Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/4952d273-93c2-3de2-b858-5c779dd1f61d.roa
File:                     4952d273-93c2-3de2-b858-5c779dd1f61d.roa (raw, json)
Hash identifier:          sGee4zzcCCIRPiiUAtfMSPxZgL4guV2dSwY34OuavJ8=
Subject key identifier:   43:C4:50:D2:3B:5C:C3:43:C1:63:97:64:71:61:40:A4:4B:E3:32:EE
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17409CBB514
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/4952d273-93c2-3de2-b858-5c779dd1f61d.roa
Signing time:             Mon 10 Aug 2020 04:00:00 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     20278
IP address blocks:        107.173.69.0/24 maxlen: 24
                          107.173.64.0/24 maxlen: 24
                          107.173.66.0/24 maxlen: 24
                          107.173.62.0/24 maxlen: 24
                          107.173.56.0/24 maxlen: 24
                          107.173.58.0/24 maxlen: 24
                          107.173.59.0/24 maxlen: 24
                          107.173.63.0/24 maxlen: 24
                          107.173.65.0/24 maxlen: 24
                          107.173.68.0/24 maxlen: 24
                          107.173.72.0/24 maxlen: 24
                          107.173.73.0/24 maxlen: 24
                          107.173.74.0/24 maxlen: 24
                          107.173.75.0/24 maxlen: 24
                          107.173.76.0/24 maxlen: 24
                          107.173.78.0/24 maxlen: 24
                          107.173.138.0/24 maxlen: 24
                          107.173.139.0/24 maxlen: 24
                          107.174.16.0/24 maxlen: 24
                          107.174.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:09:cb:b5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=83c4dc4d-4d0a-4215-9894-8b7339f2f440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:de:d7:26:90:d4:3c:53:e8:ff:8b:b5:eb:
                    d2:f3:76:ab:56:ad:70:8f:4b:b8:90:c4:e8:7e:e7:
                    8f:38:b4:58:4d:59:d4:82:a8:7f:97:8d:96:d5:13:
                    b0:40:20:93:7b:e4:9a:a2:87:d0:68:3f:a6:82:04:
                    ab:c2:bd:d9:ad:9d:0e:b9:aa:7d:fa:a5:34:5f:e5:
                    9f:23:97:9f:1c:d1:dc:50:25:aa:2a:b8:a9:b4:ca:
                    37:f2:a0:10:f2:27:db:12:f1:0a:eb:77:ac:c8:d1:
                    d7:1f:8e:0e:eb:d9:b2:d9:92:55:41:f9:d1:e4:5a:
                    0b:83:66:4b:f9:fc:0a:11:18:15:7e:13:d9:2f:34:
                    0f:a8:0b:f8:61:d5:a4:48:67:c0:fb:f7:87:ae:2f:
                    df:46:80:69:1b:e4:35:08:f1:cc:ab:76:1d:a9:7e:
                    1e:a7:7e:64:ef:45:ca:93:30:76:c7:4b:88:f9:01:
                    90:49:c2:6f:a9:64:04:ec:f8:03:6b:3a:c5:47:b3:
                    2d:62:ef:54:7e:54:43:56:c0:ab:96:35:fe:94:63:
                    ff:9e:12:9f:78:f5:bb:dc:e4:0a:93:60:d0:e3:8f:
                    65:80:4c:bc:0d:10:44:46:45:c8:76:bd:b5:ce:33:
                    22:2c:bb:b3:01:d6:47:99:ba:b6:b5:32:e9:b0:3b:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C4:50:D2:3B:5C:C3:43:C1:63:97:64:71:61:40:A4:4B:E3:32:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/4952d273-93c2-3de2-b858-5c779dd1f61d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.56.0/24
                  107.173.58.0/23
                  107.173.62.0-107.173.66.255
                  107.173.68.0/23
                  107.173.72.0-107.173.76.255
                  107.173.78.0/24
                  107.173.138.0/23
                  107.174.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:4e:cc:8b:7d:58:0c:25:a7:d1:10:c8:35:b5:53:76:65:
         94:1e:ae:66:66:ec:28:55:a5:fc:7a:e0:af:15:67:72:29:03:
         3d:81:13:03:04:41:76:51:f1:b1:7d:5d:72:67:40:39:55:9d:
         76:4f:f8:cf:d4:dc:78:27:2d:d3:bf:e1:76:8a:b6:08:50:67:
         ab:9b:1c:2b:8b:06:2c:29:69:77:e6:e7:88:f8:97:6d:30:b4:
         8f:c1:17:10:dc:b5:ba:ea:6f:6d:96:c7:75:a1:ff:07:85:54:
         6a:50:84:07:ed:4b:85:5e:ba:05:70:cb:a0:e6:3a:2e:e8:3c:
         e3:10:02:2a:4f:87:94:93:c7:12:cf:60:d6:29:33:c9:f2:3d:
         d8:65:6b:69:e5:48:c1:c4:80:ab:bd:a7:7b:82:db:38:25:2b:
         ff:df:ad:ce:97:57:52:65:5f:48:29:7f:a7:73:ba:b7:f2:ef:
         ca:d9:9b:b2:c0:cf:2d:0e:78:83:18:3a:36:af:07:ab:98:b3:
         c8:5b:c4:54:89:04:0b:49:cb:f6:ad:02:31:d9:a3:ca:0d:07:
         da:ab:5d:d1:80:fe:ad:9b:a9:17:25:30:86:f1:89:5e:b6:85:
         55:5b:7c:57:73:bb:3a:22:b5:96:ea:5c:cc:14:f2:21:16:28:
         05:32:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:23 2023 by rpki-client on console-fra.rpki-client.org