Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4ab3fe22-19f1-3dd4-a4b6-714999b9311e.roa
File:                     4ab3fe22-19f1-3dd4-a4b6-714999b9311e.roa (raw, json)
Hash identifier:          tXwGLpatLYU5CoA3DSF8rMZMjqbSzgF3GrmB6hheiqk=
Subject key identifier:   EF:81:1F:B5:DA:4A:F4:92:31:20:75:DA:8F:BD:0C:57:5D:28:9A:E2
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328583CB3A985B4ABC3415C91CB21C0
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4ab3fe22-19f1-3dd4-a4b6-714999b9311e.roa
Signing time:             Fri 13 Nov 2020 05:00:00 +0000
ROA not before:           Fri 13 Nov 2020 05:00:00 +0000
ROA not after:            Sun 28 Apr 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        23.153.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b3:a9:85:b4:ab:c3:41:5c:91:cb:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov 13 05:00:00 2020 GMT
            Not After : Apr 28 04:00:00 2024 GMT
        Subject: CN=47df289b-3c2c-4fff-8529-e60342d7b60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:1e:c9:84:50:2d:82:e4:15:6f:8e:e6:23:
                    a5:16:35:f9:65:85:19:55:d3:41:e0:1f:d0:58:03:
                    1a:8d:9e:c1:f2:26:a7:e2:b1:57:cb:8d:6f:65:23:
                    ac:44:7b:c6:53:7f:fc:3c:f6:59:dc:d2:8b:d1:0f:
                    30:8b:86:af:e3:de:f5:c5:d5:ea:bd:7f:be:60:13:
                    4d:69:08:32:38:1c:ca:bd:08:89:82:61:4a:bd:ca:
                    36:c9:dd:dd:b0:6a:6e:9b:65:2e:a1:ae:3e:04:03:
                    71:90:87:42:72:ef:b3:c4:2d:b4:ed:4b:06:42:a7:
                    a7:f7:c1:82:af:0f:4f:34:70:0c:14:3c:d8:d1:4e:
                    28:d7:5f:45:6b:0c:03:bc:a0:b0:8a:bb:ca:dc:2b:
                    53:54:7a:73:50:f9:7d:2f:66:f1:a9:cc:ba:13:0e:
                    18:35:9f:26:a9:27:9f:d2:b5:6f:7e:e2:a4:4d:6d:
                    e2:56:1b:e8:d3:cc:14:e0:ce:fc:ec:8a:01:cd:87:
                    08:80:50:35:cf:d6:bd:64:16:d5:5a:dd:c9:f9:c5:
                    33:bd:b6:5b:9f:56:18:a3:78:bf:5b:f3:06:07:0a:
                    de:56:87:11:43:2c:13:26:19:37:bc:a3:48:8a:28:
                    ec:b9:c2:84:64:89:e5:72:e1:8c:be:e6:ed:d7:0d:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:1F:B5:DA:4A:F4:92:31:20:75:DA:8F:BD:0C:57:5D:28:9A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4ab3fe22-19f1-3dd4-a4b6-714999b9311e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:ce:e2:eb:42:3f:d4:eb:58:4c:d3:4f:58:26:83:39:69:
         a3:76:7f:5a:3f:b3:dd:c0:13:96:42:97:a4:4c:14:55:01:90:
         0b:46:1c:22:61:88:52:b9:a7:92:18:e6:3f:14:0a:f0:6d:f0:
         92:dc:4a:5a:58:f3:b9:49:d2:8d:dc:9e:56:10:5c:be:03:c5:
         63:d1:42:a1:d3:7a:8b:5d:b0:4f:3f:8d:a9:b4:1b:04:bf:f6:
         4d:3a:07:22:e5:f0:72:76:a2:ab:b3:75:e9:9e:81:62:75:fd:
         84:21:bf:9b:29:b5:d7:32:e8:45:f6:71:ae:02:b3:b4:e7:15:
         c7:5e:39:c4:dc:aa:25:55:e5:b1:3b:20:b0:73:09:64:05:7a:
         55:7b:ac:a2:ac:0c:73:95:96:9f:00:6a:f3:1a:91:e3:0f:08:
         34:96:87:12:90:b4:9e:3e:42:e7:66:4a:a0:78:58:51:7b:f4:
         33:01:5e:52:ac:03:aa:bc:dd:d4:44:0f:e9:6a:e0:13:6e:08:
         35:c8:e0:15:19:18:24:34:3f:8e:dc:4c:9f:c8:85:94:19:96:
         2b:f2:f2:d8:fb:88:8f:3e:17:0b:37:55:2a:d5:ad:98:c9:65:
         a1:3a:49:cf:d5:30:04:24:87:2a:11:b7:ed:96:fe:a4:58:50:
         af:74:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:09 2024 by rpki-client on console-ams.rpki-client.org