Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/800d40f1-47c2-353c-88a5-778228362864.roa
File:                     800d40f1-47c2-353c-88a5-778228362864.roa (raw, json)
Hash identifier:          nOQFvJ/zumufCV4rK3/a8s9jGaCgtekh1iRdB0u/rEE=
Subject key identifier:   AD:5C:47:3E:7F:A5:C2:65:D8:81:F0:1E:4A:99:79:40:ED:F6:D2:38
Certificate issuer:       /CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
Certificate serial:       010D0C9F43285841FE52B5080815F6F94A391F00
Authority key identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/800d40f1-47c2-353c-88a5-778228362864.roa
Signing time:             Thu 25 May 2023 01:00:15 +0000
ROA not before:           Thu 25 May 2023 01:00:15 +0000
ROA not after:            Wed 23 Aug 2023 01:00:15 +0000
asID:                     3801
IP address blocks:        74.214.176.0/20 maxlen: 24
                          69.176.0.0/19 maxlen: 24
                          76.8.160.0/19 maxlen: 24
                          204.68.227.0/24 maxlen: 24
                          204.68.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fe:52:b5:08:08:15:f6:f9:4a:39:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
        Validity
            Not Before: May 25 01:00:15 2023 GMT
            Not After : Aug 23 01:00:15 2023 GMT
        Subject: CN=32bde1fd-dc7e-4db2-900a-f2cd8fc319f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:a6:c3:ed:48:da:b5:f6:30:6d:a2:10:31:
                    8b:80:06:ef:d2:51:d9:d8:a2:ed:5f:87:66:bf:22:
                    8c:de:af:74:73:86:95:00:02:ab:91:23:ae:96:e7:
                    09:f6:98:a4:24:f9:8e:1d:1f:57:70:a5:b0:6f:53:
                    ba:20:e8:d0:03:b6:b9:b7:7b:37:cc:b5:c9:37:82:
                    e3:fd:a5:99:55:2a:29:7a:45:e9:88:22:23:c9:ea:
                    1e:43:46:e1:64:2a:15:e3:e3:40:b4:8c:95:e8:b4:
                    ba:82:9e:84:46:38:56:7a:77:e7:bf:53:e3:9e:a1:
                    7e:6f:bd:15:b6:ae:21:db:83:9b:3f:ce:33:b7:88:
                    07:3d:02:d6:ed:84:47:dc:04:f2:5c:e2:89:9a:ff:
                    56:9b:80:81:5c:f4:d5:1e:58:37:dc:85:81:c7:39:
                    c2:9a:20:eb:71:ff:71:90:4f:1c:ba:42:4e:48:1b:
                    ac:4c:7b:a7:72:e2:c0:d9:7e:19:be:bf:ad:70:36:
                    bb:3b:2d:1f:cf:2f:c6:d3:56:4f:8b:ae:76:64:8b:
                    bc:3d:a0:39:60:9e:01:4c:0c:f8:4a:73:96:4c:86:
                    69:5d:87:22:f1:b0:e1:1f:79:19:c2:98:d5:2b:66:
                    61:0a:ce:48:1c:bf:fe:87:ce:8c:54:df:e7:76:c2:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:47:3E:7F:A5:C2:65:D8:81:F0:1E:4A:99:79:40:ED:F6:D2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/800d40f1-47c2-353c-88a5-778228362864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.0.0/19
                  74.214.176.0/20
                  76.8.160.0/19
                  204.68.227.0-204.68.228.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:87:33:11:cc:ea:a5:68:be:cd:49:62:80:96:67:15:52:b4:
         70:1c:13:6f:5e:b5:2b:08:1f:9c:de:0e:03:8a:90:5a:7d:fc:
         a2:f5:61:78:c5:da:c9:8f:9e:cd:41:b6:e3:d9:8a:66:d7:e4:
         a6:0a:c2:d7:2e:04:1d:2d:aa:5a:d9:ea:9f:83:f3:1e:a1:f0:
         8f:c6:d2:df:19:52:ef:0d:bd:fb:79:69:bc:0b:4e:2d:7c:c1:
         97:22:a2:3a:d3:ec:5c:59:12:d1:e2:17:8a:e5:1c:a0:f2:6b:
         d2:8d:75:64:6c:81:f5:2d:cd:4d:bf:49:68:58:5b:36:62:bb:
         2d:41:12:3b:1f:35:ab:24:a7:79:17:ff:78:5e:0a:9e:ec:57:
         08:c2:cd:3a:5d:0d:14:2e:5b:d7:2c:2a:68:30:28:de:ac:cc:
         11:7b:a3:d2:51:3a:87:a2:95:23:fc:e5:60:87:b0:6f:99:cd:
         8d:fa:06:e8:ca:a2:69:65:3b:96:4f:27:63:ee:7a:c0:cd:91:
         b9:68:d2:0e:be:97:21:2d:d3:12:5b:16:b1:5c:86:96:46:74:
         3e:8a:c4:3d:7c:9b:2f:8b:c0:a9:a7:b6:3e:62:ff:4b:99:7a:
         65:4f:a2:15:07:9d:e4:f9:ec:14:b6:1b:36:44:91:2a:c0:15:
         83:26:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org