Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/db1d8d9f-2fc8-3013-9a11-fc5aa750576f.roa
File:                     db1d8d9f-2fc8-3013-9a11-fc5aa750576f.roa (raw, json)
Hash identifier:          tq/bnGMJOj8XETaKTFGNWrehd3GdCZNfGILlou4x5I4=
Subject key identifier:   A5:75:A7:54:BF:EE:1E:C6:21:7E:DA:2F:1A:A7:8E:D6:5A:D2:A5:0F
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328576D51CC73C042CFC17131F02E10
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/db1d8d9f-2fc8-3013-9a11-fc5aa750576f.roa
Signing time:             Tue 31 Mar 2020 18:52:36 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        69.165.128.0/17 maxlen: 17
                          69.165.192.0/20 maxlen: 20
                          69.165.208.0/21 maxlen: 21
                          69.165.128.0/18 maxlen: 18
                          69.165.192.0/19 maxlen: 19
                          69.165.224.0/21 maxlen: 21
                          69.165.227.0/24 maxlen: 24
                          69.165.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:31:f0:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=b63203be-a946-4267-a0ad-63b24d7a7325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:94:61:35:8d:81:c8:2c:8f:d3:a5:1f:9c:
                    9e:bb:5b:1f:de:e6:b9:c3:da:51:60:06:88:e4:ec:
                    ad:ec:b9:d9:4a:ec:ac:3d:ef:b2:a7:8b:68:29:21:
                    5a:c4:d7:77:8a:28:a5:b3:fc:3f:0c:8f:fc:f8:31:
                    68:d8:5c:4f:06:5a:cc:d7:cf:25:70:1c:02:ab:53:
                    21:12:01:0e:51:ed:72:87:63:97:6a:e2:ad:8d:2a:
                    37:40:15:2e:21:2a:8d:15:bf:bb:5a:12:5f:5b:b7:
                    f9:df:aa:5d:a0:dd:28:70:97:9f:71:c7:e9:82:23:
                    41:81:12:58:bf:fb:9f:ef:e9:e9:e4:df:9e:dd:9d:
                    00:e8:49:e1:7c:c9:ef:79:9b:66:31:59:3c:98:6f:
                    2a:08:e8:41:97:2f:84:16:98:0f:76:e0:e9:ac:8a:
                    04:c6:45:4f:13:d0:2f:ae:4b:dd:fd:ee:dc:67:8c:
                    df:ed:ff:10:a0:33:29:40:b3:92:90:09:ee:f8:5e:
                    d9:a1:c0:12:41:b8:06:74:95:68:b4:8d:b7:16:1f:
                    61:72:c9:b3:c3:63:8f:ee:27:0c:63:a9:a9:9d:4c:
                    c5:f7:d7:9c:62:d4:00:d9:f8:34:31:9d:ab:26:4c:
                    12:8d:88:7e:8c:06:73:92:70:e9:e0:c5:df:a8:56:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:75:A7:54:BF:EE:1E:C6:21:7E:DA:2F:1A:A7:8E:D6:5A:D2:A5:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/db1d8d9f-2fc8-3013-9a11-fc5aa750576f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bd:52:10:42:83:23:48:77:af:cb:eb:1e:65:20:fc:d8:8c:
         29:04:52:ef:ff:58:17:48:50:2c:bc:51:41:b6:65:65:4d:b3:
         0f:c1:52:75:ef:1e:1a:04:4a:b1:90:a2:4b:b7:1e:b0:6f:42:
         8d:2c:7e:a3:38:90:ee:ba:e9:2d:eb:d2:2f:59:4a:c7:6c:60:
         12:45:ee:11:a9:f7:31:81:05:70:97:9e:f1:05:ce:da:e8:92:
         af:d0:6d:80:56:54:be:28:81:76:b1:be:79:73:62:ae:db:42:
         67:da:69:7a:c0:4c:c7:00:03:ca:db:38:d9:68:02:e0:58:fa:
         35:34:46:56:d2:19:9e:b1:3d:8f:6c:23:c3:44:7c:fe:63:60:
         cb:57:68:84:0b:ce:8d:49:56:00:8a:3a:c1:e3:ec:fc:93:a7:
         b0:f1:1d:58:f8:3e:23:42:30:cf:ee:3e:dd:67:1a:86:80:19:
         d4:b6:dd:22:bf:40:11:7f:25:e3:37:72:6f:3e:a6:d2:ac:bf:
         20:82:26:80:84:ae:75:85:2b:4c:cb:84:9e:52:57:7f:fd:0d:
         57:ff:9f:92:f2:bc:11:d4:6b:8e:51:ce:df:d1:ee:ce:64:6d:
         1f:85:96:a9:f2:f8:68:38:d1:4a:4e:14:96:b6:8f:63:86:d8:
         b2:41:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org