Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/efb6818c-14c9-350b-9588-d1590147dcbd.roa
File:                     efb6818c-14c9-350b-9588-d1590147dcbd.roa (raw, json)
Hash identifier:          fq0WCLJQL9E73VHgHdBNu5swvI60h/bGAMnmPOZhwUU=
Subject key identifier:   A3:2C:EE:D4:FB:45:60:8A:19:D4:CB:1B:29:C3:58:6D:5A:BE:AF:A2
Certificate issuer:       /CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F93476CA
Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/efb6818c-14c9-350b-9588-d1590147dcbd.roa
Signing time:             Fri 20 Mar 2020 18:28:50 +0000
ROA not before:           Wed 18 Mar 2020 04:00:00 +0000
ROA not after:            Thu 23 Jun 2022 04:00:00 +0000
asID:                     21709
IP address blocks:        69.54.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f9:34:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73
        Validity
            Not Before: Mar 18 04:00:00 2020 GMT
            Not After : Jun 23 04:00:00 2022 GMT
        Subject: CN=61d6ba47-e409-4f7e-87fe-4831ca3c85bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:0b:14:8e:50:cb:87:29:af:c4:93:74:ec:
                    4f:3e:13:b0:32:ff:6b:d0:68:53:2f:2f:a2:b1:22:
                    a0:d3:1b:92:83:a9:e6:9a:bf:3a:51:7e:b4:ed:8f:
                    28:5f:f9:be:bc:1f:d4:20:a3:6e:97:f8:74:7b:8f:
                    4c:94:71:8d:31:4d:55:d3:78:47:95:ee:c2:d7:8d:
                    c1:ff:63:3c:55:49:7c:42:89:60:78:56:bc:99:9f:
                    85:da:b3:5b:ad:b4:e3:ed:c2:5d:4c:23:11:ab:b1:
                    b2:03:88:ee:0b:c9:ec:f6:bc:50:68:03:67:17:02:
                    38:5a:d4:3c:f6:54:01:95:33:c9:56:8f:7a:7a:87:
                    16:d9:18:70:75:79:cd:55:14:eb:6c:86:27:cc:5d:
                    9b:89:dc:de:80:5d:ed:0b:cf:51:41:09:98:f2:8f:
                    af:b9:56:59:a5:20:5b:a0:2c:5b:25:78:66:73:72:
                    42:82:7e:14:64:d5:72:d8:9f:50:22:a7:f6:28:0c:
                    68:15:e3:c1:60:dd:29:a7:0e:72:1d:e1:61:41:c0:
                    7a:3f:e2:08:e7:1c:c4:4b:8e:90:31:7b:88:02:b3:
                    7f:52:0f:b2:23:48:db:9f:2a:24:40:fd:eb:31:22:
                    1a:a2:ed:ab:b8:65:70:0d:c7:6e:59:87:50:fa:f3:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:EE:D4:FB:45:60:8A:19:D4:CB:1B:29:C3:58:6D:5A:BE:AF:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/efb6818c-14c9-350b-9588-d1590147dcbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl

            X509v3 Authority Key Identifier:
                keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fa:a8:e8:c1:15:a6:2b:de:ba:5c:21:77:49:5f:2e:89:16:
         b4:af:cc:d5:c0:cc:eb:55:02:3f:93:f3:f2:f8:9f:67:62:e3:
         35:fc:25:f8:99:93:8a:ec:e7:e5:d0:fb:c8:7d:c0:b4:04:ac:
         0e:de:0f:e5:55:6a:5d:f4:57:13:b1:d7:9a:cd:b3:fe:65:c7:
         32:3f:8a:9c:19:78:9e:b0:e6:cd:9d:a9:51:99:f0:25:88:57:
         57:db:27:ce:46:41:e7:83:ae:9c:98:d7:08:91:39:a9:35:c1:
         b2:ba:5a:96:11:06:93:5b:55:32:75:21:fc:bb:0a:d5:dc:bc:
         5c:af:31:11:4c:73:c7:35:e2:59:06:2a:0b:96:6a:41:19:48:
         91:fc:b6:95:51:60:b4:a1:2c:54:4c:35:74:04:46:da:df:b0:
         ce:81:a8:4a:9b:91:e4:e6:15:25:76:3d:f0:d2:b7:f7:f2:4a:
         91:72:37:5c:62:19:3f:02:58:3a:12:c0:d7:86:47:83:15:21:
         d8:91:84:56:81:af:eb:6d:eb:b1:8b:a8:5d:ad:9c:9b:d2:aa:
         10:37:9c:fe:99:af:8d:e3:d6:d4:fb:aa:78:f3:93:0d:1a:b6:
         c2:c0:c9:43:ea:e7:83:fa:17:f7:77:97:ee:f8:f4:06:d1:2a:
         ef:0f:4c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org