Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/982d60a9-ac45-3b5c-866d-49dc4b4dfc77.roa
File:                     982d60a9-ac45-3b5c-866d-49dc4b4dfc77.roa (raw, json)
Hash identifier:          ICK7wnEPaftMqfyVAioe9k0C5JbEZJ9DstyRO/YRwY8=
Subject key identifier:   7F:56:04:71:03:9D:1D:44:98:EA:19:32:79:10:B9:D4:69:C5:12:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583BBAECA732D99BCB3EB5FB08C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/982d60a9-ac45-3b5c-866d-49dc4b4dfc77.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Tue 30 Jan 2024 05:00:00 +0000
asID:                     54252
IP address blocks:        192.177.160.0/19 maxlen: 24
                          172.252.58.0/24 maxlen: 24
                          45.38.135.0/24 maxlen: 24
                          50.118.189.0/24 maxlen: 24
                          50.118.206.0/24 maxlen: 24
                          50.118.137.0/24 maxlen: 24
                          104.164.35.0/24 maxlen: 24
                          104.164.113.0/24 maxlen: 24
                          104.165.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ba:ec:a7:32:d9:9b:cb:3e:b5:fb:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Jan 30 05:00:00 2024 GMT
        Subject: CN=3441debe-92f9-4133-927f-01463caa40b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:57:86:50:db:f0:14:46:e6:a2:e9:4d:85:
                    a4:0c:14:34:c6:c2:c3:38:bf:17:d8:df:f2:43:2f:
                    7c:dd:a6:34:65:85:db:1a:c6:92:8e:94:52:8b:68:
                    a8:21:85:e6:69:9f:b1:58:5e:a3:0d:e7:b0:05:7a:
                    fd:9e:c9:bc:a6:4a:6d:5d:64:d7:1b:0c:f1:74:97:
                    21:ff:ee:ce:51:ae:e2:ce:63:55:a7:85:38:a5:bf:
                    49:03:d9:c3:ea:a6:7a:e3:4c:53:de:18:4c:b7:d6:
                    14:56:2d:ad:2c:fc:15:0a:9d:73:ec:76:ab:6f:f3:
                    1a:0b:7b:67:0e:da:07:cd:29:7f:d3:19:4a:2a:2c:
                    b4:d9:61:b9:f9:1e:df:c6:fd:ca:db:5b:0c:ed:86:
                    bb:a1:aa:40:13:66:34:27:fe:64:42:3a:5a:05:f7:
                    56:e0:56:fd:6d:34:f0:23:93:9e:7e:d5:e3:81:b9:
                    8d:1d:ff:81:45:99:f1:78:77:8d:48:16:e0:b6:41:
                    fe:77:fa:36:d6:59:12:8f:40:8c:fe:49:d4:b0:48:
                    8e:70:1c:9e:6c:df:92:dd:9b:b8:1d:2d:a5:61:63:
                    8c:1a:58:ea:0c:e2:4e:4e:af:4b:07:22:d2:97:90:
                    ed:fc:76:a2:dc:93:3b:83:28:07:ee:6f:0d:6f:ba:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:04:71:03:9D:1D:44:98:EA:19:32:79:10:B9:D4:69:C5:12:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/982d60a9-ac45-3b5c-866d-49dc4b4dfc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.135.0/24
                  50.118.137.0/24
                  50.118.189.0/24
                  50.118.206.0/24
                  104.164.35.0/24
                  104.164.113.0/24
                  104.165.92.0/24
                  172.252.58.0/24
                  192.177.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:63:28:e2:c6:bc:99:af:49:6b:37:9a:25:bd:b2:e3:71:
         5e:02:e4:d2:75:e0:9f:00:5f:4b:68:43:52:be:00:f3:d1:37:
         89:5d:cf:5f:6d:45:b6:ce:52:d8:20:75:77:86:ed:22:e2:4b:
         af:e1:9c:f6:7f:b1:88:bf:f4:5d:31:a0:30:ca:98:29:c9:39:
         86:34:eb:8e:a2:20:16:b1:a0:db:f3:10:26:ad:7b:25:a5:06:
         73:74:29:ae:3e:96:55:0d:a1:8b:07:16:77:b1:7f:a5:ea:40:
         08:99:ca:78:b7:2c:39:be:6d:36:3a:9e:35:34:79:fd:63:4f:
         fc:ec:ee:ce:4d:88:9f:3c:ca:e9:b8:2a:17:01:13:31:2b:50:
         ab:fb:9c:0b:0b:68:62:c7:0d:af:9e:f5:27:0b:71:15:3d:e3:
         69:ce:55:ef:8e:fd:e5:82:ae:d3:23:e4:80:3d:ee:ee:4e:a4:
         d7:86:b7:60:01:16:5d:5f:5f:9c:88:e7:f6:29:56:a2:c1:f7:
         15:98:92:3b:b6:e8:35:56:ec:17:43:77:22:2f:53:af:83:7b:
         53:f7:8a:b4:11:da:14:f7:f1:7c:b8:b4:e3:21:79:13:7c:b4:
         3b:9a:75:f2:d4:18:9b:ec:a5:0c:fd:6c:f5:f8:25:62:f1:fc:
         72:c7:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:09 2024 by rpki-client on console-ams.rpki-client.org