Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/652a667c-6e24-3424-9e42-e0921a72368b.roa
File:                     652a667c-6e24-3424-9e42-e0921a72368b.roa (raw, json)
Hash identifier:          QEZtmAf4BUMq1XOjbfwNG6ecq6zo+ncPMjmqJP0qAGw=
Subject key identifier:   29:7D:A4:DD:90:62:C5:D6:B0:1E:DD:2B:D6:A7:2F:23:04:99:89:D4
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583AB94B2D8B38FFC17DDB491180
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/652a667c-6e24-3424-9e42-e0921a72368b.roa
Signing time:             Tue 27 Jul 2021 04:00:00 +0000
ROA not before:           Tue 27 Jul 2021 04:00:00 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     30607
IP address blocks:        204.194.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:b9:4b:2d:8b:38:ff:c1:7d:db:49:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 27 04:00:00 2021 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=9b4e3a2c-e82b-413d-aef7-a27f8aabf865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:ec:aa:a3:fb:71:73:6c:1a:e3:ea:3f:5a:
                    79:7c:2c:78:fc:b6:0b:8a:08:53:03:72:d7:65:80:
                    06:4e:25:f0:96:ce:51:0b:32:6a:d0:1d:8d:88:46:
                    76:ea:71:76:08:19:89:6e:f7:2e:a5:9d:b7:16:28:
                    a3:97:09:ed:51:66:27:c9:40:8f:4b:0b:cc:06:37:
                    79:aa:28:39:27:21:38:4e:26:8a:b0:f9:fc:6f:e3:
                    8a:62:9e:d6:05:90:62:f4:14:74:46:bc:0f:86:d3:
                    d4:ae:3c:f2:b8:52:b5:da:d9:14:eb:73:3e:de:98:
                    f6:31:64:ea:47:77:a8:48:e6:d6:f1:08:c7:45:18:
                    10:eb:92:d0:21:38:12:92:f6:de:61:43:ef:80:5d:
                    c2:a4:4a:8d:6b:1d:33:46:26:36:dc:e4:ac:c8:3c:
                    e9:15:ac:5b:a0:fe:d1:4d:d0:97:18:86:0b:11:01:
                    23:0f:59:8d:32:40:24:a4:e0:b5:28:50:7d:17:fe:
                    57:1c:22:5a:97:7c:ba:ea:7b:7d:b2:09:00:0c:64:
                    f4:ae:06:8c:23:23:09:0c:19:39:46:21:55:bf:34:
                    7d:8b:a5:f1:b4:bc:1f:6f:e8:6f:2c:1f:95:53:f7:
                    07:fe:29:99:7b:1b:a9:d4:46:df:db:b0:bb:53:0b:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7D:A4:DD:90:62:C5:D6:B0:1E:DD:2B:D6:A7:2F:23:04:99:89:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/652a667c-6e24-3424-9e42-e0921a72368b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:d3:ce:4a:9c:e6:e9:48:73:78:ac:0d:b8:21:1c:31:5f:
         67:f8:45:ad:ec:92:ab:e9:6c:f4:b0:e4:2b:b9:59:ee:82:56:
         9a:89:d0:8c:6c:76:d6:d5:31:8f:6b:a9:5b:15:17:2b:1d:cb:
         62:ed:1f:f7:69:46:f8:11:2d:15:af:1c:35:36:2f:bf:60:94:
         96:55:22:8e:5d:62:8f:36:20:b8:14:f3:97:71:ba:64:a6:eb:
         fc:d5:a5:ee:56:85:76:0c:e0:67:93:4a:c2:69:16:ad:39:76:
         4d:1f:19:8c:9b:bf:2f:ff:62:48:38:cd:bf:cc:a3:e7:11:2a:
         6f:80:9d:5a:86:c6:b3:75:4c:46:31:1c:73:db:23:0f:52:a7:
         61:4f:e3:dc:4a:23:b7:0c:f3:6c:91:a3:d7:7d:30:f4:e3:00:
         cf:37:78:85:fd:59:8f:1e:72:3c:6e:72:7c:69:6b:9a:99:31:
         bd:3b:10:30:c0:69:82:0f:24:33:db:ff:11:9c:ae:76:19:66:
         22:17:b2:31:d8:82:fd:e6:d0:68:e0:9f:d6:46:b3:6c:fd:05:
         46:22:df:80:69:a7:b4:d9:56:49:75:69:d6:17:50:3a:36:d9:
         c0:15:cb:45:1b:a3:36:72:e2:07:6b:01:13:d2:02:b1:ac:bc:
         ba:dd:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org