Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/a0648596-5d01-380b-8fe0-d0f959aa41fe.roa
File:                     a0648596-5d01-380b-8fe0-d0f959aa41fe.roa (raw, json)
Hash identifier:          lb9fchbpJmHFIXyTiSGERqRa4JjNPSdLe2EOGsHXoeg=
Subject key identifier:   06:69:52:67:2D:1E:3E:00:7F:B8:07:3A:55:15:CE:B1:38:EC:7A:DE
Certificate issuer:       /CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
Certificate serial:       010D0C9F4328576D51CC73C042CFC17374BE81C1
Authority key identifier: C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/a0648596-5d01-380b-8fe0-d0f959aa41fe.roa
Signing time:             Wed 22 Jul 2020 04:18:28 +0000
ROA not before:           Tue 21 Jul 2020 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.90.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:74:be:81:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
        Validity
            Not Before: Jul 21 04:00:00 2020 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=5fd10d1b-b1ee-4edc-8770-26b0ea7bc278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:6e:c0:5a:d3:25:cc:e2:79:a6:db:9d:e9:
                    d6:b9:e7:d6:d0:29:58:7c:e8:ee:3b:fe:61:31:b3:
                    59:b6:f7:67:de:3d:66:d1:9d:89:4c:33:bf:a5:f0:
                    36:b5:7c:ef:fa:4a:f0:3b:d3:7a:8b:51:c2:34:ce:
                    c5:06:f3:56:5b:8d:b8:0f:be:65:37:7a:90:04:7c:
                    23:e3:5d:a9:38:c1:66:99:63:91:ed:0c:a3:4b:bb:
                    49:dc:be:c0:f4:2d:fb:8a:22:52:25:b1:c1:7e:2f:
                    0e:d6:66:ff:fc:3d:2b:51:ba:7f:35:59:7c:d0:1c:
                    69:93:1c:12:dc:23:6a:4d:2c:df:8d:ec:78:83:ec:
                    56:ef:c0:ec:1a:fe:e7:95:2b:ee:e4:15:95:9f:6a:
                    8c:df:26:9b:47:26:06:c6:39:2d:39:f6:9d:64:c6:
                    24:c9:71:1b:a8:92:47:e2:b7:99:77:11:ba:74:c5:
                    b9:7d:46:1b:02:bc:06:50:ab:d1:69:ff:96:ba:07:
                    c2:5d:52:ea:3f:b2:5e:eb:c2:b3:1b:6b:8e:49:29:
                    9e:45:d5:21:5a:83:58:be:05:7b:a2:97:85:97:7e:
                    b2:cf:69:58:28:a3:9b:6a:ea:f2:1b:f9:6b:bc:7d:
                    47:89:cc:14:96:95:61:ca:8b:c4:87:60:74:cf:a7:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:52:67:2D:1E:3E:00:7F:B8:07:3A:55:15:CE:B1:38:EC:7A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/a0648596-5d01-380b-8fe0-d0f959aa41fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl

            X509v3 Authority Key Identifier:
                keyid:C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:62:90:30:e9:a2:74:a5:5c:c5:1a:8d:4d:de:28:32:b0:
         61:9c:8e:8c:01:4f:28:b6:3a:3e:76:02:b3:0c:3e:7b:1f:4e:
         bf:9d:89:fb:50:25:46:50:d3:ea:eb:de:a0:58:4f:87:73:d0:
         0a:3e:d2:78:fd:9f:1f:96:c8:73:14:65:8c:68:7e:a8:d7:90:
         b7:01:ae:95:24:08:02:10:77:98:a4:9a:a6:ac:74:4c:9a:28:
         9c:d6:10:ad:91:b8:b8:60:f5:57:8b:c6:c8:0c:1b:3b:c5:0a:
         e6:0e:19:7b:e4:e1:0d:e6:3a:13:ec:cc:97:4c:94:4b:11:29:
         be:cf:ec:75:c5:e3:68:53:2c:d6:b2:01:e0:5c:93:9d:ce:5d:
         15:82:d9:0b:a7:ee:d9:f8:0e:d4:24:1c:15:b8:cb:e9:f4:d0:
         68:fa:e2:6c:07:fe:7c:90:1e:8a:79:c2:64:1c:7a:24:70:8b:
         27:cb:7b:31:07:0f:3e:ce:5a:0c:b0:b7:70:94:d7:d6:e9:64:
         4c:cf:f1:88:77:f1:d0:3a:61:9a:30:89:99:b5:19:df:a6:de:
         20:8a:20:12:85:97:e3:04:75:42:aa:5e:52:98:35:98:12:e2:
         8f:03:13:38:a7:7b:42:fa:f4:1d:d8:fe:00:3d:54:e3:16:0a:
         f9:3a:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:02 2024 by rpki-client on console-fra.rpki-client.org