Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0ed0c74d-68d8-3aa7-80e7-bd871127cad4.roa
File:                     0ed0c74d-68d8-3aa7-80e7-bd871127cad4.roa (raw, json)
Hash identifier:          BhmKoLMJFVB6hECOQaEdJaPgIb1AtpzKTsJvyGONYjM=
Subject key identifier:   57:A9:D6:61:4D:8A:3E:7A:23:C1:5C:4D:A4:16:08:33:22:A7:F7:24
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D7067A2044D240A0BFE35200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0ed0c74d-68d8-3aa7-80e7-bd871127cad4.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        23.16.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:06:7a:20:44:d2:40:a0:bf:e3:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=db1d7b21-2c96-403c-afcd-ed1572aaf16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:6d:85:c2:06:73:e0:ad:39:d8:09:db:39:
                    36:50:fe:28:60:9b:18:41:b3:74:53:9d:8d:45:b6:
                    40:d1:3b:94:dc:85:ba:df:f8:0e:80:0f:4b:dd:0c:
                    6b:e0:9e:61:ad:0e:ec:b5:d2:7d:08:6e:86:32:a3:
                    26:c5:d4:d9:a0:71:71:01:08:bf:bc:ed:a9:c7:26:
                    97:2e:ea:c2:0a:ea:d9:89:d9:df:55:fb:6f:89:cd:
                    76:0c:88:a6:21:ee:c4:35:40:f4:dd:53:e3:fb:a1:
                    39:6e:0d:ee:5b:4f:17:7d:31:8e:aa:f9:c0:e4:83:
                    ca:13:1b:f5:78:f1:7b:82:5d:e6:d6:ab:83:57:28:
                    f4:06:b5:63:6b:c6:f7:11:95:e5:92:9d:bd:ea:d8:
                    90:27:32:47:20:18:c1:ad:2d:d1:88:f2:d6:ad:b2:
                    9c:e4:4d:69:fc:92:e0:9e:f4:51:45:86:20:51:8c:
                    e3:69:b5:5a:93:2f:3f:e6:b4:f3:ef:55:59:b7:2f:
                    22:a9:d0:86:1e:fe:99:85:0d:dc:cd:f8:33:d2:8b:
                    6a:a6:84:b3:05:1d:fa:4a:c1:54:75:58:d5:dd:48:
                    93:79:54:a8:d4:ef:9c:ac:c2:c1:90:91:2c:a1:af:
                    fc:2a:b4:c9:49:01:da:b1:c9:b9:87:14:a1:45:86:
                    1d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:D6:61:4D:8A:3E:7A:23:C1:5C:4D:A4:16:08:33:22:A7:F7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0ed0c74d-68d8-3aa7-80e7-bd871127cad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.16.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:20:59:93:94:22:45:88:c6:7b:49:23:1a:4c:3d:c2:6f:dc:
         04:c2:5b:16:0e:3c:46:c6:35:0a:81:21:37:4e:09:e1:fd:2d:
         20:a2:db:00:09:69:97:9f:61:a6:4c:af:01:55:ae:0b:10:91:
         b8:26:ba:16:40:ca:fc:22:b3:89:17:8a:36:31:8b:aa:ba:3d:
         f1:d1:b7:64:0f:9c:af:11:ab:bc:6f:be:ac:36:b8:e6:d9:eb:
         fb:c1:b8:cc:3e:54:20:62:5d:e5:66:25:1c:11:49:6b:22:91:
         e7:a4:8c:dd:9e:de:59:47:73:e0:51:e5:b3:06:06:30:97:6e:
         8b:33:8f:e0:06:71:49:3d:86:d7:18:fc:bd:50:df:78:65:f9:
         56:23:ac:97:2a:8e:5b:31:ef:f3:f5:66:2e:f7:4d:2c:b9:82:
         6a:a5:9f:37:3f:d4:84:5b:02:02:78:7c:77:f0:5b:63:6e:ba:
         e3:d6:60:e7:2a:f1:8c:13:70:9e:43:fa:c0:d9:cd:ca:9b:5c:
         46:3d:41:3f:47:d3:0d:bc:1e:94:70:9b:a8:71:2f:b5:92:7d:
         6a:9a:0a:3c:ad:32:78:23:08:7c:05:b7:05:e8:bb:17:be:55:
         62:ff:aa:48:23:08:c8:7b:54:9c:e0:87:cf:76:66:02:41:80:
         2f:41:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org