Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/70b21646-bd12-3830-b813-add0c9700e6c.roa
File:                     70b21646-bd12-3830-b813-add0c9700e6c.roa (raw, json)
Hash identifier:          UdXLUjn4nXo2b8d+r4IbKwS9agUnI3yo0cG1WbREXYk=
Subject key identifier:   5F:84:FA:1F:71:04:38:D0:22:A8:DB:49:BF:54:78:29:B7:CF:A6:56
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328576D51CC73C042CFC1713222528F
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/70b21646-bd12-3830-b813-add0c9700e6c.roa
Signing time:             Tue 31 Mar 2020 19:47:22 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        108.175.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:32:22:52:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=b364fc9c-7060-43ce-abb0-ed6f77817498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:70:4a:9a:c9:c9:7e:dd:ed:6a:4c:1d:b0:
                    bc:40:30:64:1e:f8:19:02:5b:15:77:ab:4e:c0:e4:
                    e3:e4:ad:fb:f2:de:b6:c3:88:6b:d9:c0:b1:0d:63:
                    b3:1a:e8:2c:51:97:d4:60:49:a9:1b:4b:c4:bc:8e:
                    06:21:85:9b:75:86:67:3a:db:da:91:08:79:27:fb:
                    0a:d7:9b:89:2a:5c:75:18:4c:41:4a:93:fa:29:74:
                    9a:a7:3e:3e:7d:a1:b3:f6:7d:25:94:9d:3e:b1:b6:
                    37:37:f9:77:be:e1:e1:3d:3e:34:45:3b:6e:90:14:
                    e6:c6:5c:73:66:bc:4d:a6:52:c7:30:a1:38:a1:51:
                    55:b4:c3:0e:ff:b2:21:25:d8:3a:05:cc:8b:3b:e5:
                    44:03:9d:e3:5b:31:b4:a0:a9:c6:5e:09:bb:46:52:
                    cd:85:1d:63:64:a4:b2:d2:29:38:3a:7b:10:de:3b:
                    66:69:6b:a4:bb:f8:80:ea:ec:c5:12:9e:7b:3b:10:
                    01:8d:c1:7e:26:e8:1c:ab:4d:07:16:d4:f9:77:e0:
                    c1:d9:a4:a7:92:04:60:f9:fe:57:af:cb:42:9c:3a:
                    15:83:01:20:b4:5a:06:89:3a:aa:e8:d8:12:8f:fb:
                    b8:c0:e9:02:20:70:da:48:d4:e0:5a:a4:79:c1:09:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:FA:1F:71:04:38:D0:22:A8:DB:49:BF:54:78:29:B7:CF:A6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/70b21646-bd12-3830-b813-add0c9700e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:06:fd:c4:af:9f:b1:98:95:03:f7:87:14:18:b7:d2:42:fa:
         2c:b9:2e:77:bb:35:ca:55:77:3e:03:ce:1c:01:3a:e7:e1:46:
         30:b0:87:df:8f:3c:ed:14:1b:a2:c5:ae:02:6c:42:95:dc:9f:
         53:a0:7e:08:81:0d:15:4e:80:19:37:e5:87:4b:65:bc:8b:d0:
         93:a6:53:9a:d5:2b:d2:de:84:3f:c5:a3:b9:8c:8d:ba:cd:65:
         f6:fc:e9:21:5d:1b:d4:6e:2c:19:38:db:82:76:db:f1:4a:b9:
         bc:c6:c1:39:3c:17:5e:a3:e4:91:e0:54:05:26:72:d0:96:26:
         ce:90:41:eb:ff:c3:90:4c:87:59:1e:4c:cf:2e:a0:18:34:53:
         e2:60:47:f9:dd:77:c9:dc:ae:f6:6a:7c:1c:ff:06:07:b7:34:
         9a:9a:90:fa:04:b0:72:5c:5e:ee:04:a9:88:37:d0:28:69:b9:
         16:c9:ee:17:79:e8:2b:49:ae:26:df:83:ad:28:81:3b:ce:0e:
         58:42:97:41:22:84:c6:51:87:d0:8e:b8:11:69:b4:c4:10:a7:
         58:c0:62:02:3c:b4:69:96:08:b8:57:5d:2a:c7:99:e8:b7:89:
         dc:6a:c2:6a:78:b6:90:90:d2:66:e1:41:91:f6:fc:2c:66:1c:
         5b:0f:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org