Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/466ec4d4-967f-30e7-82bf-0720fd052710.roa
File:                     466ec4d4-967f-30e7-82bf-0720fd052710.roa (raw, json)
Hash identifier:          lqM0AldToM28TCqu4Y8cptJ8+/FTilhsT9JrDhdm9DM=
Subject key identifier:   F9:2C:B3:18:57:17:E2:2C:68:44:72:BD:C0:7F:CB:4B:F8:47:FA:E8
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F52D0115
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/466ec4d4-967f-30e7-82bf-0720fd052710.roa
Signing time:             Thu 19 Mar 2020 23:42:12 +0000
ROA not before:           Mon 02 Dec 2019 05:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        173.199.29.0/24 maxlen: 24
                          173.199.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f5:2d:01:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Dec  2 05:00:00 2019 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=fa1eb003-f371-491e-ab4f-beb9a5d76d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:9c:aa:62:ce:20:1f:53:27:26:90:92:db:
                    31:c2:0a:f2:82:03:d1:5f:0b:db:73:6f:68:11:64:
                    92:b1:1c:f9:f5:98:f0:14:fb:ef:c7:68:5e:39:d2:
                    a3:84:00:de:c1:23:01:4a:f6:3d:1f:13:79:79:b7:
                    6b:72:38:8e:0f:f8:58:da:4f:e8:dc:b6:c9:0f:2a:
                    4b:a5:c2:2b:99:23:da:54:b7:60:91:d0:2e:c8:51:
                    82:58:b8:a3:d7:6c:dc:40:a0:6d:ad:fc:89:77:6b:
                    5b:27:8d:c3:2b:62:83:34:3e:31:31:bf:4a:3a:2b:
                    2c:ca:1f:be:73:61:05:8b:a2:5c:b8:1d:93:e2:9c:
                    c2:fd:40:d4:a2:29:f9:6a:23:51:47:9a:32:1d:b4:
                    e8:d6:ee:d7:83:1b:4f:96:4c:c4:13:02:d0:65:c5:
                    35:eb:25:8d:f2:0f:43:74:69:f8:9e:c8:24:a9:4c:
                    f3:8f:79:ef:52:08:35:df:82:47:fc:dd:e2:e6:01:
                    78:2e:4e:58:96:a3:f8:d4:e5:cc:52:d1:36:c6:00:
                    39:aa:45:4b:90:bb:8c:90:ba:ee:6e:b3:02:6a:d7:
                    5a:cd:d3:6f:5d:25:c1:d7:e0:51:6a:82:04:e7:22:
                    31:13:7d:bc:c3:e8:c5:c9:73:8a:e8:f0:b8:05:75:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2C:B3:18:57:17:E2:2C:68:44:72:BD:C0:7F:CB:4B:F8:47:FA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/466ec4d4-967f-30e7-82bf-0720fd052710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.29.0/24
                  173.199.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:43:97:e7:53:12:a6:f2:1a:65:76:d9:2d:76:a6:24:70:50:
         06:71:f8:1d:71:66:7c:ba:0d:e1:2e:cc:77:00:7a:9d:0a:58:
         53:c5:e3:e4:a8:91:76:08:f6:dd:7a:94:e2:ff:24:da:1a:a9:
         38:8b:e1:ae:ea:86:a4:14:b1:a9:ba:86:fd:a0:ad:68:96:15:
         be:ef:49:90:3a:ce:2f:cb:79:5f:18:20:3d:78:2c:3d:0d:c3:
         b1:c9:f7:5c:9e:b8:72:96:2c:7b:af:d6:63:ec:ba:7d:f5:74:
         67:9d:5f:73:4b:25:2a:c6:bf:e6:7b:06:df:84:1a:42:d9:3a:
         06:c1:9b:8e:3b:a8:2d:c0:10:8a:fb:52:91:1b:89:ab:99:5b:
         ed:d4:d9:b9:82:87:9a:05:6a:0e:fc:bf:0d:b8:60:42:cd:df:
         7e:19:46:28:bb:53:d1:20:c6:e9:21:65:e6:29:b5:bd:31:24:
         11:88:5e:9b:0e:25:95:c0:86:63:bd:75:2d:59:67:71:be:5d:
         68:ff:1b:33:75:99:c0:db:14:56:50:cc:e1:4f:3f:6d:04:86:
         59:3f:c7:a9:72:7f:4d:9a:69:b1:a9:bf:d5:18:3a:ce:50:af:
         88:ed:90:26:34:89:1b:d2:84:e4:b3:73:f7:69:95:4d:a3:ca:
         94:ab:6f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:32 2023 by rpki-client on console-fra.rpki-client.org