Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0a266b2-d9b2-3bdd-9da7-6dfd55546ba4.roa
File:                     b0a266b2-d9b2-3bdd-9da7-6dfd55546ba4.roa (raw, json)
Hash identifier:          J/E4/Sk3bG3A6UdA7eBbtyDrZ4E+OzBPNVS/Ldace1U=
Subject key identifier:   29:F0:93:EA:A9:6A:A1:A6:09:28:BC:59:D3:97:96:FC:3A:41:3E:31
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7AE0BFA66CFB42A9461AF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0a266b2-d9b2-3bdd-9da7-6dfd55546ba4.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:0b:fa:66:cf:b4:2a:94:61:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=62400b56-ed92-4f54-9693-1bf6128c75c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:20:fe:66:d8:15:71:e6:c6:fd:92:56:59:
                    ed:a2:a1:68:b4:55:fb:95:6e:1b:a5:b6:8c:00:98:
                    1a:3b:19:6f:f2:15:9d:00:31:47:0c:c2:85:e3:1c:
                    f5:f0:9d:3e:8c:91:6f:ea:e6:14:68:07:bf:a9:bc:
                    f3:aa:f9:f4:5b:4d:60:4d:6d:e0:0b:13:1c:8b:53:
                    2e:d6:77:ff:33:37:a7:dc:05:71:3c:72:13:c9:63:
                    5d:c6:55:62:92:7e:1b:50:f9:60:45:24:07:b7:3e:
                    da:1d:7d:b5:12:60:46:97:fb:4f:2b:38:a1:fe:9a:
                    24:70:1d:b8:3a:f9:54:23:4e:44:a1:cb:2e:fe:56:
                    75:14:66:d8:83:aa:87:07:b6:a7:e7:9a:77:0f:f9:
                    2a:19:3a:96:ff:20:c8:fd:55:6f:dd:4b:05:40:e2:
                    df:b4:d6:06:c8:87:a8:91:3d:48:a1:71:60:c9:bb:
                    6d:cd:48:f6:9e:04:ab:2b:42:5c:db:9d:31:cc:cc:
                    48:b3:8e:f5:21:f7:11:ca:86:7c:99:1f:27:cc:5c:
                    fd:07:b4:e5:75:1d:6e:d9:50:1e:36:b9:cd:81:0f:
                    19:0c:36:60:cb:7f:3e:3c:be:5a:43:1b:da:b1:f0:
                    ac:87:24:35:8c:ee:35:e0:b6:27:cb:e3:df:56:00:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F0:93:EA:A9:6A:A1:A6:09:28:BC:59:D3:97:96:FC:3A:41:3E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0a266b2-d9b2-3bdd-9da7-6dfd55546ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:a1:62:17:2d:fc:b8:86:a8:71:bb:b8:47:5c:d3:42:a2:
         dd:69:84:b1:7b:e2:8c:25:ae:7c:81:4f:26:86:45:ba:2c:b8:
         c2:87:76:ae:59:d2:b1:3b:b6:e3:6c:94:00:b1:84:52:ef:f8:
         c3:40:d2:b6:27:fc:95:7e:28:6a:c1:53:fe:51:3f:0d:5f:3c:
         1a:22:cc:87:5d:f1:66:5e:7b:33:f4:30:3d:49:e5:2d:ff:2e:
         e5:56:87:07:58:d5:0d:7d:80:d6:af:b2:21:10:59:dd:53:07:
         c8:85:cf:2f:dd:bd:c4:fa:89:87:bc:23:e0:90:b5:bc:04:17:
         c5:97:3e:8a:12:e4:ff:a1:5f:e0:04:f7:5f:45:87:bf:f1:bd:
         3e:5f:e3:7e:64:58:c0:70:9e:5a:eb:46:70:e5:57:00:88:bd:
         91:aa:32:53:20:91:e5:34:d6:b5:16:c8:28:07:03:8d:24:c6:
         19:7b:3c:1a:a4:c3:4e:48:fb:40:c0:94:82:8b:39:87:f4:bb:
         0f:2a:17:57:b0:3b:65:5f:f3:9f:d5:fd:b8:f1:3a:57:98:95:
         a1:af:34:d6:d1:50:56:8c:23:97:58:65:dc:98:d4:bf:72:6f:
         9b:75:13:c8:38:9d:81:20:dc:d1:9a:a6:75:09:0c:18:80:38:
         8b:c7:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org