Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/3b99d3ad-071d-3d22-b819-7ffdee6ddf05.roa
File:                     3b99d3ad-071d-3d22-b819-7ffdee6ddf05.roa (raw, json)
Hash identifier:          fk9vrWwHsdWNsiR4N4C5+FqNTru6fZAdaolVMsLY9bw=
Subject key identifier:   B7:98:47:6F:1B:A2:F3:F9:08:A2:CB:95:55:D0:FF:BD:2C:61:27:93
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F4328576D51CC73C042CFC16C10EF6CFE
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/3b99d3ad-071d-3d22-b819-7ffdee6ddf05.roa
Signing time:             Sat 20 Jul 2019 19:50:22 +0000
ROA not before:           Mon 08 Apr 2013 04:00:00 +0000
ROA not after:            Sat 08 Apr 2023 04:00:00 +0000
asID:                     55079
IP address blocks:        162.208.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:10:ef:6c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Apr  8 04:00:00 2013 GMT
            Not After : Apr  8 04:00:00 2023 GMT
        Subject: CN=8560e813-3274-4653-bf1d-3e6df73fcb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:67:fa:6a:18:72:7f:20:77:0f:c2:d8:31:
                    c0:86:4d:9f:bb:56:91:8a:6c:eb:a6:b9:fe:61:af:
                    98:2d:44:cc:bc:61:54:a0:39:36:a0:37:d9:37:4d:
                    63:fa:e5:75:d8:c8:18:8f:d3:10:a1:e7:fb:36:8e:
                    cc:cb:ee:32:2f:f3:66:60:9c:67:9f:01:8a:2b:ba:
                    c0:29:fa:64:e1:e9:af:80:f2:3c:8e:bd:1a:73:88:
                    07:39:7f:a6:65:5a:e8:43:c6:f8:77:81:50:44:49:
                    a9:92:70:69:1e:54:7d:02:cf:33:a1:35:17:40:f3:
                    28:b6:ef:fb:fb:da:cf:aa:ab:48:6a:f8:32:8b:fa:
                    fc:49:ff:54:f4:33:56:7c:ab:12:0c:cc:37:41:e4:
                    a0:31:9e:d4:48:f5:fa:71:03:ed:bc:0d:bf:5f:3b:
                    36:e4:a4:c0:65:5b:5c:b8:79:92:f0:0d:a9:96:6f:
                    fc:b0:fd:8e:9a:f5:56:80:d8:9d:b6:18:2b:6a:99:
                    19:12:85:d6:31:6d:29:2f:70:df:ef:83:06:eb:ce:
                    26:16:a1:eb:db:1d:bc:19:c3:98:16:bd:5e:f4:b6:
                    dc:4d:50:80:58:11:08:cf:64:5d:4a:64:b7:03:1d:
                    9a:b2:fd:0a:86:4d:6b:aa:3f:5e:27:a6:12:64:31:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:47:6F:1B:A2:F3:F9:08:A2:CB:95:55:D0:FF:BD:2C:61:27:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/3b99d3ad-071d-3d22-b819-7ffdee6ddf05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:95:7c:7d:84:48:c3:1b:e4:d5:19:41:97:50:db:44:2f:6e:
         62:fd:de:c7:33:9a:ad:b2:18:a7:e5:6b:b0:83:28:82:74:57:
         85:1a:6d:79:dc:77:0c:41:bc:19:d5:c9:0b:c0:83:87:ab:9f:
         50:ee:0b:8a:a4:84:cc:fc:01:75:52:94:fb:8c:c4:57:78:70:
         45:e6:d1:8e:ca:75:27:a2:bf:a7:ed:98:e6:b6:1f:b3:84:95:
         ef:2f:73:26:03:64:fb:ab:75:64:98:53:f5:75:47:4c:9c:82:
         bc:18:27:c3:78:e9:73:e6:8d:9b:5c:a5:5f:f9:f2:b0:10:63:
         32:3c:2d:86:01:cd:d7:0f:95:81:27:40:2f:6a:56:e8:06:16:
         d0:5a:f6:61:2b:d1:45:03:82:2a:16:ef:e0:07:8f:48:f6:44:
         f6:a5:a0:4b:ca:a0:c0:0c:79:3e:a3:d0:57:3d:6e:8f:8b:4b:
         60:c7:86:8e:f6:d0:f8:be:53:2d:21:30:6c:53:2c:6c:32:d2:
         e4:29:51:69:ef:30:c6:56:92:f9:9c:0f:38:af:a1:01:5f:25:
         ba:cc:86:4c:ed:75:67:8b:c0:bc:62:1b:14:36:b6:a5:64:67:
         c9:ea:97:55:28:74:3d:49:f8:a6:01:3d:69:e9:8e:f6:0a:19:
         49:d3:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:32:49 2024 by rpki-client on console-ams.rpki-client.org