Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/0f2705b1-e621-321b-93db-f940c25cbba9.roa
File:                     0f2705b1-e621-321b-93db-f940c25cbba9.roa (raw, json)
Hash identifier:          BOT+2a+DnFWG1ADuJU5Vi2lfuApcy3UmXCg/8G2meGc=
Subject key identifier:   F6:51:10:7C:0E:68:37:AC:73:ED:FC:75:A1:C3:87:E2:42:99:2F:64
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328576D51CC73C042CFC170EB61E659
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/0f2705b1-e621-321b-93db-f940c25cbba9.roa
Signing time:             Wed 18 Mar 2020 02:03:46 +0000
ROA not before:           Tue 17 Sep 2019 04:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     22147
IP address blocks:        162.219.98.0/23 maxlen: 24
                          162.219.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:eb:61:e6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Sep 17 04:00:00 2019 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=efe78c57-0a4a-4f24-bc04-30a2c3fe2c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:8d:06:23:2f:70:62:47:97:a1:fa:d1:31:
                    9e:0a:c5:ed:21:be:4d:b7:f3:8f:79:e5:10:3c:87:
                    6b:b0:ff:2e:09:b2:68:59:52:48:74:4e:94:0f:8a:
                    52:e9:3b:dc:9d:06:c9:26:3b:f5:3f:2e:bc:07:8e:
                    38:44:7f:67:18:94:d8:7f:20:25:03:b6:7a:21:16:
                    8c:e9:1b:4f:f4:a3:ae:43:b6:ba:52:29:af:8d:25:
                    59:82:0a:6b:fd:1a:a8:75:11:41:bf:35:01:e0:62:
                    d7:de:69:c4:ce:0e:72:0d:58:86:49:4a:5b:af:eb:
                    67:9b:9d:8d:ad:25:9b:2c:61:f9:8e:91:f0:64:72:
                    f0:3b:e9:4b:f8:92:65:8e:65:10:48:6a:cd:28:66:
                    82:45:6a:7b:63:a6:60:02:a6:28:96:09:1c:25:d1:
                    60:da:26:28:f9:9d:4e:75:bf:e5:53:74:00:64:1b:
                    ea:4c:61:5e:a5:8f:29:06:0e:1f:e4:7b:62:20:7c:
                    8c:65:ec:c3:f8:97:a8:0f:3d:60:c1:68:0d:b5:ff:
                    cb:a7:d5:17:7d:4b:3d:bf:ac:aa:7c:6a:76:b7:3f:
                    db:17:62:28:45:b1:dd:6a:72:54:1b:c3:0e:4f:c5:
                    12:e3:c9:01:1b:88:90:4b:15:5f:0f:3c:cc:92:10:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:10:7C:0E:68:37:AC:73:ED:FC:75:A1:C3:87:E2:42:99:2F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/0f2705b1-e621-321b-93db-f940c25cbba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:19:db:80:23:4c:05:fb:d0:24:fd:7c:48:b5:36:ce:ce:19:
         12:58:99:f3:65:65:9e:7a:d1:05:92:76:a8:c8:6f:9b:41:25:
         21:3f:8a:7e:65:ef:2e:ee:a3:2d:c2:74:b2:b1:15:a0:31:5e:
         6c:61:80:7d:b7:b0:f7:3a:41:ff:41:93:cf:69:f3:2d:7d:6f:
         25:01:3d:31:ca:93:4e:39:30:47:8f:78:99:39:37:de:06:0f:
         19:9f:a6:79:e9:ca:20:bd:15:2b:79:4a:91:5c:fb:5a:bf:7a:
         3a:77:75:ab:2a:c1:8a:86:43:2a:2c:44:44:a9:02:e3:da:07:
         1e:2d:53:83:a5:be:d4:6d:80:1c:23:e4:d6:ed:95:99:9e:71:
         82:9d:25:66:47:e0:55:d1:2f:f2:b7:04:88:6a:15:b2:ce:09:
         2e:3b:09:f6:47:14:fa:f5:46:3a:a8:bd:2e:e0:8b:3a:82:8b:
         b5:6b:3d:fd:00:00:38:a4:9f:b5:b1:f9:e2:be:75:de:98:89:
         c0:39:19:4d:02:f1:14:d3:c8:55:aa:e2:e6:cf:88:ed:9b:53:
         8a:6c:ac:ff:96:b4:05:8f:ea:ed:d8:84:7a:de:9d:28:0d:72:
         f8:ed:79:2a:16:13:a4:c3:48:47:23:a5:5a:60:7e:ef:92:7a:
         c6:93:26:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org