Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a8207bb-1aab-3e6c-b0f0-4befde9da7cf.roa
File:                     1a8207bb-1aab-3e6c-b0f0-4befde9da7cf.roa (raw, json)
Hash identifier:          lJET7nfF/lJW/+Iyw1F6Yby527o9NNhc/C8wOnwIrsk=
Subject key identifier:   55:CB:5C:97:7D:A7:0B:07:38:9C:5A:7D:66:59:25:5A:B6:B0:85:B7
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858431C79E7FEFC275A6146B98BC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a8207bb-1aab-3e6c-b0f0-4befde9da7cf.roa
Signing time:             Mon 04 Sep 2023 13:00:26 +0000
ROA not before:           Mon 04 Sep 2023 13:00:26 +0000
ROA not after:            Sun 03 Dec 2023 14:00:26 +0000
asID:                     59564
IP address blocks:        172.94.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1c:79:e7:fe:fc:27:5a:61:46:b9:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  4 13:00:26 2023 GMT
            Not After : Dec  3 14:00:26 2023 GMT
        Subject: CN=0f69e315-422b-43bb-9d44-4a232b35ff21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:32:63:09:84:34:c5:9d:9d:86:3e:05:e4:
                    76:3f:34:cb:f5:4a:90:58:e1:40:10:56:aa:94:cb:
                    85:1b:0a:db:6e:25:50:ab:fb:48:29:40:e9:7c:32:
                    3c:87:ca:b0:95:1e:82:3d:12:b7:9a:2e:f9:d2:62:
                    9a:b0:2e:f8:55:ca:cd:8f:a8:bd:03:6b:52:4a:8c:
                    13:9f:c0:d7:5b:54:8f:52:c9:50:88:06:15:09:7a:
                    b8:33:42:be:ce:f0:7e:92:d6:17:20:9f:d0:e6:82:
                    1a:8d:a4:5d:7b:62:e0:a9:c0:6a:f8:b9:34:15:7f:
                    7f:37:f3:b1:cd:07:cd:21:49:b9:e6:73:ae:00:52:
                    18:90:10:f9:31:0e:48:76:38:4c:fb:ed:0e:39:38:
                    46:7f:9c:36:c2:63:b3:52:fc:07:8a:0c:d3:32:2c:
                    47:eb:4a:ae:ed:58:bd:a8:79:95:4d:10:ae:85:a3:
                    b0:5f:ff:65:80:01:43:0b:96:57:b6:63:21:6d:90:
                    7a:86:d3:5c:b9:5f:9f:76:c1:f7:d6:c6:74:42:3d:
                    62:6c:69:ff:7f:75:e3:1b:3f:5a:ae:d2:41:5d:5f:
                    b8:1f:a8:90:19:42:cb:98:0b:9c:a9:ca:72:eb:5f:
                    0f:53:54:5f:ee:d2:eb:dd:15:82:26:75:d4:c5:c4:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:5C:97:7D:A7:0B:07:38:9C:5A:7D:66:59:25:5A:B6:B0:85:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a8207bb-1aab-3e6c-b0f0-4befde9da7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:80:1c:57:1f:0b:c2:04:da:94:93:3e:9d:9c:ac:94:52:
         91:3c:4c:8b:62:3e:fd:af:ad:6f:c7:2a:e2:ae:85:f9:d8:8d:
         d9:96:3a:db:f5:10:ef:ca:ac:57:93:58:76:21:b4:68:a3:e9:
         b1:64:2f:8d:47:45:05:9f:4d:70:e8:2f:73:0b:80:06:b3:09:
         92:05:31:ad:18:a9:d0:97:c1:7a:64:ab:ab:bb:77:33:0f:b0:
         91:bb:68:ad:b7:07:d9:f5:b8:cd:6e:89:33:b1:3f:3f:9b:d7:
         16:19:0e:a2:af:ac:14:7e:eb:d1:32:f6:5a:5d:b0:be:98:79:
         29:50:89:12:5b:f8:73:e0:f7:a3:19:e9:ca:91:38:f0:46:2c:
         83:f3:b9:f8:de:c1:82:65:bb:a9:04:d0:51:48:9a:40:c1:e9:
         b6:f3:89:50:d5:f0:6d:c9:dd:e2:5d:e2:f1:39:76:14:91:ad:
         73:1e:d5:73:3d:e7:89:c5:75:a3:ec:9f:ef:57:81:ac:9a:64:
         15:36:29:1c:38:61:f5:ba:eb:47:bc:13:fd:77:87:bb:6b:e7:
         c4:5b:5b:5d:77:95:a9:95:6d:89:1e:06:bf:bc:3a:1f:b6:0d:
         2e:39:4d:c6:dd:b4:47:79:6f:74:dc:59:47:60:0c:75:e3:df:
         c4:c1:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:44 2024 by rpki-client on console-ams.rpki-client.org