Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/d465449a-5b91-3140-95f6-8d2648cdb92a.roa
File:                     d465449a-5b91-3140-95f6-8d2648cdb92a.roa (raw, json)
Hash identifier:          Y3iNSNlEqOdHf//t3TTy0Ejm98Pz1/egzuCmt9Whilw=
Subject key identifier:   FB:35:1A:E4:E7:B7:81:C0:FA:EE:7E:A1:15:37:32:87:33:97:52:40
Certificate issuer:       /CN=69f287f7-f860-4e10-9fc2-d79998155e05
Certificate serial:       010D0C9F43285841E46DDB368AED7D52196B2200
Authority key identifier: F1:44:9C:74:18:36:66:9B:81:79:0B:3D:DA:D2:BA:79:A3:23:EF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/d465449a-5b91-3140-95f6-8d2648cdb92a.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 09 Jul 2023 04:39:51 +0000
asID:                     395046
IP address blocks:        69.64.30.0/24 maxlen: 24
                          69.64.28.0/24 maxlen: 24
                          69.64.29.0/24 maxlen: 24
                          69.64.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:db:36:8a:ed:7d:52:19:6b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f287f7-f860-4e10-9fc2-d79998155e05
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  9 04:39:51 2023 GMT
        Subject: CN=6cd1c855-c130-4193-b825-e2f2b3377296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:bd:9e:73:64:f1:48:b4:fc:2f:50:32:02:
                    38:d2:73:e9:48:42:f9:37:e1:4a:35:52:6d:70:66:
                    2d:03:7b:84:a2:d1:c1:d2:9f:77:b3:99:03:77:36:
                    2b:f7:ab:cd:8e:81:30:6d:ac:1b:ef:30:50:87:de:
                    8d:ba:1e:35:eb:e9:41:fc:df:c0:49:97:e5:b7:07:
                    5d:0b:62:12:9f:92:2f:c4:ca:f4:b6:82:32:34:16:
                    06:d0:3b:39:b4:d1:13:8e:68:eb:9d:a3:70:7f:70:
                    50:5b:31:1d:2f:03:61:e8:42:c5:c6:42:56:69:f5:
                    49:91:2c:9c:11:f0:09:a9:72:a4:cb:30:29:8b:af:
                    52:bc:9f:72:4b:b9:3e:09:1f:3c:bb:87:49:c7:0d:
                    fc:a2:98:33:79:9a:4b:84:a5:0d:da:fc:51:27:d4:
                    13:24:7b:9b:5e:5e:06:56:d5:49:0d:43:c6:d4:a9:
                    1a:e5:30:f1:60:f1:33:ca:07:c9:15:58:87:45:45:
                    8b:21:fa:d8:cc:e9:3f:c4:8b:09:40:89:93:af:5d:
                    77:08:ae:30:1d:15:71:c8:b9:c6:01:f3:af:19:51:
                    41:6b:2c:28:73:ea:99:9a:75:eb:a7:ac:eb:86:08:
                    a3:19:7c:62:d4:39:bb:a3:52:c4:2b:61:42:8c:52:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:1A:E4:E7:B7:81:C0:FA:EE:7E:A1:15:37:32:87:33:97:52:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/d465449a-5b91-3140-95f6-8d2648cdb92a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/69f287f7-f860-4e10-9fc2-d79998155e05.crl

            X509v3 Authority Key Identifier:
                keyid:F1:44:9C:74:18:36:66:9B:81:79:0B:3D:DA:D2:BA:79:A3:23:EF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7c:51:d1:10:63:44:3e:19:c7:01:9d:71:82:73:98:44:47:
         75:b6:eb:05:6d:2c:ee:2e:06:d0:d9:85:e1:45:03:2d:e7:df:
         dd:d9:8d:41:25:73:0c:3d:91:d7:a9:7b:ce:d7:02:ea:2a:4c:
         92:2d:ef:5f:c6:ab:13:4a:af:d5:85:f7:43:31:c8:9c:c7:0a:
         0d:fd:b7:d6:a6:f6:02:70:da:21:aa:5b:21:58:2b:61:fb:f4:
         52:33:a0:25:be:be:d0:5d:59:65:17:bd:e5:9b:a6:d7:33:c9:
         67:29:ec:88:a4:ec:5b:51:39:f3:0a:b9:3e:7a:89:0a:51:cf:
         b5:b0:df:06:7f:da:77:6c:2a:e0:bc:06:1d:d8:bc:33:65:ae:
         4f:39:75:d5:f7:2b:9d:fe:45:07:57:b9:12:ce:50:a2:c4:0c:
         50:75:f5:06:2a:72:f9:aa:12:4e:70:60:ee:72:d1:66:df:9b:
         bc:63:80:cb:3e:b6:c5:6a:53:1c:bf:40:ef:3a:fd:33:3c:be:
         35:70:e4:00:86:10:8f:4d:2b:37:c6:36:35:87:5f:d8:1b:d3:
         8c:d8:40:92:79:ae:fc:a3:f3:dd:d1:7c:b7:e0:15:8c:42:fc:
         f8:8d:99:de:0f:52:3c:3e:ea:12:91:9a:08:b5:aa:f8:e9:52:
         d2:6e:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-ams.rpki-client.org