Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/9ff80f05-58aa-3b0f-b4a0-4c1878c5fa63.roa
File:                     9ff80f05-58aa-3b0f-b4a0-4c1878c5fa63.roa (raw, json)
Hash identifier:          XCJiQpwrcqYRCCenwHT6xvTKQL7ttpJfhgeJpGksFCw=
Subject key identifier:   6E:36:80:AC:56:2D:C8:84:F5:25:26:AB:87:AF:7E:24:29:D4:B2:79
Certificate issuer:       /CN=7610c78e-5229-41f2-9c50-5fa26c41e826
Certificate serial:       010D0C9F4328584314A8EBCAADBC668B3FA0FD00
Authority key identifier: 22:BF:C7:47:F1:EF:E2:6A:14:37:1E:81:3F:A3:BD:04:0B:DF:C7:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/9ff80f05-58aa-3b0f-b4a0-4c1878c5fa63.roa
Signing time:             Fri 01 Sep 2023 17:48:43 +0000
ROA not before:           Fri 01 Sep 2023 17:48:43 +0000
ROA not after:            Thu 30 Nov 2023 18:48:43 +0000
asID:                     11714
IP address blocks:        64.89.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:14:a8:eb:ca:ad:bc:66:8b:3f:a0:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7610c78e-5229-41f2-9c50-5fa26c41e826
        Validity
            Not Before: Sep  1 17:48:43 2023 GMT
            Not After : Nov 30 18:48:43 2023 GMT
        Subject: CN=c24ba84a-68db-4fab-a48f-2c17b19bfd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:17:e2:41:d1:c3:0e:dd:f7:c9:28:5e:ed:
                    b5:c8:c4:1d:0e:c5:a1:67:fd:49:e6:27:fa:9d:12:
                    a2:94:04:fe:18:ac:94:2c:b6:9a:9f:b8:ba:46:ac:
                    7c:9e:22:0f:b2:b1:0a:57:b6:da:d1:28:6f:43:0d:
                    1e:ef:fe:5e:3a:be:f7:dc:48:df:67:00:ea:0f:95:
                    1e:49:19:ee:83:c1:0e:db:a3:f3:ec:00:53:35:9f:
                    6d:cd:26:9e:a8:a1:5c:61:b5:c7:9b:4a:35:f3:bc:
                    a7:cf:f1:57:0e:10:9f:01:ea:87:bf:b8:27:61:2d:
                    61:29:8e:ee:9f:2e:b6:65:28:41:25:75:c4:4f:5d:
                    44:d8:55:12:61:55:18:81:62:08:73:ae:5e:07:2d:
                    1d:85:cf:a2:c4:f7:fa:90:53:4f:9d:90:de:a6:25:
                    09:1a:c1:ec:b4:cc:d9:5d:a2:3e:0e:55:41:e6:a5:
                    ef:3c:4b:11:15:aa:56:f1:07:7b:ad:c7:e4:be:3e:
                    ec:7e:de:1f:43:8e:98:68:d5:dc:6f:f2:36:96:11:
                    d9:1c:78:02:a3:4f:c8:43:5c:bc:e2:2a:f6:16:77:
                    91:78:ba:d5:70:13:86:6d:77:86:96:d0:ed:42:28:
                    50:05:80:4f:ee:5c:5f:48:7c:4a:5a:5d:cc:08:c6:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:80:AC:56:2D:C8:84:F5:25:26:AB:87:AF:7E:24:29:D4:B2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/9ff80f05-58aa-3b0f-b4a0-4c1878c5fa63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/7610c78e-5229-41f2-9c50-5fa26c41e826.crl

            X509v3 Authority Key Identifier:
                keyid:22:BF:C7:47:F1:EF:E2:6A:14:37:1E:81:3F:A3:BD:04:0B:DF:C7:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9e:b6:17:16:a4:bc:38:f1:17:35:d2:5d:94:6e:62:80:7c:
         b2:be:91:14:89:5e:08:94:36:c9:6c:78:6c:c9:bb:ed:e6:6d:
         7c:cf:56:ce:a9:d8:63:3b:7e:1b:76:2a:d6:cc:47:24:0d:49:
         ee:ca:0d:e4:d7:20:5d:68:ca:cd:2a:6a:83:c3:94:11:c9:58:
         12:6c:72:8f:f3:d0:cf:6f:ed:e8:0c:70:7b:2b:6f:fe:21:2b:
         4f:48:fe:58:a9:6e:68:bc:9f:c2:ce:e9:16:04:a0:91:fc:f7:
         3d:9f:01:56:6a:30:11:3f:af:1b:1a:4a:6f:ae:29:aa:60:0e:
         1e:86:92:96:b0:77:7d:e9:81:c2:9c:59:df:ec:6d:d9:b1:d4:
         42:e5:35:27:e4:47:72:75:8b:15:21:38:ca:1b:76:7f:c2:92:
         29:f7:d6:85:67:eb:00:80:c1:fb:08:82:33:70:54:22:ea:9f:
         08:9e:b1:87:eb:9c:7c:ad:3e:41:ca:a6:3d:95:2c:ba:eb:a0:
         80:ec:80:a0:a6:70:72:ba:80:ec:c8:03:81:b9:89:a3:d1:02:
         6b:86:84:24:22:48:67:8d:41:73:b7:ef:37:52:47:a4:7d:a4:
         0c:19:a1:a0:59:12:05:af:38:8f:f8:b7:e7:f4:14:04:88:fe:
         08:7c:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:54 2023 by rpki-client on console.sobornost.net