Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/0a6ef838-a1fa-3313-bf65-99271fb9ad71.roa
File:                     0a6ef838-a1fa-3313-bf65-99271fb9ad71.roa (raw, json)
Hash identifier:          nCb4zJvQg88clKLDYsJNUuyaoadz4Uv4vCYxjntC4rU=
Subject key identifier:   88:9A:70:38:5E:67:C9:1E:3E:1E:11:14:51:AC:00:FB:B3:37:B9:B1
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328576D51CC73C042CFC17132113A8F
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/0a6ef838-a1fa-3313-bf65-99271fb9ad71.roa
Signing time:             Tue 31 Mar 2020 19:28:42 +0000
ROA not before:           Thu 04 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        198.84.128.0/17 maxlen: 17
                          198.84.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:32:11:3a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Apr  4 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=95f5dac0-0c1a-418b-9c5a-cc5cdc8f58b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:06:81:b3:d8:c4:4e:7b:94:ae:34:a6:3e:
                    31:86:24:e5:eb:65:d2:9c:1a:e2:78:42:8c:f9:aa:
                    56:ff:dd:31:02:60:69:20:39:a3:f5:58:17:a6:45:
                    19:b3:12:3d:3c:a6:df:e9:8c:56:81:ed:22:24:cf:
                    88:c4:82:9f:2b:a4:6b:cc:41:75:0b:0a:23:59:80:
                    55:7a:18:f6:4c:39:c5:45:02:d9:f2:51:1d:bf:c2:
                    63:89:28:d4:17:e5:46:53:21:c8:97:e7:bc:cd:b8:
                    8c:8d:4a:28:a1:09:8d:0b:37:cd:cb:03:9f:78:39:
                    97:a9:4e:8b:dc:ca:83:97:4d:0f:aa:33:0d:1d:fc:
                    d4:0d:e9:9d:a8:6b:4b:99:0d:f4:12:05:6d:1f:4f:
                    80:c2:16:9c:da:99:7d:d4:06:86:a4:99:22:ea:e0:
                    13:3b:57:04:9e:c6:e7:75:15:ec:99:e5:aa:c4:ab:
                    f0:24:1c:f5:9d:b8:58:da:9e:45:52:1d:fd:e6:30:
                    33:84:dc:e2:f6:cc:88:14:35:71:15:44:05:d9:65:
                    50:c1:08:9f:0b:63:a5:10:15:ed:bd:00:79:9c:8c:
                    65:a9:e3:22:ff:4c:8b:27:f9:63:a5:1b:8e:6f:7d:
                    04:70:a2:1a:ea:15:a0:20:71:a2:58:41:55:51:25:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:70:38:5E:67:C9:1E:3E:1E:11:14:51:AC:00:FB:B3:37:B9:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/0a6ef838-a1fa-3313-bf65-99271fb9ad71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.84.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:5b:21:66:77:7a:2d:0a:b1:45:7b:61:53:a0:a7:2c:1f:
         c5:1f:a1:f2:88:5a:e8:8b:22:6a:3f:9b:db:65:d0:f4:37:51:
         e6:43:f5:f4:ce:cd:a2:6d:b7:a8:21:bd:d8:38:98:87:7f:1e:
         f0:4e:38:8a:26:a3:de:da:0d:f3:6e:b5:cf:1c:ab:39:a0:30:
         2d:04:d3:14:87:99:53:d1:06:fd:8a:a8:98:4c:5d:5a:16:a1:
         79:6f:8c:8d:81:62:9b:a8:db:87:d1:ef:b3:8d:44:7d:f1:ff:
         29:2f:36:24:61:3b:fb:7d:dd:7d:65:63:ef:c9:0f:c8:45:98:
         94:00:97:33:c8:4f:5c:03:08:e0:df:a3:00:01:e6:1f:11:5b:
         77:63:9a:a6:9c:f1:4b:82:c8:d9:89:37:8b:b1:74:b5:33:83:
         53:d6:f8:2f:15:6e:50:61:dc:2f:38:80:0f:cf:ea:e8:d1:da:
         44:a9:54:da:73:a7:0c:86:66:c1:fa:36:6b:5a:f7:a7:d1:b0:
         c8:d0:cf:54:e3:0e:6d:28:65:49:b8:92:4a:e8:dd:84:1b:79:
         d2:c0:3f:0f:38:4c:9f:aa:af:f1:a2:af:a1:fd:d8:83:06:78:
         e6:75:0f:a1:dd:bd:de:56:6a:37:2c:4a:ac:ff:ec:1c:cb:2b:
         8f:d8:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org