Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/eb7ed3c3-1a02-3add-93b6-b46ff77c40cc.roa
File:                     eb7ed3c3-1a02-3add-93b6-b46ff77c40cc.roa (raw, json)
Hash identifier:          6b2fkVA+PuevHi6rTdIdaOgf21xC1XUO7X9/zKoNdc4=
Subject key identifier:   CD:B5:5E:10:82:EB:9A:33:B1:79:67:CA:87:49:8E:F1:F3:DA:73:B4
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285842D7222C28257D3AEFFC49A600
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/eb7ed3c3-1a02-3add-93b6-b46ff77c40cc.roa
Signing time:             Thu 10 Aug 2023 16:52:55 +0000
ROA not before:           Thu 10 Aug 2023 16:52:55 +0000
ROA not after:            Wed 08 Nov 2023 17:52:55 +0000
asID:                     210718
IP address blocks:        204.19.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d7:22:2c:28:25:7d:3a:ef:fc:49:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug 10 16:52:55 2023 GMT
            Not After : Nov  8 17:52:55 2023 GMT
        Subject: CN=c3fb6b06-764f-4f58-a2a1-b52a09012762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:64:02:49:9c:e4:49:b6:d6:44:fb:f1:43:
                    e6:5d:ab:da:f4:94:ae:36:fc:13:e2:15:b0:5e:95:
                    07:d4:5a:91:3d:06:02:57:04:8e:8f:7a:b6:63:27:
                    81:da:2d:d0:4f:46:ff:2e:11:79:cc:e5:78:cd:6d:
                    f0:ac:8d:b4:cf:63:36:41:0d:50:6c:4e:cc:92:62:
                    20:40:5b:d8:fc:1e:e7:93:eb:97:4d:22:cf:65:3b:
                    8b:01:67:b1:af:99:c0:cb:7c:2a:00:22:0f:11:df:
                    39:04:8a:5e:6f:12:b0:40:52:15:cd:43:ba:d7:fa:
                    e3:46:3c:77:9d:e6:4d:ca:62:a8:95:d5:73:7f:c2:
                    84:bb:32:5e:fe:49:57:ce:02:8d:33:f9:e5:7f:ae:
                    30:5a:2c:ac:38:fa:51:ae:70:f4:7f:8e:8f:ea:04:
                    dd:55:b1:f8:44:2d:b9:11:33:08:de:31:a2:4c:fb:
                    27:7f:e0:31:cf:c0:b6:23:2b:0e:18:95:e1:9d:84:
                    c1:7b:44:97:c3:01:e2:10:88:2d:45:3e:d1:62:4e:
                    3b:5b:29:35:4d:73:4c:97:7c:78:bf:ff:3c:45:2c:
                    60:20:fd:19:af:e7:a4:45:0b:d7:4f:ac:7a:98:06:
                    30:33:71:db:28:28:f7:be:a4:5d:57:69:e3:70:b9:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:5E:10:82:EB:9A:33:B1:79:67:CA:87:49:8E:F1:F3:DA:73:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/eb7ed3c3-1a02-3add-93b6-b46ff77c40cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:dd:ba:a9:f6:55:a1:ab:c7:90:c6:89:0d:cb:c1:a6:c9:
         77:a0:ba:10:a0:b5:46:fa:a0:97:8a:aa:55:9b:8c:fb:c5:a8:
         1d:5b:c4:b5:74:a9:a4:dd:92:46:2e:ba:c1:7b:5a:98:98:26:
         67:42:53:62:66:35:3a:c5:a9:fc:40:96:2d:6d:f4:00:ad:db:
         a0:27:0b:10:0f:ed:48:0e:8c:52:bd:49:ce:9d:b8:10:ad:c1:
         d7:ac:1d:79:87:ca:66:7a:fc:6f:d7:7e:19:c2:7e:f3:88:d3:
         ea:07:04:52:25:ec:88:fd:36:b4:dd:51:3e:7f:bb:2b:6d:f5:
         e4:d5:5f:ac:94:48:f8:5e:b9:6f:62:69:5f:21:82:d9:2b:52:
         d4:c3:8e:96:fa:55:ba:92:18:3c:b2:e9:f6:a8:2f:39:79:b0:
         e5:8f:f8:65:84:50:8f:12:0a:8a:78:47:17:ed:a1:69:46:38:
         5e:12:ca:3c:85:42:d4:75:28:75:57:af:2a:1c:27:5d:b6:7c:
         68:6a:8d:79:5e:af:2c:46:52:24:c0:03:2f:6e:84:dd:9f:7d:
         92:a2:9b:b6:56:9a:4c:8d:a2:89:3a:f1:36:59:f9:14:ee:14:
         89:29:ca:e5:b9:96:c2:19:5d:52:fe:e0:ae:67:fc:3f:28:49:
         24:7c:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:11:06 2024 by rpki-client on console-fra.rpki-client.org