b2:69:c1:30:73:a4:8d:
                    05:0b:c7:c7:0c:73:77:cd:ce:e2:bf:01:05:4b:12:
                    68:3a:12:6e:42:6d:06:22:4d:b0:c1:17:38:8b:2a:
                    ca:12:d1:7a:4e:0a:26:60:4e:69:c0:cd:fc:a2:3b:
                    11:62:4d:88:bd:dc:3a:8f:80:5d:0d:93:ff:6a:a8:
                    ca:ee:b6:da:7a:9b:76:ea:d0:17:59:11:a1:e3:df:
                    72:28:38:8a:9a:ed:53:8d:03:bb:33:1d:62:8f:bc:
                    39:4e:55:3a:bc:a4:0d:7d:0a:b9:b3:f7:0f:94:11:
                    ff:25:18:bb:10:fb:2a:30:ad:04:00:8d:6f:17:83:
                    06:a4:9e:9e:29:b1:fd:71:56:a3:b1:ce:d5:c5:69:
                    54:e5:b6:8f:de:1e:41:41:fd:a5:c9:df:4a:8e:b6:
                    37:1d:1d:5c:9d:bf:e1:e1:b1:9c:81:f9:0c:1d:70:
                    01:17:0d:de:94:2e:33:d8:f3:18:9a:15:4b:1b:4c:
                    a9:9d:d1:35:c6:17:56:41:c0:29:9e:15:25:65:ac:
                    88:7a:e2:89:45:69:36:6a:d6:d4:f1:2b:e4:00:b9:
                    0a:52:80:a7:51:55:33:bc:cf:9b:dc:6e:ec:32:f8:
                    98:88:c9:e7:62:7b:00:8b:4b:09:73:f4:44:49:71:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:E0:E0:85:08:63:B3:D7:B0:7A:3A:65:34:24:E7:90:29:76:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/1a0a6560-0aa7-379d-9456-c2d5ad966512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:9f:19:08:09:1b:5a:ec:03:fe:2a:05:ab:65:f6:15:b1:91:
         75:d1:b8:c9:72:47:52:dc:80:19:20:74:23:af:92:43:71:38:
         de:2a:fd:b7:3b:c8:32:f8:5f:b8:43:d4:60:ec:fa:ce:1e:c4:
         66:e5:7e:74:e8:76:59:03:24:00:31:7e:5b:5f:df:4b:11:fe:
         fc:52:2c:82:da:8c:6b:b8:48:d9:89:20:9d:95:0d:81:1e:37:
         82:96:17:4e:d6:b6:9d:99:4d:dc:4d:6c:8d:00:f6:94:5a:73:
         af:35:e5:20:dc:b9:85:3c:74:cf:86:d2:64:21:bc:b6:99:01:
         f5:ad:03:3f:5d:bf:e3:d3:ed:bf:b2:06:c6:f9:ac:62:f8:b4:
         f8:c4:38:65:ff:7b:28:d3:59:3f:db:54:f2:6b:6b:2b:9d:39:
         0e:6e:33:f9:d6:91:8b:1f:9f:a3:12:77:fe:1b:39:76:12:3f:
         e6:38:94:ac:90:68:eb:7f:ed:dc:8d:10:d9:61:5a:1c:74:06:
         af:b3:2e:7d:7d:6f:2d:69:e7:19:b1:de:fe:9e:b7:b7:27:95:
         f0:3f:a4:34:01:cf:65:53:e3:da:61:00:15:71:02:4c:11:ba:
         5f:6a:fe:c1:67:14:7c:65:b9:27:9f:0f:37:48:f4:1c:6f:94:
         80:b6:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org