Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39913b9d-d7f2-3ef8-a1e0-b1b697882825.roa
File:                     39913b9d-d7f2-3ef8-a1e0-b1b697882825.roa (raw, json)
Hash identifier:          ZroHJhPmuhkXcJuezOSHhZH/rnLduF4dRG5+gVpP82k=
Subject key identifier:   3B:2D:EF:8D:E4:FA:CD:82:2E:15:58:B0:4A:08:0C:6D:A9:ED:D6:B8
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842F84AF4CE86053F948DCFC980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39913b9d-d7f2-3ef8-a1e0-b1b697882825.roa
Signing time:             Tue 22 Aug 2023 13:56:46 +0000
ROA not before:           Tue 22 Aug 2023 13:56:46 +0000
ROA not after:            Mon 20 Nov 2023 14:56:46 +0000
asID:                     9009
IP address blocks:        172.94.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f8:4a:f4:ce:86:05:3f:94:8d:cf:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 22 13:56:46 2023 GMT
            Not After : Nov 20 14:56:46 2023 GMT
        Subject: CN=64ae79f5-dbba-43e1-912e-b37d0f53efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:81:f6:3b:27:d6:15:85:d6:f7:8d:db:f6:
                    34:dd:38:68:de:99:e9:aa:9f:55:e0:6a:a2:e1:1b:
                    20:9e:61:5a:61:f6:d3:a0:76:2a:89:a6:47:d9:a2:
                    d5:35:e9:f5:52:68:8c:3f:89:0f:91:b1:cf:26:14:
                    ea:1b:f8:92:b6:9d:df:ac:f0:2d:ac:8b:63:49:da:
                    53:65:0b:2c:8b:37:37:41:69:77:90:1b:8e:19:01:
                    66:e8:c6:fd:bd:2e:90:17:05:c8:15:0a:59:7b:31:
                    91:c5:56:9e:3c:cc:de:9d:2c:3c:f5:cf:67:d4:3a:
                    f1:c5:eb:f6:2b:8d:e6:3b:7b:79:c9:85:8b:ab:db:
                    8e:a8:5d:46:49:4e:62:74:6b:3f:3d:c8:4c:99:0a:
                    e9:6d:c1:a0:c6:bd:06:4c:06:fb:e0:50:25:13:63:
                    59:a1:3b:17:a5:ac:07:2e:b9:98:91:6e:db:fe:54:
                    d5:e9:88:f2:5d:df:61:94:31:eb:28:e9:c1:aa:51:
                    b3:a9:56:41:c0:17:b0:49:e6:09:e3:36:86:9d:89:
                    a7:ee:07:24:45:df:27:b0:76:f4:78:b2:60:e8:88:
                    de:2e:a4:26:5c:55:53:3f:72:cc:a0:0b:40:0f:59:
                    c0:3a:e6:e8:90:08:93:6c:ce:db:49:33:24:1e:d1:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2D:EF:8D:E4:FA:CD:82:2E:15:58:B0:4A:08:0C:6D:A9:ED:D6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39913b9d-d7f2-3ef8-a1e0-b1b697882825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:57:ac:c5:47:5b:a0:ae:2a:e7:9b:4b:02:5b:88:80:71:cd:
         43:6f:ab:a8:b3:ee:38:d6:93:4f:6f:a4:23:69:3e:1b:20:33:
         62:61:d5:d7:4a:2a:05:cb:63:a4:1d:13:a4:55:96:e5:05:0c:
         32:bc:f7:59:f8:c5:f6:66:c4:32:27:b3:2f:9d:a8:6d:bc:f9:
         87:c5:b5:96:e8:90:8e:15:3c:b9:ba:92:1b:ed:1b:10:f0:2c:
         67:f2:30:73:e4:4d:93:41:cc:7c:37:36:69:fd:ec:c2:7c:c4:
         17:4a:db:f3:e6:d0:d6:1b:45:f7:5c:bf:27:df:c8:05:e2:2a:
         68:15:19:bc:55:da:4e:66:a7:a3:3c:07:b5:07:fc:08:bc:c6:
         23:ff:f0:a8:2e:18:b6:04:ec:a7:78:be:dc:de:5c:3e:88:68:
         02:c5:dd:e1:5a:61:23:79:d4:af:cc:a8:d7:bd:f4:b8:6e:26:
         b7:1d:d7:d7:0b:bb:c1:dc:53:96:dd:3c:18:fd:3c:05:68:9a:
         c9:6c:0e:c5:0b:25:05:f7:6c:79:02:e4:a6:6a:ea:f2:47:83:
         8b:ce:70:e3:59:5a:6d:ec:05:a6:ca:f3:43:8a:28:d4:c9:9e:
         63:e6:c7:3c:65:9d:47:3b:fd:53:5f:fd:8c:63:60:95:dc:97:
         2a:44:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org