Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ca26e80-7ce1-3d64-8185-b3dfab06fca1.roa
File:                     1ca26e80-7ce1-3d64-8185-b3dfab06fca1.roa (raw, json)
Hash identifier:          ZW4dpUrnLf11rNJSKXT0lN3K6Zp6KGk7f8kKeWdj6Jc=
Subject key identifier:   33:0E:88:DE:7D:58:9B:E0:76:EA:4B:C1:94:71:37:4F:8E:6A:7D:33
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D6FCFEC5F07C1939A9CF7680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ca26e80-7ce1-3d64-8185-b3dfab06fca1.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.102.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d6:fc:fe:c5:f0:7c:19:39:a9:cf:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=71540eea-696f-4fe7-8517-4947f34b8b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:25:e8:64:5f:b4:11:87:5d:cb:f0:b4:2f:
                    2f:89:1e:cb:a5:c7:4b:69:f9:63:e8:a2:24:6d:31:
                    da:50:dc:d2:22:b2:fb:a7:16:4a:10:69:06:13:a0:
                    11:6c:21:16:18:0a:15:6a:4c:32:d6:19:7c:3b:ca:
                    60:f3:7c:8a:1b:43:6e:51:23:72:1e:dd:2a:58:3d:
                    f9:61:57:8f:5a:62:89:63:87:c2:bb:b2:0a:11:7f:
                    58:9c:7f:50:2c:fe:68:e3:52:cc:82:f1:3b:ea:7d:
                    83:d7:ee:83:52:b6:d6:51:bc:87:73:be:07:76:dd:
                    34:bb:df:03:bb:61:76:67:96:92:eb:d7:8d:42:a1:
                    c9:26:1c:47:19:96:42:49:e4:2b:f2:1f:3e:d1:2c:
                    fe:5e:77:4c:99:61:7d:d6:3b:57:9f:1b:a4:7e:6a:
                    16:e5:4a:59:48:7b:91:a8:70:ff:99:49:3f:ea:19:
                    da:f8:e0:e5:de:34:53:2a:d1:fd:17:28:59:af:e4:
                    cf:f5:e3:da:bf:2b:72:b4:9f:5f:2d:a1:0a:1d:ff:
                    fa:12:fd:c9:e0:8e:ef:a9:48:90:ef:cf:3c:b5:95:
                    80:c6:cc:5f:66:59:a7:a9:92:06:08:80:cf:36:a9:
                    07:cf:a9:9d:85:27:30:53:84:20:f3:2d:81:b3:83:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:88:DE:7D:58:9B:E0:76:EA:4B:C1:94:71:37:4F:8E:6A:7D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ca26e80-7ce1-3d64-8185-b3dfab06fca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:ae:52:e0:68:d0:9d:d6:04:77:74:34:e2:1c:eb:96:8a:
         3e:63:ee:d3:e9:2d:65:d5:04:4a:51:29:12:5d:74:31:84:ca:
         5e:65:f6:e5:0e:b2:3f:a8:4f:d7:1c:33:03:6b:ae:81:6d:7b:
         b3:13:75:c4:9c:b2:51:33:d6:b9:5e:6f:37:d2:ea:e5:d3:57:
         1c:a5:62:08:49:9a:95:84:17:06:eb:1f:03:96:0d:28:89:15:
         dc:be:20:79:4f:62:23:26:41:72:0d:74:f7:f2:3c:b7:5a:da:
         3e:81:47:ed:be:ed:55:88:08:db:7c:a5:8b:c8:bb:36:e6:5e:
         7a:5f:7d:43:d6:88:3a:6d:65:b5:ae:c7:d9:61:da:79:31:66:
         0e:9e:78:bb:6a:2c:d0:d0:5f:ad:b3:3a:46:d9:b3:d6:13:33:
         5c:7c:e5:e7:79:27:4a:ee:1c:cb:8b:53:39:92:ab:e4:0d:75:
         5d:2a:63:df:f0:31:8d:ac:20:64:65:d7:db:2a:fd:16:53:f2:
         f9:be:a8:fc:17:45:8c:cb:07:84:50:ef:07:4f:a1:42:78:47:
         c5:03:cc:f5:17:6c:01:9f:22:1e:3c:01:48:6e:62:f8:1a:bb:
         f5:a0:0d:cd:17:ca:dc:91:d1:7c:ba:0a:7b:b2:aa:02:bb:5a:
         01:6c:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org