Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/08e6021a-ff01-3ad4-9c43-41f469a0f363.roa
File:                     08e6021a-ff01-3ad4-9c43-41f469a0f363.roa (raw, json)
Hash identifier:          5fNrgi1PyiHmErCcwoS9oixtLz72EC6LF4wHEeMeF7I=
Subject key identifier:   A8:4D:A5:33:08:A2:FA:FA:72:0A:EA:BC:8A:E3:0D:12:3A:8D:AB:D9
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285842A6A64295224BE1B80BDD1100
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/08e6021a-ff01-3ad4-9c43-41f469a0f363.roa
Signing time:             Mon 24 Jul 2023 08:04:26 +0000
ROA not before:           Mon 24 Jul 2023 08:04:26 +0000
ROA not after:            Sun 22 Oct 2023 08:04:26 +0000
asID:                     208485
IP address blocks:        103.251.25.0/24 maxlen: 24
                          103.216.0.0/24 maxlen: 24
                          103.251.26.0/24 maxlen: 24
                          139.5.20.0/24 maxlen: 24
                          103.216.2.0/24 maxlen: 24
                          103.228.85.0/24 maxlen: 24
                          137.59.63.0/24 maxlen: 24
                          103.228.87.0/24 maxlen: 24
                          137.59.62.0/24 maxlen: 24
                          103.207.45.0/24 maxlen: 24
                          103.207.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a6:a6:42:95:22:4b:e1:b8:0b:dd:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jul 24 08:04:26 2023 GMT
            Not After : Oct 22 08:04:26 2023 GMT
        Subject: CN=80394549-e255-40cf-8b22-e983e0526dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:04:96:e6:3b:99:80:07:79:a8:16:7a:ac:
                    63:c2:0c:be:43:50:34:b3:d8:00:e4:f3:2b:d8:a7:
                    19:e5:33:23:a9:9b:85:ef:67:29:4e:ca:e9:d4:1e:
                    75:83:4d:a2:d8:c9:a7:0f:c4:50:b6:70:06:8d:ed:
                    6e:6b:5f:a0:26:4d:a0:99:ec:fb:ac:65:fc:82:ab:
                    e9:b4:b8:67:60:b0:60:3b:0b:96:4b:6c:c8:a2:5b:
                    f1:50:45:fd:93:7b:5d:49:ed:8f:72:90:a4:f4:64:
                    c4:1f:aa:e1:d2:67:9e:0c:44:d3:55:1a:a0:e2:89:
                    52:b0:d9:89:48:ab:dd:2b:de:5c:8f:26:52:09:5c:
                    e6:23:e6:a3:19:bd:80:ba:88:c1:35:f6:0c:df:fe:
                    ad:58:57:33:95:b5:94:7a:eb:73:1c:1f:2b:dc:f6:
                    d9:7e:14:a4:4b:5d:73:76:1e:1b:6d:44:e4:20:3b:
                    17:9d:bb:c6:d1:f2:fc:69:00:68:ba:a8:50:86:c8:
                    81:94:5b:35:bb:e7:de:73:90:b0:6e:df:5b:db:52:
                    41:8b:e5:b5:c0:11:47:35:4a:88:87:c9:11:c2:0b:
                    f4:cb:02:4f:eb:fc:c5:72:1e:ec:db:7d:52:e4:6a:
                    67:73:19:99:02:96:be:42:01:0d:43:01:88:2e:94:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:A5:33:08:A2:FA:FA:72:0A:EA:BC:8A:E3:0D:12:3A:8D:AB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/08e6021a-ff01-3ad4-9c43-41f469a0f363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.45.0-103.207.46.255
                  103.216.0.0/24
                  103.216.2.0/24
                  103.228.85.0/24
                  103.228.87.0/24
                  103.251.25.0-103.251.26.255
                  137.59.62.0/23
                  139.5.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:5e:b8:a0:bb:a1:ed:49:1a:2e:78:04:c1:50:b1:91:72:
         02:f3:c2:83:be:fe:0f:f7:f0:c8:13:70:73:16:25:f8:30:1a:
         e3:88:d3:73:e2:a5:ef:94:49:0d:dd:85:34:16:99:12:df:a1:
         99:cc:3a:b7:9e:0d:ea:50:59:3c:7f:c5:e9:4c:93:15:b5:99:
         38:0e:9c:50:69:0d:96:e1:6b:19:af:b5:b8:97:d0:94:92:7e:
         a8:f6:89:b6:5e:48:ab:7f:22:95:03:69:48:cd:aa:62:03:c4:
         86:af:0f:1c:ed:e3:d4:35:08:38:ed:a9:bb:29:fc:21:67:81:
         a0:f0:c9:97:3b:7e:cd:e6:e0:88:cb:63:25:7e:c3:eb:9f:75:
         77:c5:e1:66:c1:d1:43:ef:22:c6:9b:42:a3:4e:a3:03:3b:66:
         ed:e8:e4:a3:da:2e:21:01:71:73:43:18:22:3c:f6:17:8c:0b:
         74:fc:5f:8c:e7:c4:8f:af:d7:de:0f:97:41:e1:36:37:eb:38:
         e5:3d:3b:48:ba:48:f7:b0:b7:38:6a:12:3b:cd:ab:ec:84:bc:
         d4:14:07:cd:dd:67:df:ae:64:aa:85:c2:4c:98:8c:7b:73:a2:
         6c:04:2e:cf:79:9f:4e:f4:0b:24:81:94:bb:52:ba:d0:b8:15:
         d5:09:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:23 2024 by rpki-client on console-ams.rpki-client.org