Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/fe53e03e-126e-35a1-97b5-fd5a57d76926.roa
File:                     fe53e03e-126e-35a1-97b5-fd5a57d76926.roa (raw, json)
Hash identifier:          sTvh2J/AA8W6eHOBGoFC8x/fFIB6+CcyJB/4OSTUi4o=
Subject key identifier:   6B:BF:53:99:81:DB:E6:A5:88:37:7A:9E:56:07:75:95:87:B6:D4:39
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285838CAA8D08EB253B00973E86940
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/fe53e03e-126e-35a1-97b5-fd5a57d76926.roa
Signing time:             Tue 20 Oct 2020 04:00:00 +0000
ROA not before:           Tue 20 Oct 2020 04:00:00 +0000
ROA not after:            Sat 06 May 2023 04:00:00 +0000
asID:                     399296
IP address blocks:        162.254.0.0/21 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          104.171.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ca:a8:d0:8e:b2:53:b0:09:73:e8:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 20 04:00:00 2020 GMT
            Not After : May  6 04:00:00 2023 GMT
        Subject: CN=a3a65b6b-4138-428f-ac73-38d5b22bdf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:10:27:2b:77:14:6c:a8:eb:1f:8f:3d:e9:
                    56:77:84:86:6b:eb:68:30:67:a7:ea:09:b3:2d:53:
                    f3:5f:ce:97:9f:1b:55:b5:fa:f5:1c:e0:be:b4:0e:
                    aa:39:71:da:65:c4:32:ec:09:ec:4f:c5:b6:eb:7d:
                    69:ab:07:3a:01:9a:70:2a:14:18:f6:ee:18:7b:ad:
                    27:d8:8f:ce:5a:d6:01:2c:e3:1f:9f:40:c7:08:e7:
                    13:3a:3b:a1:96:b9:dd:e3:7c:6f:27:11:41:21:02:
                    e2:83:ed:f4:1e:10:03:d6:d3:45:32:e3:fd:d7:5a:
                    c8:32:4e:46:d5:33:06:70:43:0d:28:1a:d6:14:ce:
                    9a:80:07:2c:44:2e:bd:90:8b:14:a2:e5:3d:e9:19:
                    c5:28:26:1c:d3:ac:cf:ac:c8:70:af:bc:04:29:73:
                    84:68:fd:f1:4d:32:e6:48:75:2e:ac:e6:e1:a1:20:
                    12:26:c8:bc:7a:c9:59:36:8b:bf:73:03:43:89:48:
                    08:fc:fc:4f:ab:a1:ba:0f:46:32:49:19:99:15:d7:
                    96:e4:04:60:45:41:0d:88:ad:81:83:7c:91:7d:39:
                    44:8a:04:67:9a:27:7e:d7:ce:fe:2c:3e:8d:b8:64:
                    dc:14:79:01:cb:c7:ec:9a:8e:aa:cd:14:67:31:6f:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BF:53:99:81:DB:E6:A5:88:37:7A:9E:56:07:75:95:87:B6:D4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/fe53e03e-126e-35a1-97b5-fd5a57d76926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:9d:2a:c6:d3:db:d5:1e:fd:6a:4e:fd:99:9b:2f:7f:6f:
         58:34:1b:ed:7a:29:d6:75:2b:fe:fa:28:9d:30:89:b7:f9:02:
         ed:8f:54:50:bb:af:f6:4c:3d:2c:04:9b:60:ac:8e:7c:1a:e9:
         86:e8:35:d9:43:de:af:14:a8:f6:79:0a:0d:32:f3:5c:64:27:
         0b:53:83:7e:b8:1d:e3:46:11:86:68:66:2b:38:ce:4a:22:e4:
         56:40:7e:38:e6:ae:0d:f5:05:6d:60:f4:ed:98:3a:0e:f1:b2:
         53:6e:73:60:6f:58:ed:c2:40:f6:1c:d0:87:76:e3:e4:1d:2e:
         42:e1:88:68:17:68:1a:4e:f6:36:f4:20:4e:7d:c9:db:63:fc:
         9f:94:14:50:67:c5:21:1f:fd:0d:67:45:07:b4:83:c9:5e:ce:
         3f:2d:74:dc:79:09:18:ab:ff:8b:12:d2:e4:64:6b:72:2f:6b:
         a5:23:7a:8c:a2:fd:35:e9:bd:27:c8:40:4b:17:db:f3:2f:be:
         1c:48:de:8e:a9:bb:ad:5c:45:06:44:b3:a4:6e:6a:2b:22:a4:
         22:15:9d:eb:f4:75:83:5c:1f:81:f8:98:44:97:81:ca:42:87:
         e1:8e:03:4b:7b:79:85:4a:8b:78:64:c0:52:68:4e:76:69:fe:
         80:94:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:08 2023 by rpki-client on console-ams.rpki-client.org