Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/14ec2771-9c39-3142-adda-d281e823bdcd.roa
File:                     14ec2771-9c39-3142-adda-d281e823bdcd.roa (raw, json)
Hash identifier:          8tBE3N0fCb9sNuTbQt5Z1aiXY0u1TKCIEcC83ecRN20=
Subject key identifier:   11:49:F5:61:93:88:F4:B4:39:01:75:24:9A:DE:6A:7B:13:68:DE:96
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328576D51CC73C042CFC17117BC92B0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/14ec2771-9c39-3142-adda-d281e823bdcd.roa
Signing time:             Thu 26 Mar 2020 16:46:06 +0000
ROA not before:           Thu 26 Mar 2020 04:00:00 +0000
ROA not after:            Wed 29 Jun 2022 04:00:00 +0000
asID:                     30215
IP address blocks:        2620:101:2019::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:17:bc:92:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar 26 04:00:00 2020 GMT
            Not After : Jun 29 04:00:00 2022 GMT
        Subject: CN=961aad39-bc11-4d6c-8c32-9d9d4ce0d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:de:f1:f3:e6:98:94:46:6a:33:8f:76:a7:
                    d4:4e:ae:5c:dd:9c:83:e1:21:fc:54:18:76:6d:30:
                    b5:7c:8f:69:a4:c5:36:52:ae:c5:00:ca:1a:a4:94:
                    40:10:f5:f1:08:3d:2f:67:00:06:dc:ef:ed:4a:23:
                    8c:00:a0:5b:2d:fb:6f:9b:b2:b9:fe:26:6f:5d:a1:
                    ad:c1:d0:8d:ea:94:e2:91:24:88:2c:98:eb:13:0d:
                    51:a3:f7:0e:26:34:ce:c1:54:bf:74:30:45:c3:26:
                    ac:20:81:bd:32:50:55:5c:fc:da:aa:e0:fb:db:97:
                    38:92:c4:f1:9a:f5:24:8f:64:45:34:40:01:54:a2:
                    88:f5:92:d1:09:0c:ac:50:37:d4:5b:74:da:98:8c:
                    2a:21:5f:71:a3:85:ae:fd:41:48:3c:f8:0f:c1:84:
                    d2:29:38:15:5a:3f:17:70:7f:de:c1:11:69:32:8e:
                    d9:14:68:e4:fe:14:e2:d7:99:b7:85:f4:87:bd:99:
                    e7:3b:0a:6e:a2:7c:51:2c:60:38:e8:0b:4b:3c:9a:
                    1d:8c:61:ea:0f:3b:bc:a0:74:95:8c:45:56:cf:5a:
                    be:92:04:59:be:64:c6:6f:be:48:39:29:76:43:5d:
                    78:d8:d9:c0:3e:25:88:78:4d:5c:a9:ec:5e:e7:7e:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:F5:61:93:88:F4:B4:39:01:75:24:9A:DE:6A:7B:13:68:DE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/14ec2771-9c39-3142-adda-d281e823bdcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:2019::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:82:32:bf:3f:38:3b:3a:8f:49:c1:c2:09:90:3c:a4:7a:
         ff:ee:73:85:96:b3:10:d4:5e:38:00:4a:64:10:c9:02:82:8a:
         54:c5:a5:23:05:41:d1:b0:86:4f:57:3a:7b:be:95:88:bf:50:
         d2:49:82:6f:b9:83:5d:62:65:87:b1:1d:0d:84:cb:2c:21:eb:
         58:fa:19:b4:98:ad:bb:67:47:bb:c7:78:48:a3:12:64:f1:29:
         44:f7:bb:12:b9:02:ed:d9:c3:59:ac:63:26:93:b1:a0:9a:f7:
         7e:cf:11:64:2a:de:c3:5e:2c:2b:7b:02:a1:83:f2:be:60:73:
         ee:68:a5:4c:93:5a:44:95:c2:b9:19:45:5b:17:75:64:33:d3:
         20:ea:2f:c3:70:82:7d:14:bd:fc:7a:2d:6a:c5:ba:f2:84:d4:
         16:c4:1c:8e:69:94:26:c6:1a:c5:26:4e:78:86:8c:cc:b1:19:
         82:9a:e0:73:63:2d:bd:2a:60:f5:15:2c:1d:5e:cc:d2:f8:b4:
         16:ac:90:5a:57:b0:46:d4:ae:e9:e2:b3:58:24:9a:9e:1f:b0:
         f6:33:8a:f8:26:6b:0b:c3:72:2a:62:d1:83:bc:3d:a9:da:37:
         17:35:c4:b9:5e:9c:84:ca:79:07:7b:2f:21:27:f9:c1:37:f9:
         91:62:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org