Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1174ab47-279c-31b0-b4e6-9499d81d35f7.roa
File:                     1174ab47-279c-31b0-b4e6-9499d81d35f7.roa (raw, json)
Hash identifier:          sUwP8ZnlcXH10HYNyypF0qyHfaL9TgkY/CtdJyqOyaQ=
Subject key identifier:   EB:BF:DA:2C:0A:5C:19:7E:7F:37:B6:06:9C:D6:D1:28:23:CE:42:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285839E04FDCF1D9B9834448087D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1174ab47-279c-31b0-b4e6-9499d81d35f7.roa
Signing time:             Mon 10 May 2021 04:00:00 +0000
ROA not before:           Mon 10 May 2021 04:00:00 +0000
ROA not after:            Mon 02 Oct 2023 04:00:00 +0000
asID:                     397030
IP address blocks:        50.204.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:e0:4f:dc:f1:d9:b9:83:44:48:08:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 10 04:00:00 2021 GMT
            Not After : Oct  2 04:00:00 2023 GMT
        Subject: CN=10cdf942-8164-41d7-9240-4f5e39120eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:1f:5e:2f:1e:e2:25:9e:dd:c4:0a:4f:7a:
                    30:d4:62:e2:b2:d0:24:08:b8:9a:da:8e:27:e7:9b:
                    a7:87:d7:48:f1:e2:e0:be:00:a5:0a:15:f3:08:52:
                    9a:cd:b4:cd:bc:a7:02:d2:95:45:63:59:fe:97:b2:
                    9d:85:a5:e2:7c:b7:77:56:08:b8:62:ab:3d:54:59:
                    69:60:bf:e4:b9:88:a1:6e:f3:51:6a:e2:fa:ec:8b:
                    e7:fb:3c:b7:ce:65:89:f3:ee:3f:cc:b8:06:d5:b6:
                    d9:1a:ec:4d:c3:71:f5:71:e6:c1:36:45:ac:ed:96:
                    64:b4:80:02:16:d0:02:4c:b1:f7:1c:5f:0c:c8:88:
                    e5:2f:b7:f9:b9:eb:78:fa:8c:7f:72:6f:63:ea:5c:
                    f7:ae:ee:cd:38:ff:8f:af:cd:e9:15:78:8b:65:1e:
                    68:04:4d:f8:5e:3c:0c:3f:2a:bb:3a:08:04:77:db:
                    af:fe:f3:58:fc:49:bc:ed:66:eb:de:1e:29:33:1b:
                    d0:d5:6c:4c:e9:64:e8:8f:6a:8b:e8:95:90:a6:98:
                    10:f5:39:46:ef:6f:a2:2c:fe:6c:f1:ed:3a:36:0d:
                    83:24:1f:71:9b:f8:fd:fd:28:a5:a3:f4:e8:6d:13:
                    b8:d3:a1:ed:83:4e:31:64:b7:bb:51:ac:ad:51:8d:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:DA:2C:0A:5C:19:7E:7F:37:B6:06:9C:D6:D1:28:23:CE:42:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1174ab47-279c-31b0-b4e6-9499d81d35f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.204.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:64:ac:66:94:9f:b5:ae:99:3f:9a:bc:ba:57:fb:d9:78:5e:
         c9:df:ae:69:fb:0a:90:42:a3:db:1a:45:a7:0b:21:8b:db:0d:
         64:de:78:fd:9e:e1:d3:24:f7:21:44:27:14:cc:43:ac:8f:51:
         fd:5b:b5:f2:90:a1:2a:23:85:72:33:71:5c:3a:10:8e:90:e7:
         96:c8:09:37:a6:ff:11:db:03:7c:b1:41:5f:e2:b2:a4:ba:a5:
         b1:36:87:f0:66:81:65:35:6f:a2:2d:2a:6f:f4:ff:e6:b2:0e:
         45:59:8d:49:8a:54:21:4f:1d:52:00:ca:22:6a:5e:d5:2f:e8:
         eb:f4:bb:a1:21:4f:2b:74:d0:87:60:98:50:f0:27:25:4a:94:
         d4:4e:2c:73:ef:38:18:ca:56:5f:ff:14:9d:75:83:f7:79:0d:
         ac:8d:a1:6c:ad:6d:9c:7f:38:19:b6:fb:44:0f:70:56:8a:1d:
         73:fc:0f:ad:18:17:f5:19:3e:c4:cc:6c:21:b7:54:c2:ca:e0:
         28:fd:b1:14:5e:ce:05:61:0d:d0:90:a1:8a:ab:54:37:cf:79:
         6f:fe:2d:a4:59:cc:9a:de:f4:cb:2f:80:49:09:54:b7:3b:72:
         f3:23:87:dd:37:0a:b6:33:8a:bd:2c:39:d5:2e:2e:23:d1:38:
         86:b3:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 04:11:27 2023 by rpki-client on console-fra.rpki-client.org