Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/8989e94f-02be-33b7-854a-f7b33d57b99d.roa
File:                     8989e94f-02be-33b7-854a-f7b33d57b99d.roa (raw, json)
Hash identifier:          GjPoPdnMZvCMp8jDIxe7Zu3/NcrR6rfDgcT0gK1NMBQ=
Subject key identifier:   95:70:02:96:40:68:B4:2E:08:CC:DE:2F:87:DE:20:33:8E:0B:31:94
Certificate issuer:       /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
Certificate serial:       010D0C9F4328576D51CC73C042CFC172808BF30D
Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/8989e94f-02be-33b7-854a-f7b33d57b99d.roa
Signing time:             Thu 04 Jun 2020 18:15:54 +0000
ROA not before:           Thu 04 Jun 2020 04:00:00 +0000
ROA not after:            Sat 04 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        135.84.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:80:8b:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
        Validity
            Not Before: Jun  4 04:00:00 2020 GMT
            Not After : Jun  4 04:00:00 2022 GMT
        Subject: CN=fe4cd4fc-92a1-44be-92a1-2c5de688a2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:25:d2:d6:0b:79:1e:3a:92:97:5a:59:f8:
                    8a:0a:e5:a6:4f:47:b3:63:c2:75:74:40:72:f8:72:
                    1a:57:f1:b3:4a:70:d6:88:a7:3f:53:a1:d8:a5:81:
                    47:7e:c2:b3:c5:95:37:d1:95:9b:a4:7f:01:12:78:
                    34:d2:43:55:1f:e4:18:c5:5e:34:39:c4:37:51:4b:
                    ea:d4:c7:8b:1b:6e:74:cf:08:e3:af:6d:2d:eb:f0:
                    17:16:39:a8:2f:48:3e:6c:1e:9b:04:f0:35:89:dc:
                    6c:ba:f4:0f:55:62:3a:cb:69:46:e3:11:04:8f:e0:
                    3c:d1:f3:c6:d6:c3:f5:b3:f2:7e:c7:40:70:11:8e:
                    b1:40:13:1c:57:a0:4c:b4:80:45:85:52:61:4c:c2:
                    33:39:c4:75:26:01:d0:d1:57:be:eb:57:c3:85:e0:
                    f3:34:02:5e:eb:7d:93:c2:ee:16:00:67:83:67:30:
                    80:4c:b5:92:52:8c:e0:ef:cb:75:9a:87:78:2d:74:
                    4a:fb:ed:8f:ce:8c:a4:e2:9e:c5:99:39:29:6f:37:
                    d8:c7:a7:27:83:c3:8d:c3:fe:39:39:6f:90:55:ca:
                    df:e5:87:19:e3:29:a2:ae:c6:9f:59:ff:fb:d6:46:
                    1a:b1:de:db:0f:17:80:0c:39:5c:f8:24:bc:e5:55:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:70:02:96:40:68:B4:2E:08:CC:DE:2F:87:DE:20:33:8E:0B:31:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/8989e94f-02be-33b7-854a-f7b33d57b99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl

            X509v3 Authority Key Identifier:
                keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:de:12:72:96:3a:8a:4c:9f:6e:bc:ff:3c:06:8a:cc:f1:
         d7:d8:1d:e3:b8:60:a4:33:87:2e:f4:4d:10:b5:97:91:7f:cc:
         c6:0a:a4:33:fa:ce:2b:78:f8:29:17:7c:2f:6e:29:a0:58:96:
         c0:e2:b0:d5:15:38:be:7c:4a:83:eb:6f:d3:2a:5e:d9:9d:26:
         0b:91:51:3d:25:b2:8f:8d:05:f9:63:d5:32:2f:b9:0d:39:96:
         65:60:41:df:08:31:75:be:b8:b5:12:e1:94:93:9c:09:17:cc:
         9c:82:03:0c:90:99:4c:24:c8:3f:f0:0a:30:76:82:f0:85:3f:
         f4:c4:5e:68:86:a2:e2:55:1f:ba:8a:41:7b:9f:88:90:45:ce:
         80:bb:dc:a1:ec:b7:43:43:b9:4c:00:30:00:c7:ff:51:6a:e6:
         89:40:bb:0c:b6:03:47:c3:94:15:03:8b:3d:86:0f:51:a6:31:
         c7:1d:c2:7a:69:44:27:9a:93:a6:d2:b1:ea:8e:61:59:1e:f2:
         2c:6e:40:88:c9:23:84:6b:e2:bd:a3:c4:35:cf:f7:18:f8:89:
         99:61:88:3e:cc:9d:c6:de:ed:79:8f:3e:53:d4:5a:3c:e9:40:
         08:56:99:89:8e:eb:68:a1:42:6d:54:2a:37:0f:43:b8:55:5b:
         c4:9a:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org