Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/2913033d-55e2-3281-a5f9-f9e16b1ba65e.roa
File:                     2913033d-55e2-3281-a5f9-f9e16b1ba65e.roa (raw, json)
Hash identifier:          fWrcxs9ZNOQORiH6JfrfyS26q8YwiH3jNfdSxZc9sEs=
Subject key identifier:   BB:15:FA:1F:1D:9D:CE:67:2A:70:7C:55:86:AD:F0:2F:A9:F8:2C:24
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735D494FE8
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/2913033d-55e2-3281-a5f9-f9e16b1ba65e.roa
Signing time:             Fri 17 Jul 2020 14:59:12 +0000
ROA not before:           Wed 15 Jul 2020 04:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     27364
IP address blocks:        24.239.32.0/19 maxlen: 19
                          24.239.64.0/19 maxlen: 19
                          24.239.96.0/19 maxlen: 19
                          24.239.192.0/19 maxlen: 19
                          24.239.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5d:49:4f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Jul 15 04:00:00 2020 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=66945b5a-3249-48ae-b1ad-d8b9e3900875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:29:8c:65:78:d5:b5:2d:67:d5:ff:9b:c5:
                    cf:5d:0b:55:03:de:8f:3a:aa:73:4e:15:c5:60:cb:
                    78:4c:bb:05:6f:34:b2:28:55:e7:ce:48:52:cf:09:
                    3a:3d:df:f8:64:b3:85:3c:aa:df:26:35:37:32:7d:
                    5d:3b:e8:02:4c:39:0e:4b:94:be:41:0a:1a:38:5a:
                    a1:5b:35:d5:4e:df:34:88:9a:16:b6:e1:c0:24:a4:
                    19:b2:35:ed:60:68:39:85:d1:a9:bf:51:a0:5b:81:
                    67:71:da:a7:a1:7b:0b:44:cd:20:20:b5:d3:04:83:
                    82:3d:07:d0:e6:bd:9d:3a:62:3d:9c:90:7d:ca:b2:
                    02:2e:e1:d6:fa:c8:e6:9f:4c:74:9d:05:73:27:1d:
                    78:fb:8e:80:c0:bb:4a:77:b3:fd:1f:25:86:8b:45:
                    e9:aa:11:09:7c:2d:97:ab:7c:2f:0b:f7:d1:98:01:
                    7e:3a:17:a9:25:42:dd:5d:b9:1d:ad:c6:7b:ff:ae:
                    9a:33:aa:3c:b9:93:ac:9c:96:bd:0b:9c:ad:ba:17:
                    14:11:b4:b1:32:b2:fd:d3:76:7b:af:9b:e2:68:e6:
                    df:73:22:01:3c:14:77:61:9c:6c:13:64:a7:bd:1a:
                    0d:d0:b6:7f:c2:0b:f1:44:6c:3f:ed:75:ba:56:e4:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:FA:1F:1D:9D:CE:67:2A:70:7C:55:86:AD:F0:2F:A9:F8:2C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/2913033d-55e2-3281-a5f9-f9e16b1ba65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.239.32.0-24.239.127.255
                  24.239.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:dc:bf:a6:47:10:5a:88:38:b2:18:4c:42:53:49:d7:bf:
         ba:55:11:cb:b6:f7:e6:f6:cd:ed:76:ea:0e:a9:7f:99:ae:c2:
         15:e1:cd:f8:8b:2d:48:a8:e0:c7:54:fc:39:7c:ed:33:c5:04:
         dc:00:e6:63:fd:96:46:2f:e7:2e:fb:1e:c2:d0:6a:ca:1c:28:
         b4:07:d7:34:b6:7b:fe:f9:71:83:1b:b7:33:18:72:19:37:cb:
         da:65:8d:56:3d:e3:79:25:3c:4f:57:9e:9f:35:c4:11:80:76:
         43:63:66:85:df:94:bc:2f:f6:f9:85:fa:f0:f3:c9:9d:cd:de:
         e5:0d:9a:e4:2e:2d:e3:cf:79:34:e3:9e:68:f2:16:9f:53:ba:
         2e:a0:b0:40:86:cd:a9:e8:f4:3f:01:67:9b:ab:cf:d0:8c:7d:
         ad:51:98:ce:d8:9a:59:0f:7e:b9:d8:0a:ef:11:a6:32:c6:0a:
         70:2e:53:a0:f7:42:49:aa:0f:e9:53:b6:c5:4a:6e:74:1f:69:
         d1:ca:26:98:8f:5e:18:f6:2a:44:76:51:3b:41:e9:9c:24:4e:
         7d:76:90:47:fe:2b:2f:d1:a9:24:03:09:ea:bb:4b:22:96:1d:
         a8:db:91:36:8d:98:d6:e0:c1:35:b1:b4:7c:a6:4f:b9:6d:a0:
         27:70:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-ams.rpki-client.org