Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb50e8b4-c89a-30a9-b40f-19d1116067eb.roa
File:                     fb50e8b4-c89a-30a9-b40f-19d1116067eb.roa (raw, json)
Hash identifier:          jQ0BOcg7DHcRC9z2Dnx4lUd58DIxsTLNqGgXC8hQ7ho=
Subject key identifier:   75:EB:D1:FF:4A:E8:8A:7D:D6:BF:02:E9:42:70:00:97:EA:71:AA:BB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D40A29C71C4C15FFA34B3EC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb50e8b4-c89a-30a9-b40f-19d1116067eb.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     14663
IP address blocks:        66.103.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:0a:29:c7:1c:4c:15:ff:a3:4b:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=2cea1be1-ca4a-4682-849e-c3b1de0a9a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:50:a5:01:99:90:81:19:91:0b:c9:a3:41:
                    06:0d:e2:1a:34:a6:b4:e3:a0:c2:de:fa:9a:9d:da:
                    49:97:d8:5a:a6:50:4d:0d:ac:f7:06:db:a7:f6:95:
                    b8:01:e9:00:91:21:53:8d:85:be:64:78:96:a6:51:
                    05:bd:e7:9e:f7:ef:70:7e:e2:7d:a8:39:ce:12:c3:
                    58:52:76:ab:98:fc:43:55:59:e5:c3:91:58:98:41:
                    83:47:4c:22:13:86:78:df:90:a3:8d:d0:8c:42:c2:
                    6d:fc:ba:3f:57:50:a1:e1:9c:74:67:c3:6f:24:eb:
                    7f:db:bc:7e:59:77:a4:b7:48:1a:53:12:cd:51:a9:
                    90:38:4c:e6:c1:28:27:4d:ad:e1:53:21:0b:3d:8c:
                    a6:b3:a7:63:70:66:de:5d:02:74:d3:ae:09:a8:b8:
                    c3:67:45:4b:57:ff:3b:2d:dd:2d:71:90:d4:9b:4c:
                    32:05:92:96:80:71:72:9f:4d:4f:39:d5:46:7f:16:
                    27:6c:31:fa:be:77:02:c2:01:80:a6:f7:bf:06:28:
                    46:a6:58:69:35:4b:cb:cc:92:5e:38:a6:55:45:5a:
                    7a:53:cb:ea:dd:44:ae:22:f1:90:96:91:14:e1:62:
                    8a:79:1f:1d:31:21:c8:ee:fe:15:18:bd:07:c6:ca:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EB:D1:FF:4A:E8:8A:7D:D6:BF:02:E9:42:70:00:97:EA:71:AA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb50e8b4-c89a-30a9-b40f-19d1116067eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ad:e3:6b:7e:5a:26:f7:68:9c:03:e7:1c:58:ba:9f:68:25:
         60:a9:92:59:d1:12:30:7a:86:f8:ed:7a:19:04:0e:c4:de:75:
         ad:c1:36:97:25:0e:9e:24:a0:e4:6e:25:11:46:49:30:0c:59:
         ff:f5:c2:c9:5c:83:fd:c9:26:1d:24:7e:51:55:4e:2e:3b:02:
         b5:a1:3f:7e:83:21:b3:69:0c:f7:71:f0:0d:d9:1b:2a:00:eb:
         92:6f:6b:a4:11:be:74:4c:50:06:fd:3f:30:1e:a8:ee:dc:54:
         48:08:bc:ae:6f:92:0b:83:67:12:e6:4e:99:85:a4:be:30:91:
         34:83:45:69:61:c4:a0:1d:10:dc:76:be:65:c8:94:84:34:a4:
         a0:53:f6:cc:fd:c8:54:14:4e:73:b0:c1:95:17:12:33:61:e4:
         77:ff:c2:41:06:97:4c:8b:0f:fa:96:eb:06:1d:97:7e:f7:67:
         51:28:4b:d9:f8:86:7d:9d:b4:fa:2d:d8:a0:63:87:95:e0:5f:
         da:37:22:38:11:60:cb:65:7e:50:58:fe:f8:f7:71:8d:fd:da:
         4e:95:ed:5d:24:bc:b1:7d:07:d1:cb:35:6e:24:ab:43:2c:58:
         7c:d0:a2:7b:ff:d6:02:e5:cb:c8:42:a1:e3:98:f1:7d:78:27:
         82:a9:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org