Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/635e6bb0-ee10-3a32-bbbf-4fcd17f1f2e7.roa
File:                     635e6bb0-ee10-3a32-bbbf-4fcd17f1f2e7.roa (raw, json)
Hash identifier:          RHu3urSwg+baYoC5mJ/KrzA8fa1U+0/9Ol1e5yPqjV4=
Subject key identifier:   58:DF:6E:C5:B5:BF:0C:FE:A2:B2:54:A4:54:A2:8A:82:89:45:34:73
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7AE9E294769806BBBCCE000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/635e6bb0-ee10-3a32-bbbf-4fcd17f1f2e7.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:9e:29:47:69:80:6b:bb:cc:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ae10f5f9-1588-42f1-bb1e-ba41e04442c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:b9:de:e4:4a:14:0d:1b:4d:0e:cb:0c:11:
                    e7:60:d6:9b:85:1f:2c:79:7c:52:24:51:93:72:d9:
                    14:14:df:7c:3c:22:2a:cf:64:fc:17:50:b4:89:eb:
                    d3:0c:30:23:04:11:7a:1c:3e:ee:a1:a7:6f:c6:58:
                    ac:2f:67:18:ca:95:99:c4:df:e8:bc:3f:2a:f0:04:
                    c3:c4:0d:26:4d:f5:b3:5d:c3:1f:57:4c:2e:57:69:
                    81:8f:c7:c9:3a:c4:06:48:d4:db:61:55:0f:16:e1:
                    3c:84:26:16:17:e1:a6:bb:a1:c5:09:9f:9a:99:3b:
                    71:1a:ec:03:dd:57:99:04:8e:8f:b2:00:8e:b6:f0:
                    e0:50:4a:c2:19:51:0e:b2:60:12:c6:0f:d5:d6:c0:
                    ab:8a:9b:5a:5e:aa:bc:d2:7d:1c:f3:12:60:fa:58:
                    fa:4d:1f:1d:77:7d:f7:35:81:0f:3c:e7:af:f4:f3:
                    6a:1a:18:32:66:b0:23:e6:7f:4d:d4:ec:ea:61:7c:
                    e4:03:3f:ff:e2:2a:4f:ba:82:00:f4:f5:95:92:6c:
                    23:fc:93:65:37:31:cf:95:dd:0b:12:3a:f1:b6:38:
                    bd:bb:c9:74:ae:d4:ad:88:f8:09:cf:9d:31:96:78:
                    f7:8b:55:11:e4:54:20:20:44:6f:66:3d:38:3f:be:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:6E:C5:B5:BF:0C:FE:A2:B2:54:A4:54:A2:8A:82:89:45:34:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/635e6bb0-ee10-3a32-bbbf-4fcd17f1f2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:df:45:a1:ee:05:d3:af:7d:fc:6f:c2:ff:32:37:cb:83:
         23:13:d5:08:62:12:84:c0:7d:23:c6:bf:ca:21:7d:ac:56:d3:
         5a:82:5d:fb:be:99:0a:42:ea:5e:08:c7:09:08:e8:68:a9:68:
         b0:86:8e:ab:4e:62:3b:9b:34:ed:b3:15:97:19:d9:ba:ed:cc:
         ac:98:55:0a:a3:46:77:dc:03:08:c1:23:4c:ee:cd:12:15:0d:
         26:da:3b:c8:50:ae:ac:30:75:f6:ba:70:ff:26:a6:ca:a0:0c:
         df:3f:7e:11:ee:24:68:73:5d:bc:5c:20:52:67:29:3d:25:e8:
         63:92:9b:04:df:e8:20:f0:b1:64:c6:84:28:c0:b4:36:84:4c:
         9a:9f:11:ac:fd:cd:5d:8a:6a:77:45:aa:5e:52:d8:d5:1e:83:
         97:80:e2:f5:ff:98:83:c8:8b:94:45:31:22:9a:3d:34:17:c9:
         3d:b0:bb:cc:8f:b9:59:67:f1:74:c6:54:4f:51:01:b8:46:cf:
         29:84:f2:0f:24:e6:e0:ba:e7:0a:98:02:12:17:2b:78:c1:4b:
         4e:cf:df:c3:24:e3:72:cf:b5:33:b7:51:9a:6f:df:72:7f:8f:
         2f:cb:46:95:8f:a9:cd:8c:85:4e:14:b2:d4:ea:e3:5e:c9:07:
         44:ac:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org