Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/f67a3f3b-dc84-3af8-8546-ad37911fa35c.roa
File:                     f67a3f3b-dc84-3af8-8546-ad37911fa35c.roa (raw, json)
Hash identifier:          z42xubWk9zZxwpR76BTCFPnFREqEV3xkn/6yuw6l/ME=
Subject key identifier:   74:B2:DF:F0:7C:2D:4A:17:17:08:00:C5:20:B6:5B:D6:01:5B:BF:D1
Certificate issuer:       /CN=2a604bed-acbd-4708-aa13-73f700eaabf6
Certificate serial:       010D0C9F4328576D51CC73C042CFC173C4D5D05E
Authority key identifier: 6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/f67a3f3b-dc84-3af8-8546-ad37911fa35c.roa
Signing time:             Thu 06 Aug 2020 17:33:33 +0000
ROA not before:           Thu 06 Aug 2020 04:00:00 +0000
ROA not after:            Wed 09 Nov 2022 05:00:00 +0000
asID:                     3801
IP address blocks:        143.55.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:c4:d5:d0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a604bed-acbd-4708-aa13-73f700eaabf6
        Validity
            Not Before: Aug  6 04:00:00 2020 GMT
            Not After : Nov  9 05:00:00 2022 GMT
        Subject: CN=f6286adc-3fc6-447c-a172-5143174e6cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:dc:67:6d:85:77:fa:a2:60:04:30:92:ad:
                    be:77:a7:21:5f:53:bc:1d:c3:1c:80:2a:71:7a:8c:
                    6d:f9:26:9c:9c:6d:b2:a6:11:2e:85:35:59:dc:c1:
                    15:d0:88:83:5e:e8:70:00:c9:0a:52:9e:6d:af:f4:
                    a5:0c:ee:2f:32:18:ca:17:6a:87:0f:10:1e:46:d4:
                    85:6e:11:17:2b:12:d7:54:eb:e9:1a:a5:21:ea:f7:
                    d6:f6:88:e1:51:55:33:12:5f:32:dc:14:26:76:e6:
                    12:16:fc:b2:0b:96:f0:bd:50:57:23:f7:5c:1d:59:
                    30:50:33:8f:3a:bd:49:b1:41:19:d1:3c:f7:b0:b6:
                    bf:d7:95:ec:cd:85:35:1e:3a:61:1a:ae:67:bf:23:
                    7a:93:d7:e6:a5:f9:02:8d:a4:06:bd:8c:33:fd:50:
                    90:a9:ca:f1:d7:f7:64:79:39:c0:6d:2a:b3:e4:da:
                    6a:5b:73:92:5b:b5:56:3d:87:e8:8b:7c:0c:20:ba:
                    29:8b:9c:40:1b:9a:00:13:7d:8f:29:69:ee:41:93:
                    66:1c:52:f9:cf:5d:19:f1:70:e1:bd:44:50:da:6c:
                    88:2e:35:61:bb:f7:f6:ab:d1:54:5a:a7:f2:b8:6a:
                    75:67:f9:c7:a8:ef:1c:40:f6:d3:fc:4a:a2:a9:57:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B2:DF:F0:7C:2D:4A:17:17:08:00:C5:20:B6:5B:D6:01:5B:BF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/f67a3f3b-dc84-3af8-8546-ad37911fa35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:53:6a:87:c2:56:59:af:5d:2e:ad:ed:b7:57:68:cf:94:
         5f:75:64:40:cc:1c:86:69:9b:51:f0:6d:66:3f:cc:ce:64:15:
         bb:42:65:f8:b2:13:38:79:01:28:5f:51:42:70:7c:19:11:e1:
         c2:5b:96:49:ad:9c:3c:63:58:3b:68:e4:6b:09:ac:46:e5:3e:
         cb:97:1a:75:4c:b0:56:77:0b:f4:f9:6b:4b:9d:6d:1a:6f:58:
         ee:8d:48:d8:66:32:37:49:43:f9:70:e1:d8:a1:9a:3b:ef:0e:
         44:63:f8:d7:0c:9a:4f:e5:26:d5:07:8a:45:02:35:bf:0d:0b:
         9a:08:da:76:6a:41:ab:cc:74:34:1a:85:6a:f1:5b:b3:3d:f7:
         fd:22:99:44:f5:98:1c:f5:31:49:92:07:8a:50:09:65:dc:78:
         8e:23:0b:66:3a:06:9e:96:a2:e0:be:b7:cc:1b:18:73:b9:31:
         8a:3f:8c:f1:1b:10:ad:34:75:52:4f:a1:0d:7d:e6:d8:37:4b:
         4f:f5:3b:26:4a:db:1a:5b:2a:e8:73:9b:a4:ee:90:b5:67:e0:
         7d:da:72:83:ab:bc:cd:0a:d6:72:c4:87:df:57:4a:4e:75:d5:
         96:86:dd:62:13:6d:b0:5a:86:07:d4:fc:7f:c0:84:ff:17:6a:
         2f:62:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org