Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/2a1f2d80-a620-33f5-a444-ca4cf98d1ec1.roa
File:                     2a1f2d80-a620-33f5-a444-ca4cf98d1ec1.roa (raw, json)
Hash identifier:          GnTMIs+qtGzdHCCvnhhQowLQGkY5CfULHSo7vr7B6Ko=
Subject key identifier:   45:05:A4:22:47:58:EC:06:FD:D2:3F:6A:33:CB:E8:A0:47:A0:54:94
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC170EB516C5A
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/2a1f2d80-a620-33f5-a444-ca4cf98d1ec1.roa
Signing time:             Wed 18 Mar 2020 01:45:46 +0000
ROA not before:           Tue 09 Apr 2019 04:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     22267
IP address blocks:        208.118.228.128/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:eb:51:6c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Apr  9 04:00:00 2019 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=b77e4b5a-8342-42ff-ae0b-15096a8b349b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:7b:bb:b2:52:0a:e9:a3:d0:61:1a:b8:01:
                    14:38:08:29:fa:f8:9f:36:33:5c:8b:33:fc:28:b4:
                    ff:ee:a6:be:ab:a2:ca:fe:4b:a6:88:b7:95:ed:77:
                    3a:82:c4:47:ff:62:14:e1:97:30:ab:c0:61:3c:c5:
                    7d:af:e0:00:f5:10:c6:a1:f3:f6:2f:2c:34:93:d6:
                    a6:c2:60:3f:de:0e:36:c0:ec:6f:19:a5:4b:6c:da:
                    41:1e:29:cb:b7:85:45:97:2c:30:37:d6:4b:55:58:
                    e2:28:b7:08:77:88:c6:0a:e4:c9:b8:92:cf:f8:ec:
                    7e:cd:5c:31:c4:7d:5a:39:e7:c8:43:19:ad:12:9a:
                    b1:71:f4:a0:49:32:9d:36:b4:b1:39:7e:0b:1c:83:
                    4b:0f:3c:ea:90:16:de:17:15:95:21:68:8a:95:91:
                    c3:f3:d1:5c:46:7a:4c:d8:a7:da:f8:41:d8:1a:78:
                    2d:bb:9e:11:3b:b8:62:8c:9e:ad:89:00:db:a3:9e:
                    bf:95:5f:cc:9d:7e:ed:93:da:19:ce:9d:1c:6e:19:
                    3e:87:e8:bf:84:8a:03:94:12:6f:36:0c:4c:ac:ce:
                    9a:d4:68:c9:94:aa:33:ca:fd:2c:b3:4e:3b:3a:aa:
                    5c:69:3e:9e:b6:a0:ba:35:f0:a2:9e:ac:12:74:d2:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:05:A4:22:47:58:EC:06:FD:D2:3F:6A:33:CB:E8:A0:47:A0:54:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/2a1f2d80-a620-33f5-a444-ca4cf98d1ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.228.128/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:4c:4a:dc:59:58:89:68:8f:92:cb:96:d5:c3:9b:b9:56:
         4f:a5:64:11:d8:85:16:81:c4:a9:9c:10:fe:f0:78:cc:96:1a:
         70:ac:42:99:79:65:dc:e2:1f:93:b8:57:cd:90:b9:7a:d4:6e:
         6e:a1:00:c0:88:49:08:98:da:d3:46:5a:6d:ff:05:8b:2a:7f:
         d6:03:11:c3:9d:b8:03:8c:b9:28:ce:e2:b6:88:3e:43:da:55:
         46:b9:0a:d5:a7:36:f5:8d:8e:e3:a2:08:fd:f7:94:d0:be:6b:
         45:21:62:d5:a5:d4:1d:0f:87:4d:13:75:4a:90:39:cc:46:2f:
         d7:96:ec:02:2a:96:f4:b2:4d:91:13:55:a7:53:f7:ac:b2:2a:
         e8:e7:10:a6:10:e5:a6:31:8b:23:0d:e0:cc:8b:10:b8:43:20:
         0f:25:50:d1:ad:e2:50:b9:e3:b9:cc:96:b8:1c:2c:85:07:de:
         e7:50:0c:fc:b2:94:f5:29:cf:b1:23:03:1b:d5:7b:ca:81:73:
         5a:5e:85:07:7e:14:f7:25:0c:7b:ef:0d:9b:64:3e:b6:e6:dc:
         35:56:a6:33:4f:9f:e6:47:c8:69:c8:62:a9:27:4e:b6:f7:63:
         5a:2d:f0:18:57:23:3e:97:86:98:cd:41:5e:5b:6e:e2:a9:36:
         3d:6c:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org