Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/fda47f4d-a8e5-3dce-a060-4469da0bee87.roa
File:                     fda47f4d-a8e5-3dce-a060-4469da0bee87.roa (raw, json)
Hash identifier:          bEZb6VCYi2s03V+NbKgFOn4+Tz7vug78BK3rcHBCe5k=
Subject key identifier:   75:BA:21:B3:D8:9F:7B:5E:D7:D2:40:FD:1E:C9:92:B7:3F:D1:2A:19
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC170EB4ED4D8
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/fda47f4d-a8e5-3dce-a060-4469da0bee87.roa
Signing time:             Wed 18 Mar 2020 01:42:56 +0000
ROA not before:           Tue 09 Apr 2019 04:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     3384
IP address blocks:        216.93.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:eb:4e:d4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Apr  9 04:00:00 2019 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=88aad87c-3328-4a1c-b089-9848da137a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:de:5a:16:e2:05:15:1b:8b:57:4f:08:56:
                    b3:5e:5c:f1:36:ff:ff:28:89:f1:8b:31:d0:67:13:
                    e9:5b:8a:ec:e6:b8:68:fb:95:5b:6d:40:ec:29:4a:
                    98:e4:f9:09:ae:fe:ec:38:cd:07:84:00:7f:9b:ea:
                    0b:98:da:f2:ab:dc:80:20:15:3f:25:a4:1c:d7:cd:
                    00:62:e4:03:9a:46:7d:c2:f1:a4:6a:bc:6c:c3:00:
                    62:bd:04:42:4b:c2:a1:a3:1d:39:e5:ef:b3:55:ef:
                    44:bc:af:9b:03:e1:f2:da:06:30:4b:86:24:a5:a9:
                    f6:8c:f1:d9:39:73:b4:5a:46:f1:18:c2:d5:d1:35:
                    e4:4b:07:7e:be:22:0b:9b:06:88:07:15:2d:86:ac:
                    83:a4:d7:b3:a7:9b:dc:94:cf:d5:88:ca:96:8e:93:
                    f0:97:c9:30:8d:e7:5f:e5:5e:9f:79:32:71:91:a4:
                    2d:f7:27:87:00:05:ad:f1:78:b1:35:e3:85:f5:bc:
                    92:14:c8:0d:c5:c4:17:4e:87:7b:18:f9:69:ab:41:
                    bb:a0:c2:f4:80:3d:a3:bc:d1:97:e8:13:4a:14:cc:
                    26:63:8a:d1:96:e6:a7:8b:ea:45:53:3e:e4:93:cc:
                    24:59:a8:a8:24:0a:e4:00:17:0a:ed:8f:a6:a2:d5:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:21:B3:D8:9F:7B:5E:D7:D2:40:FD:1E:C9:92:B7:3F:D1:2A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/fda47f4d-a8e5-3dce-a060-4469da0bee87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:55:10:a7:ff:fd:74:8f:d9:cb:62:77:e3:20:11:94:d6:23:
         ed:19:a6:87:07:60:ff:ec:53:88:7e:c4:77:70:6d:d1:36:99:
         97:89:5a:9a:72:47:55:68:1f:33:39:a0:00:00:85:62:9e:d9:
         7c:4e:c2:58:a7:20:48:23:0a:d6:ad:1f:de:d4:ce:54:bd:78:
         bb:83:8d:5d:6c:8a:80:51:5b:ab:81:5e:06:be:92:2f:d2:90:
         9d:38:bf:87:44:d5:70:61:10:85:78:bf:d2:08:a3:96:44:59:
         37:66:8d:b8:45:64:8e:71:a5:ba:1f:9f:b6:bc:b2:5e:3c:40:
         44:64:ca:a9:37:cc:dd:80:07:3d:d7:58:11:da:7d:94:d9:9c:
         22:da:17:9f:b4:f6:53:76:f8:d6:30:38:eb:bb:2c:dc:b1:93:
         2e:81:2b:de:c0:ec:61:1f:3f:25:33:42:2f:56:95:b9:31:2a:
         b9:9e:72:63:7e:f6:8d:ba:ce:6d:c4:e4:da:56:cc:b3:ff:9b:
         ac:55:64:e4:75:9d:ea:93:f4:eb:ca:c2:97:d5:2f:ef:c9:45:
         eb:fa:f1:94:38:af:a3:c0:98:a0:a6:e3:22:48:8b:32:b6:95:
         6d:09:50:93:21:bc:02:44:5b:73:a9:a3:13:dd:54:c6:9d:ed:
         70:68:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org