Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6e49b6e0-de16-3674-8be1-e1d2f72aa988.roa
File:                     6e49b6e0-de16-3674-8be1-e1d2f72aa988.roa (raw, json)
Hash identifier:          nYTSuLeW6QwKNUCmnBdzOxRHIOZIe3ESxB2483EeKzc=
Subject key identifier:   E0:36:0C:9E:01:36:EB:97:E5:98:9F:37:3D:52:9A:49:37:16:69:55
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583B73CD12C39D88AD2E96C2CEC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6e49b6e0-de16-3674-8be1-e1d2f72aa988.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Thu 04 Jan 2024 05:00:00 +0000
asID:                     7922
IP address blocks:        23.230.180.0/24 maxlen: 24
                          104.165.180.0/24 maxlen: 24
                          45.38.239.0/24 maxlen: 24
                          172.252.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:73:cd:12:c3:9d:88:ad:2e:96:c2:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Jan  4 05:00:00 2024 GMT
        Subject: CN=0ce3192d-5025-4341-921f-7cbbd563595a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:15:7e:38:bd:8b:f2:e7:1e:f7:6c:db:2e:9c:
                    e5:a8:dc:da:f2:ff:1c:b5:47:a6:58:b0:e5:b3:5d:
                    ef:0c:ff:e2:3f:49:dd:8e:c1:c3:86:d6:94:68:e1:
                    09:2c:4f:e5:ec:15:48:29:4a:60:01:f5:45:34:02:
                    d5:59:5a:9e:39:82:9d:ce:ac:b7:c3:86:42:75:7e:
                    13:53:35:de:a7:d9:05:c4:a2:84:e4:6f:9f:c9:25:
                    fb:92:05:2b:93:7a:39:e4:ab:8c:73:5b:fe:3b:80:
                    54:14:6a:a0:c7:74:3e:61:de:cb:e5:12:3d:90:d0:
                    d6:b1:61:28:46:4a:c7:09:e0:67:b7:c6:d6:79:34:
                    b7:ad:23:f6:9c:ef:24:1c:53:f0:33:08:72:04:8f:
                    19:91:3b:80:71:8f:39:0f:35:a2:28:a1:ff:09:91:
                    1b:21:01:95:bc:56:39:83:32:aa:6a:ea:22:c2:92:
                    c6:ae:45:d2:be:45:1e:a4:62:70:83:1e:72:bb:41:
                    50:12:c1:d3:36:2b:a9:fa:f2:9f:ab:b8:76:28:87:
                    06:cb:cb:51:1a:43:cc:a4:d3:89:95:10:72:4f:e7:
                    04:c7:8e:b3:ab:0b:fa:d1:7b:6e:4a:a5:e8:1e:e6:
                    25:cb:5c:f8:62:b1:11:e2:62:ea:fa:38:de:13:a8:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:0C:9E:01:36:EB:97:E5:98:9F:37:3D:52:9A:49:37:16:69:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6e49b6e0-de16-3674-8be1-e1d2f72aa988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.180.0/24
                  45.38.239.0/24
                  104.165.180.0/24
                  172.252.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:66:ce:71:b6:87:db:2e:b5:1c:70:90:24:7c:5b:37:ad:aa:
         1b:5e:d7:9e:42:23:23:b9:f8:02:a9:55:8b:16:c3:84:c0:97:
         5b:25:58:34:ac:67:4e:17:f7:9e:2b:3d:eb:0e:e6:7d:2f:08:
         88:93:7b:b3:3e:56:c6:2b:35:41:07:b0:98:3e:c4:3b:59:bd:
         ab:b3:9a:c5:6e:98:5f:4f:29:a5:b1:3e:20:22:ff:5f:63:41:
         05:43:d7:42:3d:6f:59:f0:11:6d:f4:0d:22:49:30:99:4e:2e:
         34:08:e0:ea:b9:15:6f:73:68:58:56:fd:59:a4:b3:85:c7:e0:
         22:62:f6:cc:e8:0c:25:fa:0a:cf:8b:22:f6:05:ee:28:53:6a:
         df:44:37:e6:7e:76:1b:74:fb:3e:fd:f3:89:53:34:73:b1:25:
         cc:fc:d0:89:0f:a7:11:77:cb:de:27:e1:52:a9:fb:b3:c6:c0:
         d7:4b:a7:6c:22:c7:ac:b4:83:8b:ec:f2:e7:b6:4a:b2:8e:d0:
         30:8f:83:54:e3:c5:91:3b:ff:66:1b:38:88:92:44:24:7a:34:
         1a:de:32:9d:aa:12:bd:d3:45:63:88:39:1a:99:71:ad:fe:1c:
         d4:93:af:c2:65:ea:1a:bc:f6:a9:95:79:bc:3f:92:74:63:e9:
         90:18:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:08 2024 by rpki-client on console-ams.rpki-client.org