Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/df494618-b16e-3bea-abf7-fd9fdef8abe3.roa
File:                     df494618-b16e-3bea-abf7-fd9fdef8abe3.roa (raw, json)
Hash identifier:          QvY37bUWzaoXVS6dhO9ZxagCIGpMGoLZPxTIIOazJBk=
Subject key identifier:   09:9F:6D:5D:74:38:36:3C:F7:EE:E3:15:84:C5:5C:7F:03:BB:B6:18
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328576D51CC73C042CFC170C55BF85C
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/df494618-b16e-3bea-abf7-fd9fdef8abe3.roa
Signing time:             Tue 10 Mar 2020 16:51:43 +0000
ROA not before:           Mon 09 Mar 2020 04:00:00 +0000
ROA not after:            Mon 13 Jun 2022 04:00:00 +0000
asID:                     10745
IP address blocks:        192.136.136.0/24 maxlen: 24
                          199.43.0.0/24 maxlen: 24
                          2001:500:4::/48 maxlen: 48
                          2001:500:110::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:c5:5b:f8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Mar  9 04:00:00 2020 GMT
            Not After : Jun 13 04:00:00 2022 GMT
        Subject: CN=ba5e3eb4-5629-4bce-ab16-454b686128a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:11:bc:68:7b:61:32:cd:f4:b2:03:0e:eb:
                    2e:e5:bb:93:80:65:e0:f8:ef:32:9e:f8:c8:ed:74:
                    39:d3:fb:01:df:0f:43:05:16:2f:98:e7:bb:32:24:
                    33:81:96:03:24:86:6f:8d:7e:88:64:a0:a8:0e:8d:
                    ab:95:e5:47:c8:b6:d5:3d:18:42:00:23:82:8f:4c:
                    f8:c7:9a:6e:9d:2f:5a:e6:ae:6b:04:cd:e1:dc:d0:
                    05:c6:6a:0d:e9:71:62:a1:93:c3:f2:04:49:ec:6b:
                    f5:9b:b3:67:42:9e:3d:89:99:43:3c:c0:d8:4f:6a:
                    42:71:1f:45:16:31:04:be:39:e4:e4:7d:1b:e2:5d:
                    aa:2d:01:47:c0:0f:e7:04:4d:46:89:5b:3f:39:04:
                    ee:17:38:90:e0:7d:b7:ef:2e:40:e2:57:93:96:0d:
                    17:da:67:f8:68:4f:97:03:79:c6:9a:8b:62:fb:78:
                    fc:2e:a6:d7:3d:52:00:9d:b4:6d:f1:aa:f5:bc:03:
                    b5:0b:23:f2:a5:4f:99:3f:eb:19:d1:1e:9a:82:4a:
                    88:a9:c0:f6:71:41:5c:cb:bd:be:33:98:8e:dc:fa:
                    52:b4:13:00:a6:93:37:8a:6d:89:76:36:57:4e:ec:
                    81:a6:8b:87:52:70:ab:d9:2a:c6:cf:83:93:52:1a:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9F:6D:5D:74:38:36:3C:F7:EE:E3:15:84:C5:5C:7F:03:BB:B6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/df494618-b16e-3bea-abf7-fd9fdef8abe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.136.0/24
                  199.43.0.0/24
                IPv6:
                  2001:500:4::/48
                  2001:500:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:9d:79:a1:2b:7d:ea:58:37:5a:26:47:ae:17:08:af:5a:
         ba:a3:04:29:f4:de:8f:c9:10:27:67:93:bf:0a:43:d2:64:74:
         62:22:c0:c0:e2:9b:45:a4:6d:7d:71:e4:92:a6:e7:27:0f:92:
         5b:b0:79:34:f0:bc:24:3e:bb:fa:6c:f1:fe:e9:4d:3d:73:76:
         56:f7:3c:e1:73:50:56:7f:77:67:3f:75:1e:61:36:1e:8c:98:
         28:7f:cb:4e:e1:41:b9:85:30:47:35:16:e4:e0:d7:c6:8f:f4:
         e9:fa:cc:39:9c:dd:ae:4d:d1:6e:80:d1:c7:32:87:99:e7:d8:
         40:05:20:d4:e8:03:db:b0:49:9c:d5:2e:4d:b9:dd:2b:f1:06:
         ad:7a:ea:42:1e:8b:3c:b2:ad:62:ec:76:a2:34:b3:e1:fd:e7:
         e4:58:73:4f:4e:9f:29:c1:a8:94:69:95:dd:ce:52:f7:2a:3b:
         f8:40:64:70:cb:09:a7:83:c6:32:ce:11:d8:03:45:93:3b:fd:
         9a:1c:ce:90:83:7f:b9:f5:99:0a:9b:d5:8a:14:54:e1:4d:7b:
         ac:d9:e5:c9:4e:3f:bd:c9:a0:0b:9f:62:b8:32:c0:04:dc:81:
         c1:41:c5:ce:09:95:bc:73:93:99:59:13:79:6c:1f:b3:68:f1:
         ba:6c:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:24 2023 by rpki-client on console-ams.rpki-client.org