Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa
File:                     c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa (raw, json)
Hash identifier:          BEIzEVSKqA46O5fFDoemKzX5d+1wpdkIYz479UAtxIA=
Subject key identifier:   DC:A6:01:3B:EB:78:C4:0A:4D:22:24:C9:08:E1:3E:2D:8D:48:CE:C1
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328576D51CC73C042CFC173499D0853
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa
Signing time:             Mon 13 Jul 2020 19:18:14 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     10958
IP address blocks:        147.161.4.0/22 maxlen: 32
                          162.216.108.0/22 maxlen: 32
                          162.216.208.0/21 maxlen: 32
                          198.62.181.0/24 maxlen: 32
                          208.68.56.0/22 maxlen: 32
                          208.80.144.0/21 maxlen: 32
                          208.91.176.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:9d:08:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=6e6bd2bf-5fd7-44aa-ba7a-7dd9e170914f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:4e:8f:c9:ba:ac:07:c2:6f:5c:0e:e8:84:
                    6f:df:4c:90:1b:ca:80:c5:6f:a8:21:28:4d:e1:ce:
                    df:a0:46:f2:32:3d:f0:30:11:8b:f2:09:a7:09:49:
                    a8:16:a1:c8:fe:09:e7:f1:ff:9c:63:34:09:19:f1:
                    5a:76:dd:34:b7:a1:50:81:a4:92:28:4b:a3:18:0f:
                    42:fd:67:bb:5f:31:e1:db:6d:ba:e9:f9:53:d3:e3:
                    26:b4:17:77:ca:22:c0:ad:82:54:e3:b1:e7:c8:c2:
                    96:32:72:fd:a1:46:5f:b2:ac:e3:ac:1d:01:28:f1:
                    b5:eb:ab:98:cd:f3:8c:ce:c3:1e:65:ec:48:48:de:
                    8b:88:d1:55:ee:b1:9c:1a:67:a5:d8:6a:de:02:3e:
                    a0:db:e8:d0:a8:04:32:a5:cb:0e:32:e4:38:f3:06:
                    6d:87:fb:59:b1:81:ab:1e:9f:44:10:7f:f9:b0:ef:
                    d1:a5:4b:08:ee:05:85:0d:8e:ba:3c:d3:7d:fb:bb:
                    e6:c0:5b:a9:15:8e:c5:38:a0:c2:47:36:6a:a0:8d:
                    e0:8a:8e:26:6d:3e:79:9c:e0:15:f7:68:75:c5:f4:
                    40:de:3a:64:41:56:ba:7d:a8:2d:5e:73:ff:f1:f3:
                    8b:80:36:a5:ed:6a:ad:8d:ea:e0:9d:76:eb:94:e1:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A6:01:3B:EB:78:C4:0A:4D:22:24:C9:08:E1:3E:2D:8D:48:CE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:43:ff:2b:e4:f8:c9:a4:e4:5a:a1:24:69:f5:4a:74:d4:cb:
         fe:cf:09:c5:15:41:b3:d6:71:ec:a5:d5:7a:a4:13:e8:f9:45:
         ab:c5:58:15:e8:12:b3:a3:51:d6:9f:0d:b7:22:3a:2b:34:c1:
         74:49:dc:3c:ed:d3:d7:a3:51:53:d4:f2:d8:f5:de:df:b7:80:
         0e:97:3c:d4:9f:5d:f0:e0:6e:b5:13:fb:94:e6:e4:a4:fb:0b:
         7d:4c:e4:ee:f6:63:7f:fe:6c:51:de:38:62:80:1b:b9:3c:e4:
         e9:77:27:3f:5f:4f:0e:b9:90:d3:54:03:d8:9e:82:06:03:c1:
         be:84:42:de:26:bb:17:b7:d1:31:49:22:00:2b:d2:63:bb:e0:
         31:fa:85:a9:a2:73:73:d2:b2:9f:75:99:12:6a:c4:20:6b:06:
         18:00:57:c4:b9:20:24:4e:70:3f:1a:0a:d4:79:ca:ae:6d:02:
         8e:8f:44:7b:72:5f:0b:73:62:9f:fb:aa:12:e5:5e:ce:42:3f:
         b9:36:5e:7d:fb:5e:d1:8b:85:54:ff:87:c1:e1:7b:a4:e2:27:
         90:72:74:65:77:5c:ef:d6:c4:05:4f:d0:f0:e3:23:fc:44:2d:
         66:4e:14:0d:b6:17:e9:87:26:89:e0:3f:cc:46:7a:0d:79:3a:
         f0:92:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:15 2024 by rpki-client on console-ams.rpki-client.org