Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/75403397-ae54-35a3-946d-a34343abb98f.roa
File:                     75403397-ae54-35a3-946d-a34343abb98f.roa (raw, json)
Hash identifier:          Q+fUM9/7Sn3qu8IxLjUPYm2dGFPnMeZ+gJ/ondb8vqk=
Subject key identifier:   5D:1D:57:68:86:B8:FF:C8:CA:85:55:C9:AC:9B:F2:7D:EA:14:05:90
Certificate issuer:       /CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d
Certificate serial:       010D0C9F4328576D51CC73C042CFC171CF159A9E
Authority key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/75403397-ae54-35a3-946d-a34343abb98f.roa
Signing time:             Fri 01 May 2020 07:13:51 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     20473
IP address blocks:        192.206.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:cf:15:9a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=e06e6b66-6eec-4410-9f1b-56c3dea17e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:de:6f:3e:a3:e1:1c:ff:71:f2:5a:2d:89:
                    0a:ee:16:46:75:e0:9e:f4:08:a5:8c:89:5a:a0:79:
                    1e:ba:e3:8d:5c:a8:93:1e:66:d8:34:20:24:11:79:
                    d7:d2:1a:fe:0b:2a:86:e8:51:db:47:f7:f0:f7:83:
                    49:ce:5a:7b:8f:d5:32:bc:2c:45:c7:05:dc:dd:77:
                    a0:80:ee:ac:31:65:9f:af:09:9c:99:ec:a8:6c:13:
                    ba:95:1e:45:27:ed:4e:49:a0:cc:0f:d8:0c:dd:15:
                    ca:9b:0e:4a:0d:14:db:93:9a:74:4b:99:84:03:e7:
                    f4:04:37:0f:5f:89:08:e8:c1:ac:10:2d:d6:3f:65:
                    8b:14:ab:03:77:f1:0f:f0:92:cb:f2:7d:f5:92:72:
                    9b:2e:65:43:d1:1b:00:b8:5c:90:df:1d:68:5e:69:
                    66:d2:56:49:b1:fc:f4:b4:77:67:37:2c:06:bb:82:
                    af:d3:c2:66:e9:3a:bf:d9:33:7c:f3:10:12:f2:c6:
                    f0:7c:62:d1:4b:43:c5:c3:37:00:e6:32:93:f7:d0:
                    8b:f7:1b:e6:e6:7d:15:e9:9a:c5:44:fe:79:d0:32:
                    72:58:44:37:92:ee:4b:5f:84:52:78:b7:7d:01:00:
                    63:10:a8:6c:61:0e:f3:8b:ed:b2:18:dd:14:d0:ba:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1D:57:68:86:B8:FF:C8:CA:85:55:C9:AC:9B:F2:7D:EA:14:05:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/75403397-ae54-35a3-946d-a34343abb98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:46:39:41:dc:04:f7:4e:45:ae:b2:c8:30:c6:1b:4d:19:
         d4:ac:32:aa:c7:b9:30:58:8a:44:a1:c5:8e:a5:ad:b5:9c:5c:
         6a:d7:1e:ef:7b:a8:3e:22:18:01:b7:4e:1a:1a:3c:bc:e5:72:
         c6:38:b5:55:41:f8:40:fd:40:ea:bc:6c:0e:17:fe:97:7e:01:
         00:19:8c:67:df:d2:77:13:81:d4:eb:99:ca:2d:4a:9d:44:f4:
         49:43:20:44:9a:d7:a1:21:e3:ff:96:50:77:c3:36:e8:4b:76:
         13:cd:e8:d0:f7:90:be:73:07:ee:6d:f4:df:65:d5:8e:84:72:
         f4:8d:44:bb:fc:c5:40:a9:8a:76:53:d3:fd:b0:bf:23:70:73:
         7d:4c:17:87:e6:68:22:9a:50:c1:05:69:2a:8d:27:bf:cb:6b:
         ad:8e:fa:7b:f6:00:b8:2e:ba:21:80:b0:23:bc:f5:ae:7c:4c:
         04:0d:c8:d5:b0:08:a4:3f:db:60:4a:f4:24:90:ac:7b:ee:27:
         95:b2:6a:c1:01:57:99:6d:ab:7e:77:90:14:3f:df:1f:1e:63:
         f1:de:b3:c6:4b:7d:2d:c1:1a:22:7e:d6:b3:8f:ea:f4:e1:36:
         ac:2e:53:a2:a0:4a:d7:8c:df:70:0d:23:35:b1:cc:be:ae:16:
         e5:93:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:08 2023 by rpki-client on console-fra.rpki-client.org