Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a5cb0d6f-6f41-3085-89a6-152cd827d02e.roa
File:                     a5cb0d6f-6f41-3085-89a6-152cd827d02e.roa (raw, json)
Hash identifier:          jvj5tOqgry9oMVsTLVppt6gbjl20CvonPbR4L70hXEY=
Subject key identifier:   87:96:44:31:9F:DF:29:CF:0A:1C:27:ED:F1:9F:F2:1F:11:F2:17:26
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858385EEBB9E7E588F2EA4E3A2C00
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a5cb0d6f-6f41-3085-89a6-152cd827d02e.roa
Signing time:             Tue 25 Sep 2018 04:00:00 +0000
ROA not before:           Tue 25 Sep 2018 04:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     20473
IP address blocks:        139.84.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5e:eb:b9:e7:e5:88:f2:ea:4e:3a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=9b526584-272d-497a-9568-e9df7df33f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:29:a6:b3:db:67:8b:4b:61:c5:03:77:15:
                    22:9c:d5:ad:64:50:ae:2c:c8:7e:ec:09:2f:2f:5e:
                    42:b2:ef:d4:c2:64:4a:b9:f3:17:8d:64:07:85:6b:
                    53:5c:6e:bb:62:b1:f6:5c:d7:d9:8b:48:5e:de:26:
                    98:66:77:85:c5:b3:a3:9a:cc:85:80:84:14:8f:08:
                    fd:2d:88:51:16:94:d1:d6:9e:29:b1:b7:24:dd:4e:
                    eb:3a:ec:75:5c:2b:4e:78:07:b0:d2:54:f8:a6:94:
                    e2:86:d1:87:7a:de:8f:c3:28:f2:8b:e4:f6:ea:cc:
                    e6:ad:8a:fd:9e:f0:a5:ad:7a:0b:a2:40:ea:9d:fd:
                    fb:9d:82:09:75:ba:06:e0:e5:8b:92:55:d3:04:51:
                    77:e1:a2:ed:7b:be:ff:df:ea:61:1f:f6:5a:5c:07:
                    c7:f7:09:d1:a2:1a:80:71:ed:46:9a:57:98:91:15:
                    e8:e0:70:51:bb:45:25:93:b1:3c:f5:fb:87:04:13:
                    ce:cd:56:89:55:8b:ab:03:eb:9d:91:e5:d6:d3:cb:
                    6d:7a:2c:b6:da:8a:15:e1:42:92:3b:e3:c5:b1:21:
                    84:19:02:b5:14:a6:a3:55:eb:8b:90:58:40:91:24:
                    bb:45:b4:63:33:79:5b:89:61:ef:d6:21:25:d2:55:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:96:44:31:9F:DF:29:CF:0A:1C:27:ED:F1:9F:F2:1F:11:F2:17:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a5cb0d6f-6f41-3085-89a6-152cd827d02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.84.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:a4:1c:af:80:b1:db:dd:5e:09:6e:e1:6d:6f:da:fe:a7:
         0f:a3:9d:3c:ba:3d:08:8d:21:d3:0a:83:d5:3d:c5:94:ee:d7:
         6d:d2:4e:be:a8:d9:ac:d2:b0:a4:fd:fb:0c:e6:64:ba:2d:7e:
         f9:c5:03:5b:55:4d:4d:33:e2:ce:0c:09:a4:d2:b1:1d:08:97:
         36:e4:84:8b:d8:af:cf:9d:1d:d6:34:6b:58:93:87:d2:77:6c:
         79:f5:d0:e5:45:f8:64:ac:8f:d7:42:9e:17:ef:ce:8a:8c:e1:
         99:11:c7:de:2b:86:91:71:a4:34:14:60:ce:b1:b6:ad:62:d1:
         16:32:07:d9:28:c2:45:15:4f:19:43:ea:1c:a0:4c:28:6e:2f:
         47:8d:e3:39:ca:43:57:97:a2:d5:da:6a:61:fc:81:cc:e7:0a:
         ca:7c:c3:51:72:ad:a7:6d:25:19:20:0d:37:43:b3:e1:e0:76:
         80:ff:f1:48:73:bf:75:f9:4b:fc:29:c0:6f:62:33:39:64:16:
         6e:f1:22:55:cd:21:43:ab:78:bf:de:66:54:2b:75:de:97:8b:
         2c:0b:69:e6:43:cc:41:fc:85:89:6d:7e:37:b8:96:d4:81:84:
         46:61:1b:09:e8:3d:0a:14:6f:5a:cb:84:71:db:a1:ab:b4:7c:
         45:56:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:11 2023 by rpki-client on console-fra.rpki-client.org