Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c60467e-ea59-39ce-935b-f6ad65e697ba.roa
File:                     3c60467e-ea59-39ce-935b-f6ad65e697ba.roa (raw, json)
Hash identifier:          2spcT7LSdUlvWDf2o84Q3LIXwuXjjhIKKz8ENtFMNJw=
Subject key identifier:   5D:67:B2:D9:D7:4E:A9:28:2C:59:C9:B1:3F:FE:63:A0:39:18:B1:4B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7B40FB774F245DC2224E3E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c60467e-ea59-39ce-935b-f6ad65e697ba.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        74.125.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:0f:b7:74:f2:45:dc:22:24:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0a474f21-98be-4275-93f2-c22097693b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:6b:8c:77:fd:80:88:9b:95:66:d5:d9:03:
                    fd:94:da:79:9d:ac:29:7b:88:2a:46:27:5e:8b:fa:
                    e9:fc:38:ba:a3:4a:6f:66:e4:4e:37:48:9c:f5:f1:
                    cd:5b:2d:8a:e0:d2:1f:9e:1f:ad:81:58:64:1b:92:
                    c7:52:72:82:fe:bf:f6:cc:74:13:da:08:87:f9:a9:
                    71:63:ea:ac:6c:0b:24:ab:18:e8:27:8c:90:18:39:
                    16:c7:03:b5:b0:87:ab:ce:82:3e:91:4c:b1:01:fc:
                    a7:69:87:5e:1d:53:3b:20:79:e3:31:2a:80:9c:3c:
                    96:5a:75:ce:f9:5a:31:65:2e:74:ff:8a:7b:8b:ff:
                    cb:9e:29:b1:44:96:84:16:8b:be:49:fc:00:b6:d3:
                    f9:14:33:5f:e6:44:3a:98:32:3d:c9:b8:09:c0:7c:
                    23:09:a1:6f:87:12:a2:e6:b1:04:76:8d:d3:16:28:
                    b3:b2:27:ba:28:d7:5a:35:06:f3:f3:82:20:25:9a:
                    23:28:97:a2:4f:40:47:cc:66:79:ed:cb:cf:6a:96:
                    49:d2:da:00:c7:9e:6d:e5:f3:d3:38:c9:bc:4e:27:
                    2c:6c:6b:56:1c:c7:47:b8:0d:c1:b5:4f:50:b7:39:
                    06:4f:ce:d9:a7:b3:08:83:d2:73:fe:3f:56:9f:5e:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:67:B2:D9:D7:4E:A9:28:2C:59:C9:B1:3F:FE:63:A0:39:18:B1:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c60467e-ea59-39ce-935b-f6ad65e697ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:14:28:0a:c0:cb:50:9f:ce:ae:f6:0c:7c:cb:f4:b1:57:37:
         7a:e3:5a:b9:94:68:be:83:60:36:ef:31:1a:e2:3a:ea:1d:3a:
         02:e7:30:2f:66:ef:cd:d2:32:9f:c2:74:e1:25:8c:ef:20:b8:
         13:eb:d2:12:31:82:a0:ea:a8:24:64:3a:ee:d7:79:1a:4f:8a:
         66:c9:ce:b4:24:1a:87:4c:df:aa:b3:2d:69:8a:22:ba:f8:cd:
         a4:a7:09:14:4d:d8:f8:c6:2b:3c:cc:35:3b:c1:94:ae:31:d8:
         f9:d1:c1:29:7c:87:dd:8c:be:6c:bc:3a:d3:cf:51:2a:89:bd:
         79:f6:e5:31:b2:9a:8a:32:15:7d:95:e4:c3:1f:31:f1:ed:e6:
         ac:64:fb:67:3f:d9:98:22:85:bd:90:22:1a:03:43:88:48:b5:
         68:cb:2c:b1:d2:96:b4:9a:0e:ac:6e:50:3b:59:50:80:49:45:
         de:f2:1c:14:a5:19:c0:e6:b0:3e:cb:78:c4:6f:fb:d3:9c:12:
         70:f4:68:e3:f5:4e:5e:30:bb:b2:07:f2:69:73:17:bc:3d:e3:
         8c:6c:ae:63:f8:c9:50:28:f6:13:21:33:48:ba:2b:6b:67:6a:
         57:1f:e6:fd:f8:70:fe:05:1a:2b:13:e1:cb:04:4f:b8:73:c4:
         96:54:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org