Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fa71f179-0f89-33af-96aa-38b250df367c.roa
File:                     fa71f179-0f89-33af-96aa-38b250df367c.roa (raw, json)
Hash identifier:          NQOSw8KVHbjid/K8hF6zLkAfqExNIf9uMa7RSPPB554=
Subject key identifier:   5C:67:72:E1:3B:32:85:32:3A:64:FE:68:4E:29:53:B7:4E:42:B6:74
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328576D51CC73C042CFC171320A680A
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fa71f179-0f89-33af-96aa-38b250df367c.roa
Signing time:             Tue 31 Mar 2020 19:21:15 +0000
ROA not before:           Thu 04 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        192.0.128.0/17 maxlen: 17
                          192.0.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:32:0a:68:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Apr  4 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=862d3cbd-3881-4021-aac7-1f945b2c4311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:2a:dc:3c:28:80:6b:52:2f:e0:d3:38:22:
                    33:05:16:99:3a:94:54:6a:43:46:dc:3b:a7:f6:53:
                    de:2f:45:83:25:29:20:0b:bb:64:b7:c2:be:c5:c4:
                    bd:25:38:40:30:b0:02:b3:21:95:3b:07:48:c5:54:
                    a4:e2:27:76:99:bb:ca:55:8a:5f:77:b0:a7:f3:d1:
                    fe:7a:37:46:11:3a:fa:74:0d:71:35:32:8e:87:e6:
                    c1:fb:d7:cb:ac:11:e4:4d:6f:b8:90:6e:31:be:a8:
                    f9:57:db:75:c9:4a:44:2d:8c:16:3f:71:31:47:76:
                    b0:3b:e8:85:18:4e:6f:76:cd:5a:17:e1:cc:03:4d:
                    23:49:fb:01:66:0d:c2:99:0a:47:66:6e:88:c3:12:
                    37:f9:6b:23:cb:eb:c7:a3:59:86:d2:de:fb:4f:24:
                    da:37:52:fa:1e:8f:ff:0d:4e:81:f5:14:a5:f6:74:
                    c9:fc:b5:30:c4:22:0f:04:db:62:19:f9:57:fd:33:
                    da:2a:f9:2e:9c:d6:3c:89:04:54:e8:44:8c:ab:a4:
                    a7:11:31:3f:cf:5c:c4:3c:b5:55:d6:b9:ce:92:6b:
                    74:32:63:42:ae:cf:d8:67:e7:5d:b8:3f:66:ef:6f:
                    b2:cf:58:55:91:2d:41:7a:27:53:f8:9c:38:47:80:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:67:72:E1:3B:32:85:32:3A:64:FE:68:4E:29:53:B7:4E:42:B6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fa71f179-0f89-33af-96aa-38b250df367c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:c1:7e:4d:76:58:85:ab:1c:dc:95:4b:fd:01:1c:59:7a:
         bc:3b:3a:2a:56:28:b2:b1:3c:db:15:45:05:76:2e:9f:3d:8a:
         ba:dc:cb:cc:d2:e9:52:a4:75:3c:1f:3a:9f:59:90:b6:07:ce:
         56:c3:72:01:80:0f:47:c5:34:3b:8f:8c:47:3d:bd:04:99:70:
         c5:5f:2e:be:e4:21:7e:ca:ef:b7:a2:4b:c0:6e:6b:17:2f:9b:
         bc:eb:4d:1a:1a:c2:71:dc:84:b2:88:2b:81:99:54:ed:5a:bf:
         a3:85:df:4a:73:70:fd:86:b7:5e:d3:3c:86:e3:dd:b1:8e:52:
         11:c7:78:5a:1b:e2:2f:57:9f:ad:7d:15:6b:35:48:7b:62:17:
         82:83:87:0b:e2:a5:2d:44:ae:ad:d7:b6:76:ac:21:bd:b3:f8:
         5d:56:ae:e2:7e:f9:c7:55:0e:e5:f2:e9:e8:1f:58:d0:2a:20:
         c6:2c:e0:e3:e2:89:2b:a7:54:0e:7e:ce:b0:73:a1:a0:b2:80:
         d5:d9:44:0c:f9:d2:18:11:06:01:6a:d3:cc:dd:68:55:b2:fe:
         8e:c3:6d:f8:d2:8e:82:d6:63:de:14:3b:8e:54:49:3f:62:c3:
         bb:ea:0f:c9:fd:66:00:0a:3a:99:ed:1b:d1:f9:4f:2d:78:eb:
         b2:ef:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org