Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/76f0bebe-4b07-339e-a9a1-abb1ee0eb6dc.roa
File:                     76f0bebe-4b07-339e-a9a1-abb1ee0eb6dc.roa (raw, json)
Hash identifier:          1DhQGRHYVswR4sy0A7rRTg82KOMgn7EMYdkS/vd/s2o=
Subject key identifier:   6F:AF:F6:11:B8:60:DF:F3:10:EE:12:E4:62:F8:AC:B2:5D:BA:F2:9F
Certificate issuer:       /CN=2085ad50-174f-4646-80aa-6de9c61a11a4
Certificate serial:       010D0C9F432858388406910C0920969F6DB93580
Authority key identifier: 37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/76f0bebe-4b07-339e-a9a1-abb1ee0eb6dc.roa
Signing time:             Thu 26 Sep 2019 04:00:00 +0000
ROA not before:           Thu 26 Sep 2019 04:00:00 +0000
ROA not after:            Mon 10 Apr 2023 04:00:00 +0000
asID:                     208188
IP address blocks:        104.167.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:84:06:91:0c:09:20:96:9f:6d:b9:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ad50-174f-4646-80aa-6de9c61a11a4
        Validity
            Not Before: Sep 26 04:00:00 2019 GMT
            Not After : Apr 10 04:00:00 2023 GMT
        Subject: CN=ddee53f2-26e2-4c4f-9e5b-0a897de12f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:6d:9d:d9:4b:be:cd:7d:ca:a3:ed:2e:d4:
                    bc:20:8c:b5:6e:eb:80:ba:b1:ad:95:e7:02:ca:8d:
                    96:ed:57:23:86:0d:40:b1:e4:8c:a9:cd:f4:1a:e8:
                    86:2b:fe:f1:a7:b5:8f:0f:1f:6a:b6:89:0d:a2:f1:
                    b4:9f:c9:60:3c:34:5f:07:08:ee:eb:ff:f7:20:de:
                    68:dc:10:99:11:d1:94:49:bd:b1:d2:c6:8b:62:2e:
                    d6:e2:9a:e3:5f:fb:f1:d6:01:7d:eb:fd:5d:5c:62:
                    19:e0:f3:9a:69:7e:11:0a:41:de:43:91:01:aa:92:
                    e2:c2:07:73:e3:f5:80:c7:44:50:3f:ee:25:88:19:
                    4f:96:bb:e2:88:00:59:03:23:68:29:d2:b3:af:8a:
                    bc:46:f9:d1:af:37:90:ab:21:d0:1a:5b:ba:ea:68:
                    87:a6:2c:dc:c7:39:1c:46:29:cf:98:8c:ef:9f:4a:
                    2e:5c:15:e8:7e:e5:fa:51:7c:2b:ee:30:25:50:75:
                    24:0d:a1:16:8a:b2:48:d6:de:31:fb:12:e5:59:df:
                    e6:41:6d:c1:5d:7f:46:44:c8:65:ef:e6:cb:a9:fe:
                    78:0a:3a:8d:f9:99:0d:f2:99:e3:f5:60:6d:d5:7e:
                    66:cb:20:15:6f:17:2e:12:2c:b9:0e:71:c5:14:9e:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:F6:11:B8:60:DF:F3:10:EE:12:E4:62:F8:AC:B2:5D:BA:F2:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/76f0bebe-4b07-339e-a9a1-abb1ee0eb6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl

            X509v3 Authority Key Identifier:
                keyid:37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:95:27:38:f6:d2:ed:91:50:98:bf:58:1a:fc:2d:9b:d5:47:
         c0:e2:b2:c8:55:85:21:d6:4d:71:26:35:67:4e:25:dc:5c:cc:
         de:59:c4:bd:4e:02:09:7f:1a:45:b9:3a:58:1a:dc:f4:6d:7b:
         9f:54:3d:57:56:87:68:f0:b9:c5:1c:9e:37:05:85:e0:ea:a0:
         d6:8a:71:0d:41:af:59:cf:46:87:35:52:46:1f:b4:6d:83:c5:
         99:fe:eb:01:b6:2f:2b:30:8c:20:42:70:8a:a1:06:0d:5e:77:
         00:03:a1:17:69:2c:ee:9b:02:45:cc:85:6a:28:9b:31:0b:19:
         68:70:2a:53:a3:43:06:90:a0:a4:cb:be:d6:40:9d:6d:5f:b4:
         b5:41:a7:cd:0e:e4:51:d2:bc:a7:33:b2:8b:47:5e:90:c5:01:
         39:f8:d2:72:ce:f3:cc:05:f0:40:9a:10:dc:35:d9:e0:8c:f1:
         c0:77:0c:1e:8f:2c:61:1c:03:2a:8a:b5:09:8d:ba:76:40:e8:
         d0:ba:b7:4b:46:3c:45:6d:2d:37:c4:5a:6d:11:3f:0d:62:ea:
         9b:46:d3:c5:00:1a:03:1b:ed:16:07:11:32:ec:75:c3:4d:2d:
         67:e3:86:07:14:6e:a9:39:6d:a3:6c:81:14:9e:72:f7:7b:52:
         26:21:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org