Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cb5dca0b-140d-3a1c-91fe-8b2e47825280.roa
File:                     cb5dca0b-140d-3a1c-91fe-8b2e47825280.roa (raw, json)
Hash identifier:          JDjcMopulSIIw75EzgxDMjggffw7TsManMTHhl/8d5s=
Subject key identifier:   0A:40:A8:40:02:A1:83:8A:67:B4:F6:D8:1C:D1:37:A4:E2:46:99:52
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328576D51CC73C042CFC172290D54C0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cb5dca0b-140d-3a1c-91fe-8b2e47825280.roa
Signing time:             Mon 18 May 2020 18:30:39 +0000
ROA not before:           Tue 28 Apr 2020 04:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        207.202.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:29:0d:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 28 04:00:00 2020 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=091efe2d-8350-4378-926f-ab17c8b19804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:57:28:80:8c:49:4c:ef:12:b9:1c:9d:8f:
                    a2:e5:43:f1:9c:fc:ad:21:98:68:0e:3a:8c:a5:d0:
                    80:56:6c:9d:50:55:22:30:51:73:18:55:5b:82:be:
                    b2:d7:ad:cb:19:9f:d2:99:49:5b:ce:40:89:db:e6:
                    c4:6d:90:b7:a2:af:14:5f:ca:41:b3:a0:1c:45:e3:
                    f5:c3:23:25:e2:d3:3a:eb:a2:5d:79:c3:84:75:b0:
                    61:03:76:78:56:f5:01:54:ed:cc:8e:94:ba:8e:62:
                    f3:8e:4c:a6:ea:e2:dd:7f:3d:a3:fb:06:55:c4:af:
                    fb:20:e4:bd:3b:b7:66:bc:43:52:6a:0e:54:3b:1a:
                    ea:89:c7:e5:98:f8:bf:32:8b:67:92:7b:6d:c0:f4:
                    e6:e7:dd:fe:75:5a:22:53:c0:39:e5:fb:50:25:00:
                    31:78:fc:2a:38:63:06:89:d7:66:b1:44:28:50:43:
                    9c:c2:c6:f8:9a:b2:e1:8b:ba:29:7a:06:fd:9f:a9:
                    f9:eb:24:7c:76:26:00:86:40:8b:3a:2d:b4:00:ef:
                    3d:f5:55:7c:eb:83:cf:ef:dd:86:3d:37:83:1f:39:
                    5e:20:04:27:89:85:85:2a:2f:22:8d:cc:71:e6:f5:
                    d4:91:2e:1e:32:1d:fd:90:0d:a8:69:c1:51:50:69:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:A8:40:02:A1:83:8A:67:B4:F6:D8:1C:D1:37:A4:E2:46:99:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cb5dca0b-140d-3a1c-91fe-8b2e47825280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:8f:35:39:ba:9f:3c:7b:c2:21:c4:e4:c9:44:44:9c:cd:
         b3:47:e2:ab:79:37:60:2b:90:50:28:f0:e2:1a:bd:48:cd:22:
         f9:e0:ca:3c:5c:09:c2:57:98:90:9c:45:12:fd:8c:9b:3a:9c:
         9e:57:5a:d6:f9:57:ab:ca:45:a7:5e:35:58:41:fb:3c:7d:63:
         0c:58:c9:f9:8d:75:0b:93:06:8c:75:af:fe:41:c2:3c:3c:75:
         63:58:7e:99:81:ce:00:aa:61:f3:01:ef:41:27:69:ec:8c:9a:
         53:5b:b8:6d:f4:a0:b0:9b:b4:2d:71:85:be:90:47:d6:a2:00:
         1b:62:25:35:60:1f:1e:a2:ad:e2:a3:79:ac:24:6b:e4:8f:46:
         26:fd:0a:26:dd:3d:99:3e:b3:ce:76:db:5a:93:a7:89:19:7f:
         29:ae:ea:24:e1:98:28:7d:12:12:d0:54:9b:9d:fb:75:7e:e0:
         03:7a:8c:a2:10:94:6c:c6:b3:80:c9:f9:40:49:2d:94:3b:d3:
         f9:6d:d4:4f:37:c4:dc:89:f7:32:34:40:e0:b1:79:fb:29:95:
         90:c7:5c:2b:4e:0a:23:0b:f0:25:55:b4:13:0d:11:dc:81:73:
         89:68:30:df:79:bd:39:4c:fc:13:db:01:97:f8:c1:f0:85:7a:
         76:83:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org