Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/db7efd85-70e3-3d13-a353-1f3d48f7f836.roa
File:                     db7efd85-70e3-3d13-a353-1f3d48f7f836.roa (raw, json)
Hash identifier:          01DQdV3mZ4S0fxEvE6RPBvptiYt/MuWDR1xf4DANczY=
Subject key identifier:   D3:AB:30:7A:22:76:94:CB:19:48:15:A5:E8:1E:21:2B:34:D3:97:2A
Certificate issuer:       /CN=ae425633-e238-4a95-9c23-f41543ed4ad0
Certificate serial:       010D0C9F4328576D51CC73C042CFC1721A026010
Authority key identifier: FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/db7efd85-70e3-3d13-a353-1f3d48f7f836.roa
Signing time:             Fri 15 May 2020 20:24:22 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     10242
IP address blocks:        207.153.0.0/18 maxlen: 18
                          204.209.48.0/22 maxlen: 22
                          204.209.13.0/24 maxlen: 24
                          204.209.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:1a:02:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae425633-e238-4a95-9c23-f41543ed4ad0
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=20277e23-09e6-44e7-8dd7-93be55972b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:bf:35:ac:4b:4c:a0:83:20:53:aa:27:34:
                    04:a1:df:03:29:73:0a:e9:a4:1f:56:04:ee:98:2b:
                    ee:af:2c:cf:b1:e6:32:c8:3a:de:68:06:0a:01:d2:
                    6d:a2:57:f5:15:11:7f:89:04:aa:d3:68:2f:90:22:
                    36:6b:ff:43:cb:2e:76:eb:85:44:c1:34:b2:8b:fd:
                    21:58:a3:ef:cb:bd:01:71:29:00:b5:35:ec:d6:35:
                    ad:d5:bb:2c:6f:ee:e9:87:3d:f6:9a:49:c4:ee:b4:
                    a3:a7:77:67:83:32:91:58:95:2e:da:df:b9:bf:8a:
                    8b:e6:52:eb:fb:ed:77:f6:da:a3:93:19:05:fe:60:
                    26:9f:28:02:4a:42:26:80:d2:ab:5b:ea:c2:bd:ab:
                    74:eb:8b:b6:3a:9f:48:2f:37:63:a3:95:46:4f:4f:
                    df:02:42:cb:47:ec:73:10:d7:2e:7a:f3:d5:8c:a1:
                    de:5e:9f:4e:c7:ac:41:49:11:3e:39:81:88:97:35:
                    cd:a7:97:49:02:4d:e5:cd:f9:14:bb:1f:41:a3:0e:
                    6f:56:3d:03:a9:b2:5b:7e:be:89:b0:32:30:0d:ef:
                    08:72:8c:b8:7a:c8:53:ca:b0:f0:98:e4:c3:f9:e5:
                    04:96:e8:6d:d2:95:2b:6f:03:3c:48:ca:f4:76:84:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:30:7A:22:76:94:CB:19:48:15:A5:E8:1E:21:2B:34:D3:97:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/db7efd85-70e3-3d13-a353-1f3d48f7f836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.crl

            X509v3 Authority Key Identifier:
                keyid:FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.13.0-204.209.15.255
                  204.209.48.0/22
                  207.153.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:9e:ab:5f:9c:75:c7:b9:b6:88:d2:92:d5:ed:3d:c0:ff:c6:
         a1:26:c4:3c:c9:14:05:cb:ce:de:82:a6:4c:7a:6c:b7:de:43:
         28:19:86:f5:87:28:68:b9:04:23:19:1c:c2:c7:a3:de:43:75:
         c1:37:8c:b8:f2:32:83:73:c9:3a:8b:3d:74:db:ef:b1:ec:bc:
         24:a7:a5:23:1f:15:05:20:84:51:41:f9:ca:58:e1:2f:67:cd:
         54:df:02:60:ad:31:1d:c9:11:43:d7:e6:ef:e7:07:3c:5d:a6:
         13:c8:a8:34:d2:a4:ea:e3:fa:d3:2b:a7:07:c7:85:81:36:be:
         0c:20:14:84:96:be:25:60:d1:d5:2d:46:a8:5c:0d:c7:7f:e3:
         4b:df:06:5a:4e:26:0e:f7:1d:58:5c:b8:30:46:c8:38:a6:16:
         a0:a6:8b:85:ad:b4:8c:7f:a5:22:0d:bf:8d:da:81:94:5a:e4:
         29:2d:37:ce:40:c3:c5:07:40:0d:a7:9e:02:90:04:04:b0:d8:
         cf:b7:99:37:a2:7a:74:94:1d:73:5d:2f:da:49:ec:ac:02:28:
         cc:86:13:6a:de:4d:e1:1a:3a:f8:61:ae:40:c2:2a:9f:0a:98:
         df:5a:4b:88:11:ef:12:83:1c:9a:5e:82:cb:1e:e3:a8:bc:56:
         5a:9a:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:21 2023 by rpki-client on console-fra.rpki-client.org