Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/e9a94d1c-2fc1-392e-af96-b2ac21bd4b2e.roa
File:                     e9a94d1c-2fc1-392e-af96-b2ac21bd4b2e.roa (raw, json)
Hash identifier:          EDizn6yn96zsRLLwEuqe96nQ/Yd434QoVgJmbxC63l8=
Subject key identifier:   7F:E2:EF:E1:56:7E:A0:54:A1:67:25:74:97:FD:4B:DF:0B:CF:EC:E8
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328583BF363E66BAC3B090FDF614580
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/e9a94d1c-2fc1-392e-af96-b2ac21bd4b2e.roa
Signing time:             Thu 20 Aug 2020 04:00:00 +0000
ROA not before:           Thu 20 Aug 2020 04:00:00 +0000
ROA not after:            Mon 19 Feb 2024 05:00:00 +0000
asID:                     19437
IP address blocks:        169.197.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:f3:63:e6:6b:ac:3b:09:0f:df:61:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Aug 20 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2024 GMT
        Subject: CN=19deb208-6e4b-4b50-a18a-67839e5d25d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:86:28:78:e8:d0:0c:83:61:31:99:eb:37:
                    7c:5a:5a:1a:8d:64:40:2f:b5:53:70:b4:2d:0c:a6:
                    c3:d4:7c:29:f0:3b:32:61:88:73:92:6a:7f:0f:c3:
                    f0:2a:2a:7b:c2:6c:17:54:49:be:b8:db:30:f9:cf:
                    86:1a:41:ab:f5:1f:66:f8:22:e5:c9:9c:d4:c2:14:
                    5a:2e:4f:52:de:48:fe:e7:d8:d5:57:3a:38:1f:66:
                    b4:40:ab:05:77:68:4a:0e:8a:be:cc:b9:42:af:bb:
                    de:d2:90:38:9b:c3:02:f4:52:c3:26:5e:7e:7e:24:
                    92:63:9c:c8:2e:b7:3f:c9:62:ec:f9:ea:13:ba:5c:
                    2f:79:fc:53:d5:fd:99:b5:c2:5d:fc:ba:71:42:e9:
                    9c:7f:31:05:6c:e0:a2:c9:cc:4c:58:25:4d:59:c1:
                    54:c6:5c:bc:8d:91:dc:d8:27:ed:f7:51:1f:97:b7:
                    81:db:65:01:6b:74:8c:ac:fc:ce:fa:61:ec:6f:a4:
                    90:f3:ee:29:3e:61:50:15:1f:cf:c4:8b:ae:ff:09:
                    f5:8e:c8:3c:d3:d2:b2:dd:6a:4b:65:a1:b1:11:a0:
                    f5:a0:89:00:09:cc:92:d1:cd:0d:d6:71:16:6a:9a:
                    71:54:68:bc:32:96:37:d9:4e:4d:fe:74:9a:8d:9a:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E2:EF:E1:56:7E:A0:54:A1:67:25:74:97:FD:4B:DF:0B:CF:EC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/e9a94d1c-2fc1-392e-af96-b2ac21bd4b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:64:a7:55:ce:18:3b:7c:45:97:c6:67:92:a6:af:c1:e6:a9:
         16:9e:58:87:5a:12:10:a8:7f:f7:03:98:73:24:b1:df:a4:c1:
         32:19:c5:14:85:9a:c7:5b:cd:1d:89:0b:f0:dc:6e:38:4f:ea:
         0a:e7:65:67:5f:68:92:47:df:9a:13:c0:32:ed:6e:b9:3a:07:
         90:04:8a:93:a8:e4:15:50:78:6b:c2:3b:6b:cf:37:20:73:62:
         d5:c1:f1:45:d2:dc:88:69:e1:63:2a:4e:28:ce:b5:e9:e9:2f:
         61:44:05:04:a3:e3:e3:df:49:3e:85:46:5c:b9:fb:86:64:70:
         a8:cb:77:65:25:85:af:26:fe:0a:20:c7:02:5d:79:b7:2e:3c:
         78:be:23:d2:8f:d9:e0:87:c5:d9:16:96:37:35:ac:01:2f:ea:
         b1:32:74:54:49:dc:48:86:e8:af:29:5f:bc:ea:da:46:09:6a:
         f6:be:b7:d0:50:18:84:6b:37:d5:b8:a0:d5:77:7a:75:1f:b3:
         67:c6:ae:fd:45:59:26:f8:d2:05:59:b9:9c:04:23:c7:98:4c:
         aa:c6:05:19:3c:85:97:c8:fb:67:37:00:d6:d4:bb:79:b5:bb:
         59:6c:0e:90:76:a7:cc:62:18:e0:c3:16:a4:74:70:2b:ef:fa:
         04:fc:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:58 2024 by rpki-client on console-fra.rpki-client.org