Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30fd31c3-c982-3866-830e-51f0324c53ab.roa
File:                     30fd31c3-c982-3866-830e-51f0324c53ab.roa (raw, json)
Hash identifier:          2BqJo0JoUBQ4LLhCZ3T+Nd/gT6iV7RJjvNnjbT2ht98=
Subject key identifier:   33:C3:A0:FE:5E:8A:A4:65:B0:C6:C5:48:9F:D2:72:BE:C4:CD:BA:D5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583CF6566EE9355824989701EB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30fd31c3-c982-3866-830e-51f0324c53ab.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Wed 22 May 2024 04:00:00 +0000
asID:                     3257
IP address blocks:        173.245.75.0/24 maxlen: 24
                          173.245.90.0/24 maxlen: 24
                          173.245.85.0/24 maxlen: 24
                          23.230.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f6:56:6e:e9:35:58:24:98:97:01:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : May 22 04:00:00 2024 GMT
        Subject: CN=b2a4535d-f65e-4938-9425-baa099fa17f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:8c:99:02:32:b8:b7:c2:92:db:e2:75:b0:
                    53:5b:f3:db:01:15:78:ed:8c:ac:fb:4f:75:49:c3:
                    d3:6a:20:1d:3f:e9:c8:73:28:3d:48:6f:2c:2e:d2:
                    43:0a:0a:9b:77:bf:b6:eb:aa:2c:b3:76:d8:3b:88:
                    8b:77:35:b8:4b:88:27:c6:6c:38:1b:d8:ad:45:68:
                    d9:07:f9:e6:40:e0:7f:b7:04:b8:bf:9c:84:a6:19:
                    6e:85:98:63:af:61:2b:28:97:fb:aa:61:3d:1f:c3:
                    72:a4:6d:f5:75:3a:cf:3c:04:ac:f9:ca:a6:9b:99:
                    d9:40:13:ff:fb:e4:af:19:8d:e6:a5:06:92:00:1a:
                    3b:f2:2a:ff:23:2c:29:ca:89:64:e2:20:62:e2:b5:
                    c8:59:6f:c0:02:49:b5:49:95:49:0c:11:e6:88:c3:
                    79:41:cf:45:d4:47:8d:67:77:e1:b7:f6:e6:a2:5a:
                    57:92:1c:47:7a:ea:83:38:4d:63:00:64:eb:8e:e3:
                    8f:c3:70:c2:59:84:df:3b:26:76:57:14:fa:7e:e4:
                    6d:97:c6:50:8e:18:a0:7c:0b:82:78:f1:ad:db:ed:
                    83:7d:ea:c6:e1:74:0d:a3:98:e1:f5:b4:76:0c:bb:
                    ae:d1:ed:75:73:1f:96:11:05:e7:e2:19:18:0c:c6:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:A0:FE:5E:8A:A4:65:B0:C6:C5:48:9F:D2:72:BE:C4:CD:BA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30fd31c3-c982-3866-830e-51f0324c53ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.83.0/24
                  173.245.75.0/24
                  173.245.85.0/24
                  173.245.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:a2:25:5a:a4:34:3e:d9:8e:7f:01:2f:ab:01:fd:43:24:
         83:da:99:a5:95:89:f4:76:25:c1:da:4b:52:57:b0:fa:62:93:
         4d:8c:3a:34:aa:f2:78:90:9e:b3:d2:45:03:09:fc:14:1c:88:
         30:76:6a:1d:90:32:6f:46:13:9b:13:e5:56:c6:b0:a8:ca:aa:
         f8:ea:26:f3:6c:38:82:13:19:ef:11:d6:ca:43:77:f5:ee:f4:
         47:c6:63:79:e4:82:eb:c1:f4:ea:ca:06:7e:3a:d8:5a:98:35:
         10:59:d2:1d:d5:8f:bf:ad:3e:cb:c2:f6:e3:23:5d:62:4f:c7:
         05:d8:c1:bb:06:31:06:df:ac:5f:40:c1:c4:ae:70:20:be:b1:
         67:1b:cb:df:dd:e3:32:b2:5b:7f:c9:b2:c2:b3:81:28:00:3b:
         55:88:21:b3:12:67:00:7b:63:94:32:6a:94:d9:9e:e3:a1:be:
         25:cf:3c:b9:b6:29:54:cd:e2:4d:f8:98:ce:b7:a6:b5:25:1f:
         ff:9f:4e:b1:84:6e:cf:e7:f0:63:72:f0:71:ee:4c:19:64:ea:
         cd:83:85:9f:79:3c:ba:df:a5:fc:55:f6:31:9d:8a:77:8f:14:
         7e:6d:00:9b:e9:31:3e:f0:19:19:ea:f5:bd:a0:b5:e3:35:90:
         4e:14:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:05 2024 by rpki-client on console-ams.rpki-client.org