Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/8629c981-dfc9-3314-b087-95db1c2cdf15.roa
File:                     8629c981-dfc9-3314-b087-95db1c2cdf15.roa (raw, json)
Hash identifier:          OqUF0ZU7GzVEsdvmOoEdSj3N+rzBXObIUJgXVWQ2eu0=
Subject key identifier:   98:A4:53:A9:40:EF:63:69:53:94:F6:51:E7:F1:B4:8D:FE:7C:65:D3
Certificate issuer:       /CN=9a5b5033-d8da-42ef-92ee-144938eb4535
Certificate serial:       010D0C9F432858376468921E36C6F63DD6DCEC40
Authority key identifier: 61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/8629c981-dfc9-3314-b087-95db1c2cdf15.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     30174
IP address blocks:        68.70.32.0/20 maxlen: 24
                          162.220.128.0/22 maxlen: 24
                          162.251.40.0/22 maxlen: 24
                          162.255.28.0/22 maxlen: 24
                          192.76.4.0/23 maxlen: 24
                          209.203.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:64:68:92:1e:36:c6:f6:3d:d6:dc:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5b5033-d8da-42ef-92ee-144938eb4535
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=8e7ba2c2-4816-4d91-b4d0-ce61d24ec6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:e7:7a:b0:ac:36:2f:a9:8c:30:78:2d:6e:
                    bc:50:78:9f:8d:f1:db:2f:c8:63:46:14:cc:68:a0:
                    2b:8c:d7:36:b9:df:42:2c:9f:79:c3:9d:3d:1c:15:
                    06:cc:0a:00:be:b4:01:36:dc:c2:e9:55:bb:9d:51:
                    7c:50:5d:e7:4f:f8:5c:0a:c7:df:48:6f:c6:51:15:
                    97:5c:7f:7b:5c:25:ff:07:d7:55:7c:9f:8b:19:38:
                    e9:ec:0c:1b:b5:a4:cf:9a:f2:63:fd:31:1a:02:4d:
                    1a:1f:16:0a:a0:d1:3d:f5:6a:29:65:3b:0f:00:f5:
                    e8:4c:ff:18:2d:38:47:cc:b7:92:e1:3e:e3:ae:b9:
                    84:2e:75:3e:8f:56:b9:fc:7f:bd:77:61:68:66:54:
                    3e:14:11:25:dd:f3:86:0e:06:8e:c5:16:2d:fc:31:
                    c0:a2:54:28:ec:25:49:70:2a:56:d4:32:26:5b:37:
                    6b:6f:2b:93:9d:ed:4e:d3:18:b5:52:63:ad:18:25:
                    b3:e8:59:1a:0f:7e:9d:96:3f:15:7c:ca:71:13:7d:
                    c7:3e:5a:7d:ca:02:bc:36:97:e7:ca:eb:c7:90:68:
                    e8:ec:80:90:ab:e8:21:c7:a9:ca:5f:10:71:3f:e2:
                    18:16:c6:a3:6c:d5:6c:18:7a:42:96:9a:65:0c:b6:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:53:A9:40:EF:63:69:53:94:F6:51:E7:F1:B4:8D:FE:7C:65:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/8629c981-dfc9-3314-b087-95db1c2cdf15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl

            X509v3 Authority Key Identifier:
                keyid:61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.32.0/20
                  162.220.128.0/22
                  162.251.40.0/22
                  162.255.28.0/22
                  192.76.4.0/23
                  209.203.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:30:87:79:c5:15:c1:9b:fe:74:51:76:26:a6:b9:14:b8:f3:
         3b:6a:fc:79:52:01:94:ac:08:93:19:57:f7:95:72:24:b8:bc:
         16:a9:0a:fe:23:b8:09:32:e7:00:01:db:15:be:3a:6a:a9:2c:
         5e:a9:7e:d5:4d:18:93:5e:5f:df:13:93:a6:6b:88:91:7d:3e:
         c3:26:58:4d:5a:a6:4e:5d:b0:22:a6:bb:9e:9b:05:0a:32:3f:
         f2:5d:08:af:b9:ec:cd:7b:f3:ef:ca:97:d9:bc:8e:9e:2f:a2:
         87:c8:36:78:d3:6a:19:5e:06:a4:7a:78:09:a1:14:1a:42:29:
         11:74:26:b6:2a:8e:cf:6e:64:66:fb:b9:6d:a3:5d:d0:2d:b8:
         1d:61:8e:a9:54:9e:f1:9b:32:36:36:af:95:61:2d:75:cc:5e:
         57:a8:86:43:4a:bf:16:ee:31:0f:3f:cb:25:3e:66:60:2d:e7:
         ca:de:3f:66:6b:e1:fe:6f:74:3e:d7:1b:6f:74:39:bb:9e:6d:
         25:97:98:55:1b:ea:e9:7f:aa:82:65:a3:6c:0a:29:91:74:c2:
         b4:5a:3c:46:1e:24:6d:d2:b8:33:e5:57:76:a1:b7:25:95:e0:
         bc:06:d7:61:8e:40:1a:f9:8a:8c:7b:a4:f3:c3:2e:a3:39:f5:
         5f:56:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:57 2024 by rpki-client on console-fra.rpki-client.org