Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/37d33917-6eda-3344-91b5-3d80d2d80e13.roa
File:                     37d33917-6eda-3344-91b5-3d80d2d80e13.roa (raw, json)
Hash identifier:          0B6miwVr0r9nkFXm6vqMtwpAZr9rtQ2rMGJ3u0okzPk=
Subject key identifier:   B9:87:FA:F0:2C:A7:E2:AF:96:0A:1B:08:FA:D0:2B:71:27:FA:27:BF
Certificate issuer:       /CN=e42a3de7-584f-4010-acae-b7935ed3f602
Certificate serial:       010D0C9F4328576D51CC73C042CFC1706902E089
Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/37d33917-6eda-3344-91b5-3d80d2d80e13.roa
Signing time:             Fri 21 Feb 2020 18:29:21 +0000
ROA not before:           Fri 21 Feb 2020 05:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     14086
IP address blocks:        206.126.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:69:02:e0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602
        Validity
            Not Before: Feb 21 05:00:00 2020 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=6f4abe70-cc87-4071-8318-fcb0059357d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:48:2a:d1:5e:33:91:04:60:46:4e:85:d8:
                    ae:78:63:0f:48:7f:b2:70:30:a1:22:f7:9b:9e:cd:
                    0a:b3:cb:73:4c:05:ff:3a:e7:4e:d5:b1:aa:c5:73:
                    7a:9a:48:c2:08:23:5c:68:0a:a8:2c:f1:90:82:92:
                    ab:59:3e:d1:17:e3:3a:b5:f1:49:b8:73:d5:eb:d4:
                    2c:59:1c:02:e7:16:f0:24:06:c3:9e:6c:d2:08:11:
                    f9:92:c6:0d:a5:64:3d:39:24:0a:60:b0:ae:cc:fe:
                    7a:16:de:08:7a:8b:aa:ce:96:2d:90:ae:60:f6:9e:
                    78:41:04:a4:66:a2:d7:7a:a9:af:b4:4f:3d:58:48:
                    1f:c6:d5:7b:a8:f4:89:48:9c:97:40:fd:7f:08:45:
                    e1:a7:dc:b3:49:0d:23:c5:2b:5f:47:65:79:e7:ee:
                    fe:ba:97:b9:cf:4a:9d:db:1f:24:10:ce:9c:dc:4b:
                    21:94:77:41:0f:b5:a9:24:b6:3c:ca:56:4e:15:61:
                    92:13:3c:41:c9:03:f5:62:40:70:30:4b:6d:3d:0c:
                    ec:e3:9f:bc:d0:9f:51:ff:c7:35:ea:ea:2a:d9:ec:
                    94:e4:05:33:81:33:79:d4:2b:16:83:71:c6:3f:0a:
                    4e:ea:82:f8:43:c8:97:b7:0b:78:0e:a5:e3:f2:67:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:FA:F0:2C:A7:E2:AF:96:0A:1B:08:FA:D0:2B:71:27:FA:27:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/37d33917-6eda-3344-91b5-3d80d2d80e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:bf:a3:28:5f:83:42:ff:a9:5e:d1:6f:6c:f8:ee:7c:c4:
         6e:29:78:ce:e8:f5:44:71:ad:d5:23:f9:6d:df:71:6d:0c:df:
         bc:f8:53:70:a0:86:ef:4c:06:88:4f:1d:26:b4:0b:f2:4b:c7:
         d6:69:ee:92:83:56:63:a0:e4:a3:3e:0a:2f:c8:8d:c9:39:22:
         4e:54:31:4f:da:9a:ee:e2:07:47:df:3a:af:2c:79:72:d0:d0:
         c8:fb:b0:d0:a4:46:41:cd:c1:fb:07:10:7f:5d:48:1b:d7:3e:
         43:48:ac:4b:cf:d8:f1:a2:fc:0c:4e:90:c9:6b:ad:ba:f2:85:
         91:b2:36:f0:52:f7:3c:92:82:34:14:6f:0a:1f:74:5c:03:36:
         b8:7a:a3:c3:82:37:65:f5:ce:53:4d:27:26:6f:63:45:70:68:
         db:53:18:e0:9f:80:8e:c6:89:e4:ff:9b:98:ab:2c:56:c5:03:
         5a:60:32:9d:42:dc:5d:b2:ca:db:d0:98:4d:60:b7:8a:0c:0d:
         9c:46:31:e9:b3:20:ba:dc:96:a4:19:06:fd:48:ee:49:1c:df:
         8e:20:d0:6e:ca:2b:0e:bd:46:97:e8:a9:e0:b0:6a:26:8e:96:
         e1:60:f5:43:74:29:11:f2:4a:13:04:d0:56:88:4e:e5:b8:57:
         46:59:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org