Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa
File:                     35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa (raw, json)
Hash identifier:          ceuxkl8YZvODfyaOqQLTrk36Y/vN0DSt8EyGMCdpCZg=
Subject key identifier:   2F:CC:3C:B4:D8:BB:3E:CC:A8:6E:0D:CC:30:C3:18:4A:42:4D:5F:1A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837EA52A4C2F9453AEA2DE13358
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        173.181.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ea:52:a4:c2:f9:45:3a:ea:2d:e1:33:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=34b16966-7721-4243-9b93-b202245a61dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:76:6f:81:bc:7c:b9:69:ed:05:5a:76:f3:
                    ab:65:b0:e1:6c:24:ca:88:cd:7e:b3:57:a5:8a:a4:
                    b0:51:d0:06:3e:a4:b1:3e:f4:96:7b:11:6f:69:75:
                    69:54:5e:7a:aa:c7:1e:2b:a8:f7:8f:0e:cc:a6:e1:
                    77:62:48:b6:93:e6:80:59:60:fd:fd:97:f4:a2:5d:
                    c6:12:03:ee:09:1e:26:69:a0:24:9d:d0:0d:2e:47:
                    02:5e:de:21:8b:e9:e7:bd:98:80:cf:e1:43:b8:e3:
                    c6:be:46:f2:e1:bf:57:25:cc:58:f4:5c:1c:c8:36:
                    55:c3:4e:15:19:92:99:61:f3:7b:1f:7d:26:94:35:
                    57:97:13:06:1b:d4:69:81:2c:db:15:20:87:10:04:
                    98:27:f2:c1:e7:38:8f:7b:e8:3b:e5:10:d5:4f:a3:
                    21:90:35:02:4c:2e:7c:71:a3:1c:b5:bf:69:34:13:
                    c7:5e:82:f2:d3:a0:4a:e8:ca:99:f7:db:25:9e:19:
                    93:f9:ee:36:e2:df:3a:90:c7:43:3f:83:d6:64:ca:
                    2e:81:24:3f:bb:4f:b9:12:06:a0:64:50:8d:bb:69:
                    03:d9:44:44:6c:a7:27:5d:f2:38:de:4e:11:90:19:
                    73:59:d8:ca:c2:1a:ae:f7:8b:ff:a8:e5:81:6a:11:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CC:3C:B4:D8:BB:3E:CC:A8:6E:0D:CC:30:C3:18:4A:42:4D:5F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:26:72:3f:04:82:ed:b6:62:5c:68:52:c3:04:c3:20:0a:45:
         07:2b:51:e0:2f:be:bd:2b:2f:2f:0c:9d:f3:3b:81:b3:f9:b9:
         f2:67:2f:aa:98:14:e4:b9:9f:eb:f5:39:0d:8e:f6:6c:bc:af:
         c7:7c:a5:47:99:1c:65:61:f2:5e:ee:f9:74:ff:f7:5d:57:03:
         bf:c6:f0:d5:1f:ca:5b:76:b7:8e:fe:86:ad:cc:71:bb:22:54:
         3c:7a:81:80:20:f6:fa:80:89:1f:96:1d:b7:c7:e0:45:64:5f:
         bc:95:39:50:04:93:81:03:26:89:f0:94:38:8f:c0:e2:fd:bc:
         23:ff:c1:6a:89:6c:ef:df:04:a5:10:0a:a9:c8:77:87:56:a2:
         79:0e:6e:3d:67:d1:70:19:b7:d1:6a:db:52:e8:f4:a7:d1:f6:
         04:f3:81:70:ac:e1:6e:6e:85:fb:55:33:b8:85:f9:2b:64:9b:
         7d:bf:c6:19:cc:39:1f:d8:a3:db:1b:dd:a1:f7:4f:3c:9b:e2:
         46:16:fb:63:4f:9e:88:dd:57:c0:a9:7f:f1:d3:52:ce:60:8c:
         ba:04:c0:f0:9d:b0:25:16:8f:9e:40:55:9e:fb:33:32:1d:88:
         b0:65:93:5e:7e:c8:d4:42:f3:4c:5c:e9:15:73:ac:a2:12:df:
         f4:df:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:01 2023 by rpki-client on console-fra.rpki-client.org