Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/c9ec97d6-c23a-3697-b0af-03f6d46cd45a.roa
File:                     c9ec97d6-c23a-3697-b0af-03f6d46cd45a.roa (raw, json)
Hash identifier:          rfnjPXlVQp0kghDLRULfFs7hJ80eDTP685Jb86Nh+kE=
Subject key identifier:   7A:CB:75:83:47:2E:5B:BA:1D:C9:C4:AB:08:4B:36:4F:25:09:B0:6F
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328576D51CC73C042CFC1737D541480
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/c9ec97d6-c23a-3697-b0af-03f6d46cd45a.roa
Signing time:             Thu 23 Jul 2020 20:18:49 +0000
ROA not before:           Wed 22 Jul 2020 04:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     46595
IP address blocks:        104.37.76.0/23 maxlen: 24
                          104.37.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:7d:54:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: Jul 22 04:00:00 2020 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=67645eef-06de-4076-8528-c31653e3f754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:3d:1c:47:31:90:8b:af:d1:41:bf:a3:69:
                    89:c2:9e:7c:40:8c:64:11:a9:c2:b6:f1:66:df:d4:
                    ee:cb:74:a3:a9:7b:99:d6:9b:4d:cb:c9:cb:f0:b9:
                    a8:65:2a:0e:78:4a:53:b2:02:2b:53:02:ce:b8:7a:
                    53:16:c7:77:06:18:45:08:69:99:b9:0a:ac:ea:b5:
                    94:93:75:3e:aa:48:67:20:71:6c:f6:ad:7f:2f:2a:
                    23:ed:c2:ef:42:d5:7f:d3:d1:8e:c8:2b:0f:34:3c:
                    4a:53:62:5c:25:8c:88:9b:dc:12:5d:99:a2:b6:31:
                    84:47:c9:a8:33:01:24:c0:63:0b:34:d4:ce:b7:73:
                    fa:5a:94:61:9e:53:f4:8c:4a:57:cf:4a:9b:a8:3d:
                    3d:62:17:ea:3f:1d:c6:56:ee:a2:98:1c:01:b4:bf:
                    8a:c1:04:2a:3c:0b:20:70:87:52:28:17:d0:94:9c:
                    9a:20:1e:55:5f:20:f5:75:18:36:a6:c7:ae:d6:77:
                    98:ba:bf:8b:fc:be:f6:2d:68:eb:52:5b:39:c8:91:
                    d4:f2:38:27:c8:61:42:9b:9d:9a:84:56:e3:9d:d3:
                    1d:ce:69:c1:a6:93:72:06:dc:af:03:45:d1:79:da:
                    ce:2c:be:81:f5:26:1d:e7:87:ef:05:94:8e:20:12:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:75:83:47:2E:5B:BA:1D:C9:C4:AB:08:4B:36:4F:25:09:B0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/c9ec97d6-c23a-3697-b0af-03f6d46cd45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.76.0-104.37.78.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:c8:40:f7:58:6d:89:cf:2e:b1:cb:e7:5f:42:d3:fc:41:
         a0:9a:44:da:35:54:3b:92:b9:15:18:c9:61:c1:eb:42:e4:78:
         6e:45:44:c5:bf:6a:88:b7:d8:d8:f5:33:e8:33:9d:7a:d3:50:
         6d:75:6e:ff:3f:73:65:15:7a:64:b1:f2:66:8f:fe:99:bd:a2:
         9c:8f:d8:c9:e8:e3:b8:f5:cb:d3:04:22:87:1e:a9:62:c2:dd:
         a0:59:db:db:d8:dd:df:18:af:1b:e6:fa:33:36:35:95:cd:52:
         1a:15:89:7a:29:a1:9b:49:e6:8a:bd:78:2d:0a:70:9e:fb:41:
         3c:b4:5a:b2:68:45:30:28:1e:62:8f:63:e4:bb:3c:9e:74:e4:
         79:56:44:fa:0a:b2:ee:56:d6:7e:97:f3:b5:ff:f6:03:3b:8c:
         e1:94:b3:f0:35:4a:0e:38:71:be:f0:7d:21:cb:80:0f:5c:ff:
         c3:01:d8:f2:c5:a8:33:de:b3:4a:65:32:7e:89:fc:9b:f6:43:
         b1:97:bb:0e:2c:88:bf:94:14:57:59:12:a2:d2:91:c8:61:0e:
         bd:50:60:41:8f:7a:ee:37:e5:bd:cd:85:71:4d:f4:27:49:78:
         8f:52:ef:4d:37:21:d4:47:bc:96:46:41:22:10:c7:4b:a2:11:
         0d:ed:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:21 2023 by rpki-client on console-fra.rpki-client.org