Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0a2029a3-ee45-36c2-aad4-7226ab993160.roa
File:                     0a2029a3-ee45-36c2-aad4-7226ab993160.roa (raw, json)
Hash identifier:          su4kdJl5V9shMK2ExwUdDgDquXax1la8ItXxDiTSQ0E=
Subject key identifier:   87:C5:8D:FF:31:EB:C8:17:91:CA:58:B4:E9:30:0A:BA:30:D4:A4:81
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328576D51CC73C042CFC1713B771BEA
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0a2029a3-ee45-36c2-aad4-7226ab993160.roa
Signing time:             Thu 02 Apr 2020 15:16:33 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Wed 06 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        69.172.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:3b:77:1b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jul  6 04:00:00 2022 GMT
        Subject: CN=9b57f672-e4ef-4cb4-b74b-991b8edd1453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:92:d2:a7:a6:1b:9d:0a:d8:ef:57:4b:43:
                    1b:0e:52:20:6b:b6:5f:1e:c4:2e:f1:f8:2b:d3:f7:
                    2e:88:1f:f1:10:3a:83:9c:49:d9:20:d6:70:bb:93:
                    d8:e3:ed:b9:18:51:39:64:dc:e8:ee:d8:a9:dd:fa:
                    eb:4c:cb:3d:f4:d2:02:24:e2:e7:84:b2:3e:ab:a6:
                    25:ca:42:8d:b8:64:61:ab:32:9f:4c:c0:79:af:62:
                    d5:12:ea:44:3c:bd:5f:55:45:55:dc:d9:d9:63:d8:
                    d1:d6:9f:f6:29:74:cf:f9:ec:ed:c8:43:1d:f1:82:
                    bb:6d:1d:d2:9f:2f:ad:10:98:be:2d:6e:74:f5:c6:
                    59:27:0d:af:05:3e:59:bd:dc:71:bf:27:6d:ea:bf:
                    aa:25:d6:f6:50:e6:e9:07:3d:7d:b7:27:14:e7:5a:
                    f8:6c:29:57:0d:19:48:f4:6c:b2:44:71:f0:0c:dd:
                    14:5a:77:2c:69:43:17:2c:91:12:d5:68:1e:a7:00:
                    99:e7:be:3a:b7:66:2d:44:40:80:28:6f:08:97:73:
                    3b:4a:eb:ba:ff:e4:41:88:a6:30:b9:f4:39:2b:81:
                    1c:9b:f4:83:64:ff:d0:ce:38:5a:50:fb:fb:bd:b1:
                    e7:cd:f4:bd:a6:f1:9a:c0:06:0b:ab:c6:9f:62:83:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:8D:FF:31:EB:C8:17:91:CA:58:B4:E9:30:0A:BA:30:D4:A4:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0a2029a3-ee45-36c2-aad4-7226ab993160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:25:a7:91:80:79:40:9f:12:82:4f:38:43:b9:8a:cf:fa:7c:
         0f:2c:b2:c4:2d:75:2a:fe:f0:72:2f:48:dd:65:0e:68:e8:01:
         8d:39:c5:9c:2e:f0:cf:0c:90:66:a3:58:4d:d6:e3:7e:2d:7d:
         7c:53:97:61:02:03:6c:f2:17:37:e5:df:f0:b6:18:13:73:cc:
         62:98:09:b4:6d:82:ac:55:a1:f2:2b:de:2f:04:cd:31:d9:85:
         64:5f:32:21:75:99:f8:85:e2:8a:2e:38:70:d9:63:d3:75:91:
         b0:0a:bd:90:ec:fc:54:74:f9:68:47:0c:5a:10:81:8f:1c:a5:
         bb:6a:9a:ca:ea:b4:fa:31:eb:13:9c:15:61:ce:87:56:78:50:
         38:84:c0:19:1d:53:29:d4:c9:3b:bc:50:00:9d:cd:b7:34:7c:
         7f:be:97:4b:8e:42:5d:33:95:af:49:05:c6:21:54:e1:de:09:
         26:6d:36:0f:ff:4d:8b:5b:bc:cf:1a:35:48:a6:78:5a:b3:91:
         7e:d3:42:94:cd:e3:36:59:cf:1e:37:4f:c4:01:bd:ec:f3:eb:
         61:a9:0a:bf:43:c9:d3:54:92:d9:54:5b:6d:c2:f7:c6:94:f0:
         0d:31:e7:9c:e6:e0:44:37:50:d6:2a:de:50:50:ed:81:fe:77:
         b1:2c:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org