Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6e59ba78-283f-30d1-ab6b-06bbcc362f64.roa
File:                     6e59ba78-283f-30d1-ab6b-06bbcc362f64.roa (raw, json)
Hash identifier:          YtQfgQDiqo1g9YaluSqUMH1rigc3t9pclYdGOOnOJHM=
Subject key identifier:   87:B3:10:29:77:DA:A9:B4:8A:EF:88:B7:21:64:29:ED:E7:61:87:74
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328576D51CC73C042CFC1710E09D862
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6e59ba78-283f-30d1-ab6b-06bbcc362f64.roa
Signing time:             Tue 24 Mar 2020 19:34:18 +0000
ROA not before:           Mon 02 Dec 2019 05:00:00 +0000
ROA not after:            Mon 27 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        173.199.8.0/23 maxlen: 23
                          173.199.56.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:0e:09:d8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Dec  2 05:00:00 2019 GMT
            Not After : Jun 27 04:00:00 2022 GMT
        Subject: CN=91ed0b63-11a9-4cc3-ba2a-ca055b2684c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:bc:44:2a:0e:a2:85:65:72:93:f3:6a:87:
                    30:8e:eb:cc:81:bf:26:4b:96:6b:05:93:39:2b:47:
                    09:ef:22:db:01:19:ff:1e:78:46:47:eb:11:29:9c:
                    d9:6e:00:be:b2:80:b2:ba:8f:c4:e0:03:f7:ab:fb:
                    51:d5:10:98:26:26:08:a3:48:3f:95:2a:27:d1:de:
                    69:3a:71:c3:5f:f4:9c:e5:64:69:52:fe:15:76:61:
                    e5:9b:a8:d2:b0:91:17:07:ae:48:4d:99:ef:db:40:
                    62:4d:02:d4:b0:5a:60:41:72:b0:77:36:72:d8:c9:
                    27:a9:8a:3e:26:45:cf:e2:ec:62:4b:12:54:5a:24:
                    5e:0b:43:58:72:58:a9:04:cc:b4:79:ba:93:58:cf:
                    74:5b:17:26:52:54:c7:ed:03:0b:f8:34:d9:b7:33:
                    4c:ae:e3:b2:a2:fb:4a:25:25:73:2d:7d:da:26:d6:
                    16:00:f1:0c:cc:d1:4e:e8:c3:e0:9e:56:30:a2:e7:
                    5f:54:85:4f:b2:6b:25:6b:6f:87:7f:f6:e7:ae:04:
                    e8:b7:bb:b9:45:2a:8d:cd:d0:04:66:1a:04:1e:3a:
                    d4:34:f8:44:3e:54:54:30:c2:fd:10:7e:8c:e1:f3:
                    c4:54:2b:47:2e:c7:14:cf:38:e6:73:77:2e:51:13:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:10:29:77:DA:A9:B4:8A:EF:88:B7:21:64:29:ED:E7:61:87:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6e59ba78-283f-30d1-ab6b-06bbcc362f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.8.0/23
                  173.199.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:ef:45:13:9a:2e:1e:2a:a7:5c:ab:f2:86:c5:8e:62:2d:
         66:9b:d0:2a:2c:71:aa:2e:40:5f:75:48:33:54:dd:dc:71:df:
         cc:9d:ef:d0:98:90:a8:db:22:97:5d:f1:fe:c3:42:f1:03:f5:
         f9:f9:72:76:af:ce:a8:8a:9b:fe:78:4e:9c:1c:bd:64:71:d5:
         62:22:6b:ba:e3:88:86:a0:6f:2b:06:fd:14:b1:37:50:37:48:
         2a:c0:f1:dc:b0:25:ce:1e:a0:88:13:d6:a8:f7:84:da:16:2b:
         ef:e6:d8:db:51:c8:cb:3a:7b:8e:e4:9a:8a:4e:5c:55:6c:72:
         e8:07:0f:16:21:44:b8:9a:88:a1:7b:63:9f:6c:e2:16:7b:3c:
         8a:0c:36:2f:13:7b:50:33:5b:d8:10:10:0a:ce:3a:07:18:9f:
         8f:b1:04:46:e4:60:68:35:6e:e2:28:2a:88:6c:ec:d7:f3:73:
         87:4d:ac:2d:93:53:c8:5c:3c:fa:a4:7c:ed:8a:5e:91:01:fb:
         48:20:21:55:54:c0:1e:ff:0c:dd:48:57:c1:6b:94:65:9d:74:
         41:52:5a:9d:80:69:14:40:f5:e1:1c:6b:17:37:1d:f4:d7:00:
         fb:8e:bb:de:10:a3:c2:e7:ef:63:30:0c:0e:a8:6d:76:fb:40:
         92:97:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:32 2023 by rpki-client on console-fra.rpki-client.org