Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/1e25cec7-ab30-3961-9c58-b26956a7b0ee.roa
File:                     1e25cec7-ab30-3961-9c58-b26956a7b0ee.roa (raw, json)
Hash identifier:          PziX+b6JPdra7SNUyeT3TjREg0KzvffAn+X9K925nd8=
Subject key identifier:   62:81:93:54:E4:CA:98:FD:44:B2:DC:81:D4:E4:62:1A:15:66:71:5F
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328576D51CC73C042CFC172606CF23F
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/1e25cec7-ab30-3961-9c58-b26956a7b0ee.roa
Signing time:             Fri 29 May 2020 12:34:12 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     398143
IP address blocks:        72.46.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:60:6c:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=13523287-2094-4af3-9bae-f12ad21cce04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:14:e2:31:83:1d:62:12:38:30:3a:e8:52:
                    c7:e9:30:c4:1c:0c:f5:3f:cb:dd:0a:9d:f1:c6:cd:
                    b6:c2:35:b3:a5:4e:02:60:37:6c:d1:63:14:19:32:
                    6e:5b:00:04:c5:df:cf:6c:e5:27:31:90:52:ef:7a:
                    78:d2:95:44:ae:e2:4a:a9:91:26:24:ba:1f:c8:73:
                    dc:92:fe:eb:40:56:73:65:d7:3d:56:05:d1:62:72:
                    6e:3e:ca:76:43:c3:e2:78:2c:12:9d:fb:16:95:9b:
                    2e:26:92:42:54:61:4f:67:a4:e3:e8:9d:bf:7a:45:
                    d8:c7:3c:df:62:6b:38:71:25:fa:5c:5a:39:de:fd:
                    ca:0c:f4:d6:8d:49:a1:ac:00:fc:86:71:c3:f4:a9:
                    1a:5a:d6:fd:6a:32:89:23:dd:c2:13:29:17:90:35:
                    59:66:91:0a:f4:bb:eb:0a:db:1e:a8:2d:14:da:39:
                    89:ef:c3:ff:64:c7:c3:5c:55:53:be:b2:d8:be:68:
                    92:d3:5f:52:fd:cc:ef:d7:66:16:bf:cf:af:9d:7a:
                    bb:8c:ec:4c:86:31:f9:db:0f:37:a2:b7:04:7f:a5:
                    07:6b:13:2d:82:dd:75:df:96:58:fe:48:72:ab:8a:
                    d7:d0:f2:b4:36:38:6f:44:ab:87:58:c4:c8:47:72:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:93:54:E4:CA:98:FD:44:B2:DC:81:D4:E4:62:1A:15:66:71:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/1e25cec7-ab30-3961-9c58-b26956a7b0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:26:0e:93:b6:f7:96:d0:9f:d4:cf:c0:7d:56:6e:5c:36:
         da:5a:6a:af:b5:d2:44:15:94:e6:d0:c2:3e:a4:42:5a:06:40:
         65:b9:50:5d:a9:4e:59:b7:40:bb:50:ba:f6:6a:e6:9d:6c:bc:
         b8:a4:31:4b:5d:c7:59:a3:76:be:8f:6c:f3:a3:25:a8:aa:91:
         2a:ec:d4:bb:55:ad:41:38:38:d1:ce:5e:36:cd:a3:04:2b:4d:
         7b:8a:d3:4e:e7:dc:10:e4:4d:13:47:bf:dd:a9:b2:ca:59:01:
         cf:1c:41:e4:55:0f:e6:a3:36:52:ba:35:27:34:98:91:e4:21:
         d0:c6:57:ce:1b:bc:1d:97:8b:56:4e:92:89:0b:63:e6:5e:94:
         38:2c:95:80:79:e0:e5:57:3c:b2:69:5e:84:8c:e7:84:c1:f5:
         95:91:fd:a1:fa:b0:4d:98:d2:ed:54:f0:62:75:0b:ad:33:d4:
         a2:81:fc:b5:b9:68:76:6b:56:14:a0:f3:76:b9:11:53:1c:38:
         d7:c2:f4:18:8d:c4:cd:d2:28:27:a8:ba:a1:71:c2:36:47:6e:
         a6:a7:27:13:1d:4a:93:3d:80:34:d6:6e:72:0a:51:9a:68:9f:
         3e:74:10:03:00:0f:a3:3f:9a:4a:b6:4b:23:c4:e0:86:d6:51:
         7d:b0:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:14 2023 by rpki-client on console-fra.rpki-client.org