Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/ae3ed14c-9aa5-3d0f-bf33-21b435a48bb3.roa
File:                     ae3ed14c-9aa5-3d0f-bf33-21b435a48bb3.roa (raw, json)
Hash identifier:          QeQPFD1L75Ah8SJpRTUqA9BBsMumuEeVJBYL91GsK/Y=
Subject key identifier:   B1:0B:B2:3D:C1:37:D8:3E:EC:67:02:67:51:17:68:13:AA:A6:9B:D0
Certificate issuer:       /CN=42a6a92d-cd75-4125-b537-c87919ad3f73
Certificate serial:       010D0C9F4328583777992E89D0D839C14750CFE0
Authority key identifier: 8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/ae3ed14c-9aa5-3d0f-bf33-21b435a48bb3.roa
Signing time:             Mon 28 Sep 2020 04:00:00 +0000
ROA not before:           Mon 28 Sep 2020 04:00:00 +0000
ROA not after:            Wed 04 Jan 2023 05:00:00 +0000
asID:                     397280
IP address blocks:        72.19.12.0/24 maxlen: 24
                          72.19.13.0/24 maxlen: 24
                          72.19.14.0/24 maxlen: 24
                          72.19.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:77:99:2e:89:d0:d8:39:c1:47:50:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a6a92d-cd75-4125-b537-c87919ad3f73
        Validity
            Not Before: Sep 28 04:00:00 2020 GMT
            Not After : Jan  4 05:00:00 2023 GMT
        Subject: CN=1e0af12c-dec8-4fbe-8381-6ff2981b7d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:2e:b6:a8:24:fc:1e:16:c0:77:a7:39:79:
                    c9:5c:c4:6d:72:35:35:9e:8e:7b:c6:53:b3:eb:19:
                    63:20:b2:92:c2:5e:ea:2d:54:69:88:1a:08:d8:1e:
                    fd:bb:3d:7f:c0:ca:7b:3f:d0:73:09:e3:36:39:8c:
                    9c:67:79:f4:10:dc:22:62:5f:f4:ed:21:ae:65:97:
                    da:63:d4:e6:15:c8:f5:97:1f:87:7f:70:57:80:30:
                    7f:1c:79:4c:b6:b7:9e:2f:3c:10:e3:ce:43:55:f0:
                    f3:cd:3f:4e:7e:f6:a6:bb:c0:e1:b7:ca:61:d4:86:
                    22:7a:3e:95:8e:fe:c4:60:5f:fc:89:74:9e:01:89:
                    d9:b1:3d:12:6a:2f:c5:eb:c3:dd:91:63:10:89:ec:
                    81:a0:54:0f:e5:c8:12:f3:c6:52:30:cd:62:95:34:
                    ed:af:86:88:b5:50:ca:26:c9:ad:5a:b7:ec:4a:9f:
                    2e:08:96:8c:8d:a8:ad:2b:10:98:9f:d6:78:73:3c:
                    a5:ab:70:50:fa:2e:e4:1c:9b:90:18:e7:3d:fd:96:
                    22:ea:d9:b1:22:e6:ab:bd:db:45:77:ad:85:f4:fa:
                    d3:dc:49:00:80:b4:fb:53:2d:95:06:4e:62:4f:e2:
                    94:70:3b:c4:ee:82:b1:e6:88:e6:c3:46:2b:ee:28:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:B2:3D:C1:37:D8:3E:EC:67:02:67:51:17:68:13:AA:A6:9B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/ae3ed14c-9aa5-3d0f-bf33-21b435a48bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl

            X509v3 Authority Key Identifier:
                keyid:8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:86:82:e4:ed:74:94:c0:48:ca:e1:06:7c:0e:6f:1c:65:
         fc:dd:d9:da:bb:a7:2a:ba:cf:3e:ef:d0:20:80:cb:d1:26:6d:
         5b:6e:e4:eb:40:0c:b8:cf:75:fc:38:2d:cb:d2:0e:dc:69:30:
         5e:a7:b4:6d:67:64:5d:27:36:b2:64:c9:ff:4f:72:eb:6a:21:
         7d:d7:7a:2f:a3:74:65:0d:d7:c5:5a:36:31:3e:43:15:0a:1d:
         30:d2:fe:ca:e8:89:a9:96:45:03:e7:b4:5e:de:59:e7:14:d3:
         b4:cc:45:7c:78:86:42:0b:c3:bf:76:c6:6d:ec:79:53:56:8c:
         65:10:fa:c2:cc:23:ed:4b:d5:5a:3e:6b:a5:c6:b2:d6:8c:76:
         5c:28:1d:59:f8:ba:67:72:4c:21:44:07:a5:38:54:46:77:31:
         ea:8f:14:77:2d:b2:8b:9c:81:36:60:8f:e6:db:3f:a1:4a:e4:
         c8:18:b7:c3:b5:2d:1f:30:ca:ec:eb:46:61:db:42:49:78:d6:
         98:07:e0:c9:ad:b6:b4:63:20:c7:84:27:04:0c:0a:e9:2f:aa:
         bb:77:53:0a:31:67:a5:00:7f:db:98:3d:51:c7:16:3e:34:d6:
         0a:a5:28:99:e1:70:13:f4:ec:ed:ac:ac:a2:7f:3c:e2:1a:c5:
         2c:43:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:02 2023 by rpki-client on console-ams.rpki-client.org