Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f201a40e-f213-3b06-9f72-b9bffd6171cc.roa
File:                     f201a40e-f213-3b06-9f72-b9bffd6171cc.roa (raw, json)
Hash identifier:          BpBn0qGFw36tWNXH3DjVeKJVf85CNKM5UVuDzT2YqwI=
Subject key identifier:   82:AB:E3:FA:35:55:2B:06:F9:CA:AB:23:09:23:EC:82:A3:44:C2:3D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D40977AF50AB4D2FF08E7AC8
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f201a40e-f213-3b06-9f72-b9bffd6171cc.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     14663
IP address blocks:        72.25.240.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:09:77:af:50:ab:4d:2f:f0:8e:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=b000ed4f-da72-422b-a574-90faf5c67db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:ee:e1:9a:ac:32:91:87:ff:d4:7f:e6:f8:
                    8d:89:07:7e:d4:fd:69:4b:cb:6c:53:4d:ee:a5:cf:
                    60:dd:7a:28:d2:fb:19:84:20:53:53:b0:97:75:d8:
                    43:85:65:b8:90:55:77:f1:3d:3a:91:c3:2d:65:9a:
                    f3:66:d0:4e:e9:8a:6c:50:df:72:de:a4:ef:1e:42:
                    0d:7f:16:98:bf:71:3d:45:59:88:c7:20:a9:fb:9d:
                    db:4b:48:ab:3a:8a:71:36:a6:d7:ce:de:8f:50:51:
                    6b:80:1e:2f:9d:be:e4:89:86:95:c6:67:aa:3d:f2:
                    8c:96:f5:82:fe:9f:35:9c:cd:d1:8d:af:da:1c:eb:
                    0a:1e:86:6f:04:d8:9d:99:ad:b4:78:80:5e:54:0b:
                    90:e3:92:92:77:42:67:10:2f:e9:54:30:9d:50:12:
                    08:2b:98:ca:46:51:8c:75:97:11:07:d3:d1:08:c7:
                    cd:54:7a:72:c8:ac:fe:83:62:3c:84:05:82:cd:67:
                    3f:95:0f:3c:25:d8:b5:b7:c2:4b:1a:4a:86:87:0a:
                    4f:96:96:09:05:ad:00:9c:0c:6f:ab:82:b2:be:0a:
                    15:52:e7:72:ed:b6:fc:7f:82:38:9d:52:c1:e8:17:
                    39:f3:ca:96:55:9d:bc:ea:b2:85:eb:83:4f:e6:15:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:E3:FA:35:55:2B:06:F9:CA:AB:23:09:23:EC:82:A3:44:C2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f201a40e-f213-3b06-9f72-b9bffd6171cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:8b:71:d2:47:9d:95:be:a3:8c:31:cc:a9:7a:ed:2c:4e:27:
         b2:99:60:82:db:9a:b1:75:ab:82:77:00:f3:d7:5c:66:af:18:
         22:65:a4:70:ca:2c:c7:64:de:f4:a6:6c:f8:7c:ec:0b:db:00:
         31:7e:f4:26:4d:7c:7c:03:69:6c:50:e4:d9:3b:4c:9a:e4:a8:
         f0:14:3b:7c:f9:ce:2a:04:55:24:a6:f2:0c:d9:35:31:c5:e3:
         0b:ec:b2:d8:a7:e0:96:91:5f:50:36:a4:c4:31:bd:d0:b2:eb:
         12:c1:16:6b:62:14:eb:a6:b9:2a:65:d2:d0:6d:87:a1:98:98:
         80:9a:46:2c:bf:b9:73:50:a9:41:8f:9f:26:d3:13:5e:0e:24:
         c5:73:44:25:17:20:08:13:9b:1e:f2:53:2d:79:0d:e9:05:df:
         19:41:e7:94:e3:d1:3a:8a:0f:ec:a1:a9:75:39:69:04:de:75:
         48:f8:76:9c:d7:f4:c3:ef:ea:da:66:2f:e0:09:a0:ee:68:1b:
         9c:81:cd:a9:02:49:fd:b2:ac:32:95:ad:00:2d:ac:3d:f3:8d:
         c5:21:ab:de:34:db:2b:db:da:60:f2:04:f2:3e:ed:13:e6:02:
         01:b7:a4:1b:19:0d:ba:53:fc:8e:0e:78:17:2f:1c:9b:66:8b:
         c5:cc:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:02 2023 by rpki-client on console-ams.rpki-client.org