Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4eae24e0-803d-3476-83d8-94783860616f.roa
File:                     4eae24e0-803d-3476-83d8-94783860616f.roa (raw, json)
Hash identifier:          I5Njw2nuFSiSyFVu/LVwuJ1WPnhpApb4HwCBXF0Fkuk=
Subject key identifier:   3C:70:45:2D:C0:5C:7E:A4:CC:95:8C:BE:EE:F0:17:CF:BF:24:01:29
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D6FD1CB59E99CDAD26FCAB80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4eae24e0-803d-3476-83d8-94783860616f.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.102.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d6:fd:1c:b5:9e:99:cd:ad:26:fc:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=2826b8cc-163e-4bcb-a223-3ef53b4d5b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:87:48:f5:43:b5:ac:36:1e:72:83:53:09:
                    7b:c7:30:3a:e2:dc:da:75:b5:44:d5:a4:a3:89:93:
                    59:48:49:18:be:f6:55:7c:31:aa:2e:22:6a:1a:7b:
                    bd:5a:1f:61:7d:0a:fc:00:e4:13:84:89:86:30:c0:
                    83:26:45:e1:82:52:1e:e6:78:50:69:57:46:12:ed:
                    45:c2:d6:0b:57:3e:cb:a5:99:12:b2:3e:0b:e6:3d:
                    63:fc:b0:be:ac:76:80:3e:40:83:96:0f:fd:7a:a8:
                    08:c3:a3:1b:78:b2:c8:1c:d6:aa:bd:88:00:6a:0a:
                    2c:b8:27:7f:77:f6:e0:44:a7:b0:e2:60:b1:d2:83:
                    d7:6b:10:4c:25:70:e9:4b:04:83:68:55:3f:3e:2f:
                    fb:ae:3f:f8:6b:f0:a9:dd:ec:c5:6b:6f:1f:15:07:
                    e2:44:5c:57:d4:6a:48:3c:e6:de:4f:87:16:9d:1b:
                    c6:92:24:2b:2c:16:74:e5:38:f8:e1:60:6f:c2:c5:
                    b4:d8:76:9b:3f:38:6f:75:e5:a3:cb:9d:c6:82:6a:
                    28:4b:d0:23:46:d8:7a:3b:17:91:9c:c6:e5:1a:95:
                    e5:92:d1:26:a4:0c:df:bd:c8:2e:66:50:7a:9f:8a:
                    1b:29:68:f9:25:d0:50:9d:db:13:6c:3a:a1:2c:2e:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:70:45:2D:C0:5C:7E:A4:CC:95:8C:BE:EE:F0:17:CF:BF:24:01:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4eae24e0-803d-3476-83d8-94783860616f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:a3:1b:72:75:9d:b2:d9:b9:0c:8e:8e:46:19:25:c5:d1:28:
         66:37:a5:cf:2d:1e:3c:c8:bf:d8:3f:46:49:12:ea:79:cc:a0:
         53:47:78:e4:b0:bc:9e:2d:a8:36:37:d3:0d:98:9c:18:14:c2:
         37:99:a1:0f:be:24:21:6b:3c:e3:01:e9:d1:3a:d1:03:f7:9a:
         1b:5a:7d:32:2f:6d:8c:60:6d:d2:be:13:71:cc:c4:c9:4c:6e:
         6b:25:43:83:6f:9f:ec:a8:24:31:b9:89:3f:5d:c3:d4:c9:f8:
         68:d2:83:8b:40:4d:e8:61:19:3a:8e:f1:32:f0:50:51:95:3a:
         2a:d8:f9:a8:0d:7f:f0:1d:9e:31:f3:62:26:e5:46:11:76:5e:
         b0:05:98:52:6e:aa:f3:61:2b:7d:8b:a2:c3:8a:b4:15:19:06:
         84:cf:08:b3:a3:f8:97:c7:d4:4a:4d:38:64:2e:c3:27:b1:56:
         e4:f3:6f:a3:e3:d1:3e:b2:e3:03:58:14:0d:d1:9c:76:cb:7b:
         5c:ce:c9:0a:ad:2a:af:75:c5:5f:c3:7a:72:46:e7:6c:77:e8:
         0c:fa:67:2f:14:51:35:3c:18:bf:41:c1:ee:7c:eb:bb:df:83:
         ed:c8:42:36:a2:80:75:37:5f:65:d6:0f:5a:8e:f1:52:7a:57:
         8e:6a:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:02 2023 by rpki-client on console-fra.rpki-client.org