Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/80adbc50-6275-3acb-90a4-5f1619309984.roa
File:                     80adbc50-6275-3acb-90a4-5f1619309984.roa (raw, json)
Hash identifier:          DE/nKYTDROGZr6RN/GVYo+cDrlhsnsRzT4u7fpOU5fk=
Subject key identifier:   73:7A:C7:9A:77:71:6E:0C:BD:A5:45:0F:12:A1:B7:13:39:B1:0E:D6
Certificate issuer:       /CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
Certificate serial:       010D0C9F4328576D51CC73C042CFC17349E4B603
Authority key identifier: 00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/80adbc50-6275-3acb-90a4-5f1619309984.roa
Signing time:             Mon 13 Jul 2020 20:36:32 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     26271
IP address blocks:        207.241.128.0/20 maxlen: 24
                          64.25.192.0/20 maxlen: 24
                          107.161.128.0/20 maxlen: 24
                          107.181.192.0/19 maxlen: 24
                          162.250.24.0/21 maxlen: 24
                          162.249.112.0/22 maxlen: 24
                          138.229.32.0/19 maxlen: 24
                          2606:e400::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:e4:b6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=a2839516-994b-4bb7-95f1-af5765044c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:99:33:5f:81:c2:32:34:f3:96:39:38:fa:
                    6e:2d:56:0a:4f:50:c6:8d:68:dd:df:dd:47:84:17:
                    fe:c8:22:f1:7b:ac:7e:15:bc:28:41:8a:87:66:bb:
                    b1:99:9a:89:5f:4b:84:da:79:90:62:15:77:e1:0a:
                    b7:53:6a:77:c2:33:be:63:54:1b:97:48:30:c3:be:
                    24:c3:64:17:57:0c:58:ad:c9:52:f5:8b:51:bd:50:
                    ca:e5:9e:2b:88:d7:4a:46:cd:91:5d:7e:77:c1:2d:
                    e2:7b:65:b3:3c:0b:32:95:67:b4:a9:a4:97:51:59:
                    5e:c9:8e:71:ba:0a:03:a8:b4:e8:6e:bc:ba:77:03:
                    07:02:e2:65:52:45:de:f8:00:36:13:03:7e:95:e1:
                    03:a3:fa:61:21:67:22:65:9b:8a:b0:87:6d:63:dc:
                    ae:44:15:6f:b7:ba:3c:5d:c9:35:60:5c:0d:4d:cf:
                    98:ce:53:6e:b9:dc:b9:e8:81:ed:fc:e6:d6:e9:9e:
                    9e:9f:ae:9c:5b:78:11:56:ff:de:88:b2:fa:e5:67:
                    14:b0:5c:ae:aa:a6:a7:d9:82:2b:17:df:d2:97:d5:
                    6e:45:04:25:27:18:d6:47:66:a4:50:9e:2c:14:c9:
                    a8:7c:f5:15:1f:a8:5a:44:ea:45:9a:ef:0d:9b:7a:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7A:C7:9A:77:71:6E:0C:BD:A5:45:0F:12:A1:B7:13:39:B1:0E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/80adbc50-6275-3acb-90a4-5f1619309984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.crl

            X509v3 Authority Key Identifier:
                keyid:00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.192.0/20
                  107.161.128.0/20
                  107.181.192.0/19
                  138.229.32.0/19
                  162.249.112.0/22
                  162.250.24.0/21
                  207.241.128.0/20
                IPv6:
                  2606:e400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:a5:a1:3c:e0:04:23:2a:68:27:22:1c:b2:1a:8b:62:08:
         32:21:fa:5f:a5:18:0b:32:82:e3:2e:f9:fb:5d:a9:5b:22:58:
         ec:70:d5:27:27:47:55:f3:bf:da:57:04:93:7e:d8:3c:33:d9:
         db:03:6f:c7:3e:63:75:62:6c:1d:27:e2:a0:91:06:91:bf:ce:
         6d:ad:91:46:47:ea:cb:c2:ae:4f:db:2a:16:72:d1:4c:3a:82:
         95:36:c0:a8:e4:f4:72:5f:d4:ee:28:29:43:3e:01:49:fd:48:
         de:7b:75:4d:a1:01:2e:46:7b:00:00:07:e2:72:33:65:9b:84:
         80:6c:69:eb:1a:44:0f:51:8f:5b:91:ab:6d:19:9a:11:4c:f9:
         35:7c:7b:d0:c8:36:a9:99:da:09:05:1b:a8:92:1e:0d:77:59:
         84:84:a3:b7:97:91:10:95:ac:90:5a:fd:81:fa:1a:3e:63:50:
         a4:e0:8a:71:f8:0e:28:bc:2f:66:2c:f9:22:b7:df:c9:6e:6e:
         58:af:b7:cb:d0:e5:89:f6:3c:c2:4e:28:8a:35:1b:3c:47:3a:
         59:30:9f:2f:18:8c:19:46:39:fc:0b:e7:07:b7:2e:05:b4:e8:
         22:16:34:5a:2a:b1:f5:a7:d8:0b:19:d8:78:0b:0e:6b:61:4d:
         b7:f4:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:59 2024 by rpki-client on console-fra.rpki-client.org