Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/27179e0e-640e-3e4c-b69c-10d458e58ba4.roa
File:                     27179e0e-640e-3e4c-b69c-10d458e58ba4.roa (raw, json)
Hash identifier:          0GgN0FSBsxsKmTQo3JQAh1NZjqGbqUk92KvZOak0c64=
Subject key identifier:   49:A8:12:8F:1A:46:AC:B2:BF:A3:D3:0D:A0:E5:13:23:11:17:9A:D3
Certificate issuer:       /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial:       010D0C9F43285838BEB570FA90272F71F93CDB80
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/27179e0e-640e-3e4c-b69c-10d458e58ba4.roa
Signing time:             Thu 03 Dec 2020 05:00:00 +0000
ROA not before:           Thu 03 Dec 2020 05:00:00 +0000
ROA not after:            Mon 01 May 2023 04:00:00 +0000
asID:                     62533
IP address blocks:        104.219.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:be:b5:70:fa:90:27:2f:71:f9:3c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
        Validity
            Not Before: Dec  3 05:00:00 2020 GMT
            Not After : May  1 04:00:00 2023 GMT
        Subject: CN=d549464b-d322-441e-a635-1c8d5ebfac01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:05:08:0f:fa:26:cd:f7:1b:48:d5:c7:69:
                    56:05:03:8b:4c:e5:6d:9b:92:5a:83:bd:c8:35:dc:
                    68:79:f5:16:3b:c5:88:31:ed:09:d6:e6:41:62:2c:
                    29:a8:cf:c1:92:c0:fc:f8:b3:21:d4:23:5b:6d:f1:
                    a3:ac:be:1f:f7:7d:df:0d:c9:13:f9:e5:fe:57:08:
                    45:62:36:1c:4e:13:58:7f:88:cd:d9:d4:18:b1:62:
                    5d:82:d1:e6:fa:be:66:23:5e:13:1e:27:7c:02:6c:
                    40:ba:10:90:90:84:89:60:30:cc:09:58:be:81:79:
                    81:48:e4:88:2d:16:91:b3:f6:39:bb:9e:ae:cb:81:
                    f8:66:eb:0a:ca:cf:af:f7:b1:93:c5:22:a4:e9:9c:
                    32:b6:bb:eb:2e:f0:49:a2:71:47:84:af:e2:db:fd:
                    fe:ce:2c:c5:bd:5b:77:b3:4b:99:e8:d5:63:f3:43:
                    aa:e3:bb:8a:94:de:f6:e4:99:9f:48:bf:dd:22:c3:
                    f2:0b:b7:1b:bf:e1:1a:31:6d:e0:80:f6:2c:fa:ff:
                    88:ba:b5:e1:0a:b3:b1:bb:b7:91:37:03:bd:cb:c8:
                    9a:93:c5:e5:78:c8:9a:49:56:46:d8:e7:54:d8:4c:
                    54:48:0d:a4:d1:9a:5a:fb:ac:47:fe:a1:a6:22:64:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:12:8F:1A:46:AC:B2:BF:A3:D3:0D:A0:E5:13:23:11:17:9A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/27179e0e-640e-3e4c-b69c-10d458e58ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl

            X509v3 Authority Key Identifier:
                keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:e8:98:90:f3:f2:81:5e:8e:74:61:0a:71:39:73:bd:78:
         a5:ba:7e:95:6d:aa:10:72:0b:f1:e9:80:c8:5e:2e:c0:28:79:
         9e:7f:b5:ac:1e:76:f3:61:74:eb:00:dd:6d:da:65:fa:ac:9b:
         de:5e:fa:98:4d:9c:b6:2d:67:32:0a:c2:e6:73:3b:7d:46:c1:
         b3:cc:83:cf:c2:47:9c:e0:7d:65:85:b5:f4:03:94:d9:fc:ab:
         90:f4:79:dc:ee:0b:ec:a3:ea:73:1d:4f:9c:87:25:88:4e:32:
         12:90:6f:72:81:e0:c2:3b:54:96:96:78:aa:4e:5b:9b:e5:0e:
         43:ba:75:f9:99:41:39:df:2b:b3:ed:6d:a7:90:57:a4:ab:71:
         74:f2:6a:09:ad:12:10:f5:84:4a:8a:2f:d5:dd:db:9e:50:32:
         25:43:57:74:54:93:c7:84:ac:36:7a:b8:f1:07:0c:c9:3d:7b:
         2c:51:5d:10:32:f2:b9:6e:81:8b:4c:a9:a1:97:1f:75:4a:e4:
         91:53:14:30:9c:67:81:3f:db:1c:72:c5:7c:a1:e9:ea:42:f9:
         37:41:c7:99:a4:46:6a:58:24:47:ba:1a:b9:7b:52:d4:90:2e:
         22:d4:24:f2:3b:d0:5c:65:00:57:3b:04:c0:08:88:7f:73:65:
         8d:2d:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:07 2023 by rpki-client on console-ams.rpki-client.org