Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ef885ef-5dd4-3ee8-93cc-446aa105d09d.roa
File:                     9ef885ef-5dd4-3ee8-93cc-446aa105d09d.roa (raw, json)
Hash identifier:          kxa/39T7cssXs++gHjvbf6SRC6QXyLIssY3AK/UZPbU=
Subject key identifier:   EB:5E:BB:71:BE:8A:D6:7E:E9:C8:9B:40:E5:33:86:8F:64:E3:6D:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328576D51CC73C042CFC1731041018A
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ef885ef-5dd4-3ee8-93cc-446aa105d09d.roa
Signing time:             Thu 02 Jul 2020 15:59:22 +0000
ROA not before:           Wed 20 Feb 2019 05:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     16491
IP address blocks:        67.54.192.0/21 maxlen: 24
                          67.54.248.0/21 maxlen: 24
                          70.41.23.0/24 maxlen: 24
                          184.63.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:41:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb 20 05:00:00 2019 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=9f4ad626-eba2-490a-86da-40667a84922c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:48:06:dd:c3:e8:80:90:0e:f3:86:2b:d9:
                    0b:84:de:de:59:42:fe:c8:a6:dd:bf:be:f7:95:67:
                    c0:7e:66:d2:5e:7e:ef:e7:49:fb:d5:a1:89:9e:5c:
                    50:cf:5e:ee:3e:b5:8e:f5:e8:75:2f:e0:dc:06:5d:
                    44:5c:6d:c5:71:39:71:74:20:71:67:ce:bc:ec:24:
                    00:e2:69:83:51:7c:40:ba:3c:7e:9e:7c:e2:88:b3:
                    45:8e:6c:f0:16:d7:5f:05:22:49:ba:1d:0e:73:01:
                    7a:46:dc:80:20:cb:ee:2a:fa:11:53:19:62:0f:87:
                    ff:76:38:d9:19:36:60:cb:2f:8a:93:bc:29:34:99:
                    e1:e7:8f:75:98:93:82:5c:a1:0b:9b:e2:8d:53:53:
                    01:a0:b0:73:33:ed:6b:00:f7:6d:b0:13:0b:c3:a4:
                    4a:72:05:ec:32:34:0a:9a:c2:a8:c4:99:51:f8:1d:
                    02:23:c6:8b:6f:58:59:a5:a3:fe:01:14:c0:64:b0:
                    6c:69:f5:37:e9:a8:31:97:01:a6:7f:ae:bf:b5:75:
                    f3:a7:20:2a:5b:20:72:3e:f9:56:81:86:56:fc:8a:
                    06:2b:32:a3:3b:8a:41:a3:1c:df:83:82:ef:5d:a2:
                    e1:e0:96:0b:b4:3d:b0:d0:6a:45:c0:70:d9:ff:ce:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:BB:71:BE:8A:D6:7E:E9:C8:9B:40:E5:33:86:8F:64:E3:6D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ef885ef-5dd4-3ee8-93cc-446aa105d09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.192.0/21
                  67.54.248.0/21
                  70.41.23.0/24
                  184.63.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:fa:77:5b:f0:91:fb:3c:84:2d:d2:b2:26:c5:80:1a:82:
         9c:04:c3:2f:92:e6:4b:bc:24:4d:31:a2:e1:0c:a5:7c:c2:e9:
         3c:92:12:68:a4:11:a6:e9:de:5f:90:9a:e2:94:95:e9:37:7d:
         ab:91:aa:dc:b7:f1:5e:b1:9f:30:26:a6:c0:2f:c4:1f:27:3c:
         5e:49:68:66:ee:67:9f:e6:dd:6c:7d:cd:04:47:3a:38:7e:fd:
         33:de:c4:d2:23:3c:eb:b5:7e:73:bf:12:3a:9b:c1:9b:19:1e:
         dd:90:38:09:5c:02:c4:8f:45:59:b3:ce:45:25:c7:58:82:8b:
         f2:ce:65:4b:1f:a3:14:c9:99:68:b0:4d:81:43:8d:72:48:27:
         fb:ce:71:e8:3f:f4:0a:e4:09:a8:2b:4c:08:c3:2b:3e:ca:89:
         07:b0:e6:be:fe:93:9f:a3:2a:2e:a7:2f:3d:3e:cf:61:64:03:
         6e:99:38:83:c5:57:f8:6a:61:48:ab:6e:20:7a:cc:df:4f:2b:
         62:b5:95:78:20:48:ef:12:c6:ab:0a:80:0a:7f:57:f6:f4:c5:
         e2:94:08:12:c4:6c:a6:8e:31:9e:1a:35:87:e9:4e:a7:a2:7c:
         d5:93:bc:ca:8e:e2:b9:e7:f1:59:c9:72:eb:89:7d:de:22:26:
         f6:f0:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:07 2023 by rpki-client on console-ams.rpki-client.org