Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/7bbe5c20-a61d-3411-bcd9-dec2d60b0aa3.roa
File:                     7bbe5c20-a61d-3411-bcd9-dec2d60b0aa3.roa (raw, json)
Hash identifier:          oa24SJ4BpdHq8Z25dz0Y+l3Tpdde2LbmOa2HrVihZec=
Subject key identifier:   B3:A5:0F:BE:58:26:10:B1:F6:2A:27:85:CC:5E:BF:B8:B7:40:2D:52
Certificate issuer:       /CN=2dadabff-708e-4d25-8157-f0b718476149
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730BBD8559
Authority key identifier: 64:27:AB:98:A9:38:A5:00:D8:9B:41:42:4F:03:AF:10:3A:69:53:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/7bbe5c20-a61d-3411-bcd9-dec2d60b0aa3.roa
Signing time:             Wed 01 Jul 2020 18:57:16 +0000
ROA not before:           Wed 01 Jul 2020 04:00:00 +0000
ROA not after:            Sat 02 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        69.64.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0b:bd:85:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dadabff-708e-4d25-8157-f0b718476149
        Validity
            Not Before: Jul  1 04:00:00 2020 GMT
            Not After : Jul  2 04:00:00 2022 GMT
        Subject: CN=aaa9fa57-9897-4f64-92bb-84f446a141be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:11:66:29:0f:e9:22:2e:c9:0d:e3:25:71:57:
                    5f:ba:f0:aa:64:02:60:24:53:f4:49:9b:97:58:40:
                    23:ed:cb:fc:26:21:7a:2f:6e:32:3d:35:a4:e1:0c:
                    24:0a:cb:73:a4:b4:9e:09:29:59:12:7d:da:73:08:
                    4a:5e:1a:f2:9a:ec:d8:23:85:bb:78:72:10:79:0d:
                    bb:1a:e7:58:c1:42:48:cf:7c:c1:5d:c0:e6:ae:ce:
                    5d:0a:64:4f:65:40:92:b2:e9:2d:82:0a:b4:ad:04:
                    f0:56:6f:98:f0:08:d1:0c:bc:71:d9:8c:02:21:cc:
                    4f:07:fe:6b:5e:63:93:49:58:f0:bf:a8:4f:ea:9f:
                    a4:ce:4b:9e:a3:8d:e5:74:64:90:c8:a6:66:b6:f2:
                    e6:71:81:1e:7a:77:b8:a5:e3:37:4e:27:ee:86:bf:
                    ef:a7:ab:a4:99:f5:ba:f3:4d:c1:40:5b:89:06:e2:
                    b8:a2:47:07:62:46:de:81:a8:e3:eb:f9:1b:d8:7e:
                    67:1d:52:d2:61:24:8b:9d:fd:eb:71:40:09:de:fe:
                    e3:d5:30:9c:b6:c1:da:f6:aa:1a:c2:2e:58:be:9e:
                    dc:a9:16:64:c9:3b:e1:76:94:b9:d1:cd:ec:2f:8e:
                    ed:15:13:02:e0:62:44:cf:c7:8f:94:51:de:92:28:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:0F:BE:58:26:10:B1:F6:2A:27:85:CC:5E:BF:B8:B7:40:2D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/7bbe5c20-a61d-3411-bcd9-dec2d60b0aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/2dadabff-708e-4d25-8157-f0b718476149.crl

            X509v3 Authority Key Identifier:
                keyid:64:27:AB:98:A9:38:A5:00:D8:9B:41:42:4F:03:AF:10:3A:69:53:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:4a:c2:30:05:33:1c:a4:4d:cd:79:28:40:c4:8e:86:5a:
         75:84:8e:b3:c5:cc:87:c1:bc:22:5c:cb:2c:28:19:c2:b1:3e:
         65:ff:44:aa:31:bc:dc:0f:a1:01:a3:f1:3f:b6:36:ea:4a:7b:
         f1:dd:67:22:4a:e0:d5:4a:56:44:77:6f:6e:77:7e:ac:14:4b:
         db:6d:aa:f0:45:78:56:23:31:da:6e:10:9e:7e:e1:68:5a:92:
         c0:12:80:32:40:9d:21:4a:1e:f0:14:4c:2e:d0:ee:01:be:15:
         b3:74:3c:eb:9e:63:3e:59:2c:ef:c6:30:b7:f9:eb:5b:f5:aa:
         43:21:6f:35:c8:59:20:1a:3f:87:e5:86:ec:5b:12:e7:fa:29:
         ca:ce:98:2f:7c:99:b4:8e:2d:1b:77:4d:11:91:c6:43:62:4c:
         86:f8:54:51:9b:04:c0:c8:bb:b0:2d:d0:49:31:13:af:c4:0a:
         4b:05:9c:10:53:fb:76:81:fc:64:15:94:d6:6a:15:64:ac:21:
         5b:02:e1:96:90:e9:d6:75:85:0c:5e:ea:d6:ab:b0:b8:ac:cb:
         68:88:a5:0a:77:01:31:74:2d:9c:06:07:10:09:ee:5a:2f:f7:
         88:ef:a6:36:94:98:6d:bc:b9:dd:09:6d:c9:a7:4e:e1:d9:f3:
         42:24:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:54 2023 by rpki-client on console-ams.rpki-client.org