Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/d00112a0-99cf-3725-842e-2aa6aa7d0d05.roa
File:                     d00112a0-99cf-3725-842e-2aa6aa7d0d05.roa (raw, json)
Hash identifier:          bEfuRqzLyViCrHOiagW2TIouSeCT1lY+534jbhpxKro=
Subject key identifier:   C2:D4:D1:4D:78:4B:5B:45:24:BE:7C:67:C3:2C:77:9D:5D:27:C7:10
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D088D98A
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/d00112a0-99cf-3725-842e-2aa6aa7d0d05.roa
Signing time:             Fri 01 May 2020 13:59:21 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:88:d9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=bbf6aa2f-75be-4469-bdbd-ef2373f26330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:61:a4:e7:07:bc:46:dc:d9:0c:23:03:5e:
                    94:56:2f:cb:ce:06:9b:a3:45:76:94:24:54:08:3f:
                    f8:a9:3c:b9:83:2b:62:68:46:d5:ef:85:4f:35:72:
                    8c:68:44:19:8b:2b:6d:3f:5e:c0:d5:6f:90:fe:bd:
                    14:fd:78:20:a8:bb:2a:14:5f:78:a1:16:71:11:99:
                    bd:d0:c4:f0:66:02:67:cf:bd:82:cc:8a:a0:1b:4d:
                    10:3f:dc:79:e5:09:00:f4:ea:90:de:85:5b:e2:fc:
                    26:e8:be:2b:e2:8a:4e:8b:7c:8f:99:77:61:b7:3c:
                    59:16:50:3c:5f:73:ca:62:1f:16:ba:e9:e9:8b:af:
                    e6:c6:c2:4d:25:46:e3:89:78:99:ea:3b:8b:f6:42:
                    1a:55:fe:24:3d:21:9a:10:03:8d:a6:dd:16:9c:c3:
                    c2:e5:98:ba:40:88:79:e1:b8:73:34:12:f3:ad:4e:
                    21:99:70:43:ce:a5:26:e0:d0:59:3e:2a:34:c3:62:
                    f7:2e:e8:bb:f2:06:da:a5:81:44:1e:dd:4b:d0:a2:
                    94:f1:26:5a:3e:80:ac:60:cb:62:77:03:6e:87:f5:
                    06:85:3d:50:2c:27:22:60:13:29:bd:3e:3f:24:b1:
                    b9:ab:64:83:4e:72:1a:b7:ea:35:d0:35:30:10:4c:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:D1:4D:78:4B:5B:45:24:BE:7C:67:C3:2C:77:9D:5D:27:C7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/d00112a0-99cf-3725-842e-2aa6aa7d0d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:b9:83:de:ae:dd:d6:1b:b8:b5:2c:25:13:b2:e1:d1:e9:
         82:93:61:42:45:7c:15:e6:08:61:ba:cb:e6:d1:fe:e9:46:05:
         4b:ac:05:79:ee:aa:14:e2:93:07:cb:62:5b:70:17:1b:08:28:
         5f:d1:f9:8c:33:8b:da:98:22:39:22:35:b0:e0:df:cc:2a:ca:
         df:b1:05:38:b4:8a:3d:6b:90:ec:61:64:3a:8f:d2:95:87:a9:
         05:3a:97:cf:2e:b4:99:21:0f:56:2f:a9:a8:2b:61:b4:1b:11:
         4b:3e:ee:b9:3b:b1:8a:c3:17:ec:ad:8c:27:5e:cb:fb:34:5d:
         3e:36:b4:46:ac:e1:ab:5a:9f:20:4a:f6:f2:c0:24:24:78:49:
         aa:bb:58:e4:ea:d7:63:f8:de:a6:3c:d0:95:4a:e2:c6:d2:86:
         1f:4c:04:5d:0e:6e:c8:5f:82:00:61:4a:37:ca:96:7f:85:d4:
         9b:94:2c:c7:66:8a:7d:b6:b6:78:6a:5e:c3:cb:5b:04:80:6b:
         3f:c4:4e:60:a4:cd:43:82:b7:fc:98:db:a7:b3:50:da:28:92:
         9e:57:f0:5d:63:3e:d6:d6:b7:d5:15:d5:00:cb:e6:d3:a2:c3:
         5e:17:b5:25:5c:5c:0c:f5:86:ae:b6:de:0c:78:fe:d5:3b:dc:
         f0:37:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:49 2024 by rpki-client on console-fra.rpki-client.org