Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/0f82b70d-3ef5-33f2-859a-47e3264ea8b0.roa
File:                     0f82b70d-3ef5-33f2-859a-47e3264ea8b0.roa (raw, json)
Hash identifier:          xzdDN8K11MNqfP7pI8Dmr/q9L2iMVxIyV0S2HmTHz/g=
Subject key identifier:   27:4C:54:C0:E5:B4:2F:05:5F:05:30:F8:F4:A4:BF:A3:09:B7:14:F1
Certificate issuer:       /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
Certificate serial:       010D0C9F4328576D51CC73C042CFC171A7828DE8
Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/0f82b70d-3ef5-33f2-859a-47e3264ea8b0.roa
Signing time:             Thu 23 Apr 2020 14:48:03 +0000
ROA not before:           Mon 06 Aug 2018 04:00:00 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     26457
IP address blocks:        2620:135:5000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:a7:82:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
        Validity
            Not Before: Aug  6 04:00:00 2018 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=a2e16ba4-fe59-4632-a891-221d5eee11d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:76:fc:e8:3b:7e:c6:71:33:f3:f0:c2:6f:32:
                    0c:35:09:48:2e:b7:e8:8e:18:67:ec:3b:5c:45:b6:
                    59:be:68:93:b2:66:35:3f:46:dd:7a:5f:0e:c9:0c:
                    9d:f7:44:4f:96:7d:4d:7f:7e:d3:ee:90:6c:00:6b:
                    ef:37:93:ca:07:ae:3b:16:a8:f7:0c:f8:55:69:62:
                    fd:0f:ab:7d:10:05:97:2f:d2:a5:5d:e1:ec:c8:b6:
                    c1:6f:a8:34:b6:6f:bb:b5:76:22:75:cb:10:92:39:
                    2c:2c:ee:a9:20:08:7f:8d:52:30:62:73:da:51:a7:
                    d5:87:1f:ab:b5:23:33:8d:f5:6f:b0:b2:b7:b7:e0:
                    d2:f7:52:77:95:6a:c5:94:a8:65:61:a9:40:df:a9:
                    b5:12:1f:bc:6e:22:0e:26:5a:c8:e2:f1:6f:09:db:
                    d2:7c:ad:73:fd:19:3d:0d:9e:61:4a:12:7a:29:bd:
                    cc:d3:cb:d2:ae:ab:21:04:23:94:b0:5d:4b:69:58:
                    99:52:d4:02:63:59:66:8f:5b:28:41:40:d7:65:4d:
                    60:85:33:de:87:9f:20:b6:52:27:40:bf:54:b5:71:
                    2e:75:67:de:13:23:ae:24:9a:09:f2:8d:ea:66:b4:
                    b3:25:e3:eb:a3:e6:b4:1f:fb:6c:aa:20:54:f8:63:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:54:C0:E5:B4:2F:05:5F:05:30:F8:F4:A4:BF:A3:09:B7:14:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/0f82b70d-3ef5-33f2-859a-47e3264ea8b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:35:69:2d:5f:f6:52:b6:bc:e8:37:36:b5:7b:c1:73:45:
         60:25:42:86:3a:91:4e:61:c4:ef:97:03:df:39:6d:55:c4:3a:
         96:ff:1c:f2:f8:d7:d9:ce:d2:d4:6f:ce:db:b2:ef:56:8d:49:
         ac:0c:d0:03:02:b9:76:ff:bb:b7:2a:0b:8f:8c:86:2d:af:2f:
         24:1e:73:2d:23:b1:01:c2:8c:22:d0:fd:c5:8d:14:de:9a:53:
         c9:68:55:00:8e:f0:f3:78:42:c8:da:21:d6:5a:82:7e:54:6e:
         1b:11:4b:2f:5d:52:4d:4f:4d:c3:83:6b:41:63:59:a8:32:ad:
         39:ff:7d:fd:2a:93:2e:80:23:2d:e4:af:00:41:59:c9:e2:e9:
         70:25:7d:6f:38:a6:ea:a6:95:c7:f5:df:25:13:43:4f:50:da:
         a3:a4:7e:bd:09:2c:e9:15:0c:39:93:20:d6:17:af:ca:7e:78:
         bc:5a:9c:fc:59:54:60:22:bd:12:aa:08:2c:cd:24:89:31:bd:
         68:7e:a8:c6:7d:b6:00:e4:bc:ad:a0:29:90:76:a3:cc:cb:c1:
         64:ce:99:9e:9d:27:0f:ec:0a:bc:9e:47:df:ed:74:f2:2c:91:
         22:b6:41:46:f5:f8:c0:06:d0:71:35:26:b9:c6:98:6d:a5:ca:
         0c:ff:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:23 2024 by rpki-client on console-fra.rpki-client.org