Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/6d09a28b-f4fb-3f98-81af-fe8dbbb627d4.roa
File:                     6d09a28b-f4fb-3f98-81af-fe8dbbb627d4.roa (raw, json)
Hash identifier:          ZVgsZSoJAfyWKrnaP9D1DGBtkIwQzFa22eEFsu5DB6w=
Subject key identifier:   53:DC:78:A1:62:59:E0:DA:6E:99:95:92:BE:9D:28:3E:A3:15:86:45
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F4328576D51CC73C042CFC173544C76AD
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/6d09a28b-f4fb-3f98-81af-fe8dbbb627d4.roa
Signing time:             Wed 15 Jul 2020 21:06:04 +0000
ROA not before:           Tue 08 May 2018 04:00:00 +0000
ROA not after:            Tue 18 Oct 2022 04:00:00 +0000
asID:                     393891
IP address blocks:        2620:135:4004::/48 maxlen: 48
                          2620:135:4001::/48 maxlen: 48
                          2620:135:4002::/48 maxlen: 48
                          2620:135:4003::/48 maxlen: 48
                          2620:135:4005::/48 maxlen: 48
                          2620:135:4006::/48 maxlen: 48
                          2620:135:4007::/48 maxlen: 48
                          2620:135:4008::/48 maxlen: 48
                          2620:135:4009::/48 maxlen: 48
                          2620:135:400a::/48 maxlen: 48
                          2620:135:400b::/48 maxlen: 48
                          2620:135:400c::/48 maxlen: 48
                          2620:135:400d::/48 maxlen: 48
                          2620:135:400e::/48 maxlen: 48
                          2620:135:400f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:54:4c:76:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: May  8 04:00:00 2018 GMT
            Not After : Oct 18 04:00:00 2022 GMT
        Subject: CN=6ec34b54-8c43-4fa5-95b3-8d748c8546ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d2:eb:5f:96:7d:f7:fd:5e:ac:3b:db:63:e4:
                    18:6a:a7:65:34:3b:5c:58:0b:ad:ba:f3:4c:3d:da:
                    a6:0f:2f:65:85:df:b8:f5:ce:39:aa:c7:23:70:d1:
                    bd:84:1e:20:65:ca:ea:7f:88:41:16:ec:ab:a0:b8:
                    85:e1:ba:1e:39:88:e5:30:4a:84:2c:54:ad:e5:c6:
                    ed:b6:f5:3b:df:6b:30:c2:48:a0:51:0d:90:0d:d9:
                    fc:6b:21:e5:79:02:89:43:9d:ef:96:60:d9:9b:23:
                    3c:3a:ac:28:87:91:8c:0a:ac:df:25:5b:12:d5:5e:
                    5c:4c:1e:5c:73:b6:76:f3:c5:60:2b:7e:8f:db:17:
                    f0:5d:9c:55:ff:70:ed:a1:fd:57:51:27:d5:b7:45:
                    28:31:17:f6:51:80:72:99:08:1b:18:91:cb:75:9b:
                    7b:95:27:12:4d:60:de:5c:68:0a:14:a6:eb:57:ad:
                    9c:ba:95:f4:f6:e1:53:7f:51:36:88:d1:25:67:99:
                    a9:58:89:d5:0e:19:53:93:87:d7:ab:b4:32:d2:3b:
                    65:7e:8f:ef:e4:73:42:72:ee:1f:24:bc:98:ae:53:
                    6e:83:56:3a:f2:a0:1a:63:ab:3c:f9:07:3f:2c:ff:
                    ea:80:ed:a2:c3:2f:8c:f2:1f:d1:14:0e:89:93:6d:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:78:A1:62:59:E0:DA:6E:99:95:92:BE:9D:28:3E:A3:15:86:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/6d09a28b-f4fb-3f98-81af-fe8dbbb627d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:4001::-2620:135:400f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:cb:91:09:49:3c:4d:ea:51:0d:e2:88:74:0b:ba:52:58:51:
         bd:15:6a:f5:76:91:fd:b4:62:d8:b0:53:c5:de:7b:89:54:65:
         08:38:ac:5d:f0:ab:4e:1a:95:ff:7d:ef:54:6e:d4:aa:13:da:
         ba:b5:bd:b5:a1:f8:5f:e0:bf:db:39:1c:f9:04:ee:7d:cc:ea:
         f3:14:32:66:3a:a7:df:0d:4d:78:ad:ef:9f:9c:af:63:ba:98:
         44:1c:f0:f6:60:72:80:d1:e7:1c:0f:f0:f4:49:ab:e8:37:0c:
         9e:f7:f8:10:f3:ef:89:ae:05:a3:ea:8d:e3:0c:03:fb:72:9d:
         30:9a:d7:ba:70:50:19:19:71:db:bf:19:0b:4c:ce:78:20:d1:
         22:28:d7:86:2b:59:d8:b3:80:0e:9e:ce:e7:fd:ac:04:a2:38:
         c7:05:0a:95:a7:99:e7:25:4c:9f:ce:a9:17:5a:aa:11:10:2e:
         df:26:a7:40:d9:3b:9f:59:84:53:08:d6:42:6b:9c:ac:c5:3e:
         45:2a:96:f4:f5:10:c2:ac:33:07:9f:44:66:bd:93:d7:a0:c2:
         69:40:ff:ec:da:0a:27:0c:16:3f:d5:00:2f:6d:7a:ad:9f:6b:
         a7:8c:c1:18:93:90:96:6d:d0:10:a6:2a:07:79:a9:95:f5:c5:
         b9:71:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:10 2023 by rpki-client on console-fra.rpki-client.org