Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f8f25d62-0257-3158-bdce-a861ab4d5668.roa
File:                     f8f25d62-0257-3158-bdce-a861ab4d5668.roa (raw, json)
Hash identifier:          7s5wdZGlVAuJlNUjWS7j/yBn754+pkXn/fPgHmExP9I=
Subject key identifier:   34:2E:2D:27:D2:9A:92:19:3C:CA:29:2E:E4:AF:2C:1E:2A:1B:BB:5B
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D08D35C5
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f8f25d62-0257-3158-bdce-a861ab4d5668.roa
Signing time:             Fri 01 May 2020 14:04:07 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:8d:35:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=f4242e2f-0d6b-4f42-b1ac-801fed7386da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:1d:6e:f5:8d:03:f8:29:27:93:01:64:4b:
                    9f:22:98:e0:19:36:1d:39:0c:42:54:ec:89:dc:16:
                    a3:73:8e:f8:d6:cd:81:12:1a:89:c5:0a:08:27:87:
                    6f:40:ef:0a:e3:0b:59:a2:55:07:66:6f:b7:01:fe:
                    05:23:10:9d:bb:d7:86:62:3a:a3:12:f3:5a:8d:ab:
                    90:04:87:0e:36:42:c1:6c:6b:e7:57:fd:5e:ff:a4:
                    f0:12:e1:1b:54:66:6a:4e:7f:1c:70:06:a3:02:41:
                    e3:10:ef:2b:79:43:db:17:ca:50:10:4a:a9:f7:99:
                    74:33:63:14:04:03:89:0a:95:3c:f2:7a:43:47:4b:
                    dc:66:35:ef:ef:62:6c:41:a2:36:f0:77:ee:34:0f:
                    e5:41:4b:f4:8e:37:5b:27:c9:7f:50:18:65:42:d1:
                    b1:4b:d6:01:ee:45:81:9e:45:c9:e1:62:92:08:b8:
                    c5:79:f2:54:a8:ea:92:0f:e0:84:ac:0e:8e:42:99:
                    23:aa:d6:9c:99:96:29:bb:dd:24:67:85:99:78:1e:
                    05:a0:31:42:9e:32:73:8e:95:4b:72:c2:3c:0e:74:
                    30:72:ba:13:23:9d:e4:be:3b:2b:93:7b:07:e2:ee:
                    48:6e:cb:6d:9f:28:6c:2b:c4:4e:c1:d8:f2:8b:08:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2E:2D:27:D2:9A:92:19:3C:CA:29:2E:E4:AF:2C:1E:2A:1B:BB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f8f25d62-0257-3158-bdce-a861ab4d5668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:c6:8e:65:df:b9:62:1a:98:d8:26:80:ce:9a:40:e2:7d:
         bc:e5:5e:bb:d2:39:1b:bf:d8:cc:2b:1e:06:ed:06:c2:57:40:
         c2:5e:e5:da:d3:8e:73:5b:12:97:9f:b5:cc:b2:81:c6:4d:3c:
         45:6a:62:d3:43:b0:c1:dc:69:33:07:29:4e:da:e1:3d:9f:e0:
         36:19:94:d8:ae:de:cb:03:06:f6:8a:32:fe:53:8f:8e:79:5e:
         85:33:9e:d0:eb:d2:2b:42:6a:08:9d:56:fc:b8:ac:0d:d0:ca:
         c5:0d:32:e2:e3:e2:62:67:8b:81:3a:1d:4e:74:be:04:f0:61:
         2e:31:93:65:3f:84:d4:b2:44:fb:ff:4b:f3:38:10:c7:bd:9d:
         91:a0:5e:28:42:c1:ac:2d:39:21:94:e9:53:80:5e:cd:30:43:
         ae:2b:e1:24:98:a9:6c:ec:a9:0e:7a:ad:e2:1f:96:b8:b7:d6:
         67:35:dc:7e:29:e9:bf:6e:87:89:a3:7d:9f:36:f1:b0:fb:72:
         cf:a3:23:bc:5b:89:55:9d:51:8b:fa:06:25:38:9a:cb:fd:61:
         94:11:b6:46:62:a6:11:0f:c1:23:40:32:ff:60:9b:81:53:47:
         43:4a:51:2e:6e:4b:2f:44:9b:51:25:8f:af:f9:8e:90:93:ec:
         d0:2b:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:15 2023 by rpki-client on console-fra.rpki-client.org