Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa
File:                     3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa (raw, json)
Hash identifier:          zceWvLNu1O7YujOW2NwWJCZ8W/x5+ucBf4Ub56hvTlE=
Subject key identifier:   44:82:EC:0F:BE:8B:0F:30:9F:27:39:1D:15:93:CA:1C:C6:0D:84:48
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7BE3AB890AD2EDCB4D64A40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        172.253.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:3a:b8:90:ad:2e:dc:b4:d6:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c3d7636f-e403-4658-8c03-f9ba095231f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:58:b6:8c:db:40:4d:a4:3b:51:2f:46:c3:
                    8e:01:fb:09:40:1a:5e:02:ed:b7:bc:ba:8a:7c:eb:
                    5b:e8:02:05:78:34:11:e1:64:03:d0:00:22:43:67:
                    71:55:86:c9:5f:ad:b2:cf:78:ac:24:fc:6e:86:4c:
                    09:b8:4a:78:dc:7e:7d:d3:32:0b:8c:7e:40:2a:9a:
                    2f:6f:54:3d:4c:40:61:76:8d:aa:fc:74:12:b1:cd:
                    6a:0b:52:19:af:9c:1b:f1:8b:c5:84:57:f3:cb:47:
                    36:c3:db:45:36:2c:50:66:fc:4f:d4:64:ba:a5:4d:
                    99:86:63:42:6c:85:fd:a4:ca:e1:2a:63:f3:0f:89:
                    2d:86:70:a6:70:2d:c2:e6:18:d6:2c:32:1e:e7:ab:
                    77:11:06:2b:51:2e:23:87:ba:44:97:07:8c:af:27:
                    92:4d:33:76:64:e8:13:35:51:56:5b:c6:3a:7c:7d:
                    d9:75:d7:d5:c6:08:7e:51:d0:84:90:8d:98:8e:bb:
                    fc:26:3c:b8:ad:50:68:ff:a9:01:58:0b:96:a4:cd:
                    a4:0f:93:d2:35:b5:82:ae:f3:fc:87:9d:23:a1:55:
                    05:9f:1c:7f:8f:35:0b:64:f3:b8:58:91:07:1d:1e:
                    f1:51:13:b7:0d:83:8d:38:a1:90:1e:4e:6e:ec:b9:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:82:EC:0F:BE:8B:0F:30:9F:27:39:1D:15:93:CA:1C:C6:0D:84:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:66:4a:c1:81:6b:50:0f:68:62:a2:c2:7c:12:14:8e:89:
         58:70:f0:78:e5:9f:af:90:80:00:7a:d7:45:de:62:a2:b5:d2:
         aa:5d:a2:95:4d:4a:ee:0f:5c:ba:53:47:71:89:d9:84:dc:50:
         e3:fe:4a:e0:69:8e:c1:7b:37:98:b5:cf:14:38:9a:77:ef:f1:
         91:53:c9:db:a2:7f:77:ca:ee:9d:2e:48:59:09:33:f3:b8:c5:
         39:1c:4c:c5:4a:60:95:15:0a:89:8f:f2:a5:8f:7a:bc:aa:40:
         27:62:96:34:44:52:c0:97:04:06:6b:c4:a3:96:11:2f:db:c0:
         8e:ae:9a:9c:d7:aa:3e:19:54:30:9b:65:52:3e:85:94:8a:82:
         dc:b8:d2:94:01:09:c2:78:db:89:7c:f5:93:a7:e8:6a:ca:e5:
         ec:35:1e:f1:98:5b:36:7f:47:58:b7:96:a2:6f:4b:18:85:d5:
         c8:7f:2c:7e:c9:12:77:a5:5a:b1:5d:1a:28:64:73:9b:f5:e5:
         7a:3a:f6:36:b9:77:2a:05:05:a5:a4:14:7a:c4:b7:b9:da:b8:
         94:fc:8a:2b:98:11:9b:18:ae:61:06:fd:aa:43:dc:da:36:c0:
         38:6c:9e:71:7c:93:76:ec:d0:f7:17:ca:b3:0f:86:8a:6a:07:
         da:bd:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org