Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd0d939-1b26-3dc2-b496-9b77974cb805.roa
File:                     6cd0d939-1b26-3dc2-b496-9b77974cb805.roa (raw, json)
Hash identifier:          akup2xKj54n9xnYM+DLqBY3ZCfu9TpNtDmHF9U5V5NY=
Subject key identifier:   FA:9D:00:71:AB:44:FE:51:BF:03:36:4E:D6:3C:7D:3A:8C:CD:D8:28
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328576D51CC73C042CFC172CD618D3D
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd0d939-1b26-3dc2-b496-9b77974cb805.roa
Signing time:             Fri 19 Jun 2020 16:20:21 +0000
ROA not before:           Wed 20 Feb 2019 05:00:00 +0000
ROA not after:            Thu 22 Sep 2022 04:00:00 +0000
asID:                     16491
IP address blocks:        75.104.228.0/22 maxlen: 24
                          75.104.232.0/21 maxlen: 24
                          75.104.19.0/24 maxlen: 24
                          75.107.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:cd:61:8d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb 20 05:00:00 2019 GMT
            Not After : Sep 22 04:00:00 2022 GMT
        Subject: CN=af30ee73-6a58-4cb7-9d83-2fec1e7a57f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:9e:f6:4d:e7:53:b8:4e:ff:03:00:82:b7:
                    3f:4f:38:c3:eb:19:96:88:e7:2e:cb:22:87:01:65:
                    52:bf:52:54:0b:95:63:75:24:68:35:e6:c7:0e:ca:
                    9b:4c:78:e8:86:e9:a8:38:9b:8b:f2:1a:ac:22:8f:
                    dd:6f:2f:f3:17:4e:da:48:63:81:bd:fd:f5:66:88:
                    21:77:7d:4e:76:ba:a0:35:a6:ca:ed:fc:5a:f1:36:
                    d5:87:3b:b1:6c:29:f5:4a:b7:9b:6c:9f:17:b5:33:
                    1e:27:61:7c:72:35:3f:7e:65:a6:42:c7:9c:a4:62:
                    7d:99:83:90:0d:aa:4a:c3:e9:20:e6:4c:8a:29:48:
                    95:9c:de:2e:ec:41:22:39:73:15:5f:b6:0d:38:cb:
                    24:5d:6d:84:a8:59:23:ca:cd:2c:cd:89:7c:9e:35:
                    4e:59:e1:c7:b2:5e:1e:f4:74:53:c3:dd:ac:54:e2:
                    4a:31:df:07:10:0e:07:79:9f:11:31:66:ab:e6:97:
                    57:a0:5c:30:ab:ca:f6:41:4d:b7:0a:51:18:52:73:
                    e1:fa:8e:88:94:07:24:c4:b7:ac:f0:83:33:fa:7d:
                    d0:9f:2f:32:c7:4c:99:d8:06:f1:8d:4b:7a:10:76:
                    fe:00:97:30:3d:c2:ce:67:82:be:d6:46:7c:6e:d0:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9D:00:71:AB:44:FE:51:BF:03:36:4E:D6:3C:7D:3A:8C:CD:D8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd0d939-1b26-3dc2-b496-9b77974cb805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.19.0/24
                  75.104.228.0-75.104.239.255
                  75.107.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:12:f3:9d:cb:ae:ce:54:af:37:86:90:eb:18:c4:e2:72:f0:
         5e:71:d2:00:52:87:5e:43:41:89:45:aa:0d:06:ea:3b:46:f2:
         52:48:00:78:6b:d8:cf:c0:27:7a:52:a2:d0:3a:3e:73:f2:f2:
         e4:1d:0e:b2:8f:94:c0:be:ab:4f:7a:01:23:bd:d3:98:93:87:
         d0:bf:f4:2d:d6:db:bb:d3:bf:6f:c2:1b:5d:89:08:15:6f:6a:
         70:02:9a:0c:da:a0:5f:f5:66:8e:84:f7:2c:0b:fe:0f:5f:de:
         ad:b9:05:a2:45:f8:7c:80:c0:9f:ba:7e:47:f7:a0:9b:46:b8:
         d5:6c:51:91:8c:13:be:8b:15:9e:ba:25:3f:0f:85:33:b1:54:
         a1:a9:f8:96:ee:0e:e6:33:32:b2:c7:77:78:64:c6:e0:6e:9e:
         21:7d:16:2e:8f:9c:20:26:31:25:fc:8e:27:50:7e:cc:c5:ae:
         4c:b0:b1:53:c4:10:1e:e5:b5:de:14:37:46:dc:75:45:04:26:
         ee:29:b5:24:ca:87:f3:dc:be:2f:36:ba:80:6f:69:ef:e1:ad:
         c4:6b:e7:61:d9:11:71:4a:4e:12:96:b4:fc:17:1c:af:8e:fb:
         77:85:ac:e1:a3:30:6c:71:ca:a0:76:25:a4:a8:00:31:1a:c5:
         c3:2f:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:07 2023 by rpki-client on console-ams.rpki-client.org