Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/cc05bd53-1d50-3d64-a79f-0f2399e0714f.roa
File:                     cc05bd53-1d50-3d64-a79f-0f2399e0714f.roa (raw, json)
Hash identifier:          U00Yynny9fvCpvtr4vvtu1GEtr7jnbt/VSDbda9sqz8=
Subject key identifier:   AA:A7:08:A4:AB:B5:5F:E5:C7:22:6B:87:A3:2E:72:38:2F:78:D4:B1
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328576D51CC73C042CFC17131E9DB21
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/cc05bd53-1d50-3d64-a79f-0f2399e0714f.roa
Signing time:             Tue 31 Mar 2020 18:45:41 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        24.140.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:31:e9:db:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=6e6d488c-5a54-4000-87e1-13309d8ec2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:be:98:31:be:0c:69:64:ab:28:02:58:a2:
                    89:2d:2a:49:03:27:dc:c2:50:03:30:f7:28:e8:6b:
                    5d:7f:15:29:2a:4d:05:1d:2e:83:eb:94:4e:8b:d0:
                    0c:c8:38:d3:f9:5e:dc:9c:1b:0c:74:ff:5f:3a:7c:
                    28:ea:78:01:70:a3:15:15:1b:1f:47:94:c0:6b:2d:
                    39:69:42:d3:75:5a:18:17:9c:e0:e0:b0:22:15:fc:
                    34:c0:61:4f:57:54:b2:03:0c:68:7d:99:1a:26:d3:
                    88:33:4b:eb:3d:97:2c:cd:61:6c:8b:d2:44:a2:d4:
                    bf:7e:70:a8:60:10:eb:6b:fc:5c:e4:47:fe:4d:d8:
                    2a:9f:24:77:d4:4f:60:d5:e1:93:0d:a3:b5:42:f9:
                    db:9b:0b:73:2c:f7:28:b0:37:94:0d:d8:0d:70:b3:
                    bb:eb:0f:cf:08:38:da:e5:81:52:2d:01:de:8d:bb:
                    7e:b2:36:80:de:49:a3:5c:e2:09:aa:6a:13:24:03:
                    cd:04:e8:da:f4:c8:d8:45:39:4f:9b:5a:05:8b:97:
                    6d:52:a3:b5:9e:29:5f:73:1b:05:54:5f:d9:59:cc:
                    8b:67:0a:d3:fd:ee:c5:0c:0f:c8:af:54:0b:49:ce:
                    46:b4:48:68:41:e9:46:d1:0e:c1:97:0d:dc:a5:e7:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A7:08:A4:AB:B5:5F:E5:C7:22:6B:87:A3:2E:72:38:2F:78:D4:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/cc05bd53-1d50-3d64-a79f-0f2399e0714f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:36:1f:d7:8b:ec:5e:10:38:30:8e:41:fb:74:96:82:7b:
         1b:89:41:41:fb:09:80:fb:59:29:75:01:84:3d:85:1f:fe:f4:
         fd:60:27:17:bc:76:ee:c4:cc:ea:0f:b8:41:93:fa:db:a5:c6:
         64:04:72:13:7a:7e:b4:45:c1:68:72:63:c0:eb:6c:7c:d8:3c:
         18:4e:71:04:69:20:30:1a:47:3b:b4:bc:06:dd:2f:25:fd:ae:
         af:53:d7:db:21:f8:63:68:92:58:5a:e8:e1:85:47:4e:40:09:
         10:b7:9b:9f:f3:c1:bf:20:4b:3b:25:53:26:51:da:88:67:a5:
         28:aa:4a:c4:dd:5f:1d:70:47:29:ff:20:02:6a:46:dc:16:f6:
         85:6f:2f:19:d1:52:3f:d0:c8:4d:3f:13:f8:fd:3f:c4:b8:3a:
         83:f6:6d:74:55:79:66:fd:01:5a:b2:44:04:32:89:f9:5e:95:
         da:c5:ec:6c:a8:0e:0e:2a:4f:fd:48:cb:ba:33:fe:f5:46:9b:
         8b:69:1c:8d:c7:18:71:2a:39:43:1e:38:d0:8f:da:86:45:18:
         b6:f1:c1:ce:9d:b4:a7:b9:01:03:25:42:02:25:4e:de:0a:db:
         8d:c7:eb:c6:db:10:2d:ac:c2:13:1f:f3:af:9f:76:e9:6f:4b:
         ef:00:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org