Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/6af4f9af-14ff-36d6-9dfb-eca3196865e5.roa
File:                     6af4f9af-14ff-36d6-9dfb-eca3196865e5.roa (raw, json)
Hash identifier:          80KVBfsN0EsAXyDNKj/nVSLxrgx1aT79xXslbuwj9Tw=
Subject key identifier:   3F:7B:2B:BC:96:DC:FD:DC:33:D6:19:1C:96:40:9C:4B:BB:4C:AA:54
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328583835FB5C13EEA42C5B220CC180
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/6af4f9af-14ff-36d6-9dfb-eca3196865e5.roa
Signing time:             Thu 23 Apr 2020 04:00:00 +0000
ROA not before:           Thu 23 Apr 2020 04:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        208.71.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:35:fb:5c:13:ee:a4:2c:5b:22:0c:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Apr 23 04:00:00 2020 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=0117734f-cef3-4a02-9f2c-de4767a2d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:5c:67:20:62:db:0c:38:25:92:e1:a4:5e:
                    55:f4:8f:e6:bc:52:fd:78:de:56:d9:94:63:75:a6:
                    df:26:aa:37:07:dd:48:86:46:af:07:48:1d:71:bf:
                    c5:af:4d:5c:ed:43:e7:bb:b4:c4:82:94:de:36:73:
                    3c:14:85:f4:54:98:4d:b2:d0:b3:ef:4b:10:5d:69:
                    0a:5e:93:05:d7:12:fb:f4:4c:65:77:6d:83:d2:2d:
                    42:37:96:8f:ba:4f:cd:5f:e8:42:d4:30:1d:3a:e1:
                    24:96:ec:3d:15:2e:18:1b:ff:fa:3f:b4:67:8f:6e:
                    0c:84:1c:89:38:7e:3b:1a:e9:b2:cb:53:31:2d:98:
                    b4:2a:2e:97:5d:2c:c0:06:57:ee:40:0a:98:2c:e0:
                    e7:c8:24:1b:91:b1:e5:77:02:be:62:32:62:c4:ba:
                    56:64:73:0e:cd:83:25:bf:13:c8:96:d3:d6:06:e1:
                    3e:38:e7:e9:b0:1f:f1:f0:da:aa:17:03:40:e1:17:
                    24:14:c5:a5:47:3f:d6:af:09:97:a4:eb:38:fc:3f:
                    17:91:28:e2:3c:e7:43:3f:74:b1:bf:0c:12:8e:2a:
                    00:46:60:11:e9:c9:74:2f:34:5a:b0:bb:dd:f4:19:
                    7e:64:e5:b0:f7:30:f3:e2:9c:eb:1b:00:57:b3:8e:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7B:2B:BC:96:DC:FD:DC:33:D6:19:1C:96:40:9C:4B:BB:4C:AA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/6af4f9af-14ff-36d6-9dfb-eca3196865e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:02:88:61:2b:70:64:d5:df:f6:4d:45:4f:6f:24:7d:54:
         5b:9e:b8:fb:85:4c:15:f5:ba:ee:14:d3:41:e7:1b:76:c0:c8:
         0a:94:e9:f4:8f:67:c6:93:33:74:79:c2:b9:87:08:09:ee:7b:
         8f:7d:4f:59:5a:c6:53:31:32:3e:88:05:a8:17:31:9d:a9:bc:
         a2:d0:14:01:9f:f0:c5:1a:ae:2f:fc:f3:6d:fe:6e:6d:c2:73:
         e8:e5:17:ea:cf:fc:cc:d8:d8:3b:4f:2c:97:67:57:f3:d8:69:
         76:89:8d:41:09:d6:d0:ff:20:ee:1f:13:ac:ca:1b:92:57:3e:
         0a:bd:d3:da:67:bd:14:f7:91:30:a6:7f:a2:fe:1b:13:14:4b:
         e7:ac:9f:25:46:7b:e3:77:05:30:09:c6:f0:15:7d:be:53:d8:
         ee:90:08:e1:21:4b:c3:47:ff:6f:a0:82:b2:83:08:12:0c:9f:
         8e:b7:3b:ab:49:dc:4c:08:c2:ab:59:0f:9b:ae:7f:b9:b4:67:
         8d:a9:dd:4f:07:5d:45:e4:07:a7:a3:11:7d:ec:19:bb:49:d6:
         ac:24:cd:d2:28:d5:1d:a3:c6:e3:0f:72:c0:3a:51:96:d3:de:
         0b:26:59:99:39:97:46:9e:b4:be:9f:e2:6b:61:57:51:66:90:
         6e:33:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:47 2024 by rpki-client on console-fra.rpki-client.org