Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a835adea-0f79-3590-8627-9338fc12150b.roa
File:                     a835adea-0f79-3590-8627-9338fc12150b.roa (raw, json)
Hash identifier:          f5P6HWyjw28vf+kjXKEVaNCrnTHjKXUi9weuELYXnkM=
Subject key identifier:   93:6D:EE:7D:CB:20:01:1E:40:6E:5C:2C:E8:F2:F8:D3:D2:ED:AD:02
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DE16DC2808FB5676FF7380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a835adea-0f79-3590-8627-9338fc12150b.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        206.75.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:de:16:dc:28:08:fb:56:76:ff:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=e496be81-b7e9-43d5-8d4a-cb7a8a81bcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:21:97:17:49:e0:99:a3:51:57:e9:14:db:
                    94:ed:38:48:85:fa:b5:ba:be:b3:45:6d:a4:59:3e:
                    ed:bc:e9:71:13:c5:e6:2a:85:c2:16:33:f9:9c:ba:
                    bc:de:9a:63:54:d1:b9:7e:72:8d:92:44:4c:fb:ca:
                    79:9c:c7:11:85:31:0c:82:4e:77:89:e8:06:b9:ca:
                    58:bc:a0:fe:fe:cf:ca:6e:68:fe:0c:37:8b:f6:63:
                    f6:33:77:de:e8:fa:04:e1:dd:13:c3:ba:f9:20:4a:
                    75:b8:ea:34:cd:13:78:61:9d:fd:c5:c3:e7:ba:e6:
                    cd:4e:28:be:b0:7e:bf:58:20:b6:51:40:fe:a8:fc:
                    dd:03:af:c8:bc:02:05:4f:dc:95:08:47:ca:f9:71:
                    0a:32:d6:f5:bd:d9:46:14:47:bb:b3:dc:13:4b:05:
                    52:b9:b4:06:b7:5c:70:bf:77:0c:6f:90:0f:be:e4:
                    08:1b:9b:52:4f:cf:46:2a:99:78:b1:31:14:60:82:
                    53:f1:71:25:ad:3a:39:e3:0f:51:4d:c0:ec:3e:b6:
                    7b:12:8b:46:69:25:fa:ac:6b:f9:75:d6:9b:9c:30:
                    ad:05:70:83:bd:35:9a:bc:ba:50:bb:86:d7:f3:42:
                    1c:1b:e5:f6:03:c5:c9:4e:5e:2f:21:0d:e6:98:13:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:EE:7D:CB:20:01:1E:40:6E:5C:2C:E8:F2:F8:D3:D2:ED:AD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a835adea-0f79-3590-8627-9338fc12150b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:f3:e9:5b:7a:fa:dc:0f:a9:bd:49:a3:7b:04:4f:b7:5f:
         d3:40:2e:c7:c7:c1:15:a3:0c:3a:78:7e:d9:c0:dc:3a:9b:b7:
         57:40:1e:88:f6:df:38:b4:59:64:1e:c7:49:1c:95:01:8d:53:
         01:e9:fe:83:49:bb:2c:1d:c6:50:36:2f:45:d4:37:99:16:e8:
         d1:58:b6:62:a0:32:c2:01:9e:eb:fd:b0:d6:b5:0d:84:a5:f7:
         19:c7:3b:35:93:ee:00:7c:c9:01:1d:62:db:c8:5d:fd:3d:bf:
         5d:5d:06:1a:30:f2:9d:41:c9:eb:a6:1a:6c:be:77:e6:71:f0:
         58:40:e7:bb:4c:06:a8:36:fa:3d:35:a4:b8:b4:b8:87:d2:b4:
         95:80:85:a5:c4:f6:cb:b5:53:b9:40:9f:2f:0a:e7:64:16:bf:
         e1:08:13:98:76:89:1f:48:30:4e:44:c8:f4:f6:a6:c4:e2:b5:
         d6:e8:19:07:4c:2a:e4:73:28:ca:35:c1:5a:68:0c:95:e8:12:
         dc:aa:e7:45:bf:1c:ab:d6:a5:28:77:52:ee:08:78:fa:03:89:
         05:e6:af:02:42:58:be:50:45:03:53:9d:a6:3d:14:9e:71:d0:
         5d:c3:77:93:b7:b2:b9:a6:f8:a9:5f:a0:47:5b:5a:41:57:28:
         0c:70:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:05 2023 by rpki-client on console-fra.rpki-client.org