Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb97b4cc-f6c3-36dd-96e1-6525b97c9eb0.roa
File:                     eb97b4cc-f6c3-36dd-96e1-6525b97c9eb0.roa (raw, json)
Hash identifier:          6qUYyeSHmPhAgdcxEsRk4kgjxGvrTDz+GQ1m+ZMrcao=
Subject key identifier:   C7:E5:A6:A0:26:D6:3E:B1:8D:40:0C:46:66:D2:C4:CC:CD:F4:79:92
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E456EDF3EBF0F67DB2A28200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb97b4cc-f6c3-36dd-96e1-6525b97c9eb0.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        198.166.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:56:ed:f3:eb:f0:f6:7d:b2:a2:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=cd238ca9-073f-4e41-aa6d-dd38938d2a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:6a:78:49:cf:09:35:fc:f3:9f:28:26:e7:
                    d6:ba:56:4d:b4:f0:1c:30:57:dd:2a:03:8f:80:49:
                    34:4d:2d:f1:ab:0b:24:c4:b8:29:4f:bd:16:b1:71:
                    90:6a:be:56:e6:44:b6:19:73:0f:1f:a8:c5:dc:8a:
                    97:a2:77:10:7c:80:e2:70:18:4b:9a:0e:29:a7:af:
                    66:17:1a:5e:b3:20:53:29:e1:f8:68:7a:b7:45:e6:
                    69:85:23:c9:60:a3:42:a4:ae:16:5e:70:eb:4e:79:
                    e6:e9:7b:fd:e9:7a:d9:6b:65:c7:b5:31:ae:d5:be:
                    c8:14:28:c9:63:8d:8f:ea:c3:74:c2:ce:96:40:7e:
                    63:f0:48:cd:cb:76:0c:7d:22:65:df:d5:6a:71:d5:
                    ac:aa:70:9e:8b:fa:f2:29:c5:5d:2f:a2:32:f5:6b:
                    87:5d:c0:4d:5b:5d:e0:f2:4e:df:67:76:73:38:ae:
                    bd:d7:7d:36:90:ca:a2:e4:47:98:5a:88:8b:a7:83:
                    b3:e4:75:a8:02:40:25:c4:8d:64:37:8b:be:e7:c9:
                    66:db:f1:7a:97:1e:79:8d:e2:5e:f4:f9:0a:f8:a7:
                    7e:3b:d0:e7:ed:8c:d6:65:78:eb:8d:54:fc:56:d8:
                    b9:07:ed:a7:d2:fc:69:11:28:17:ee:79:0f:79:2f:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:A6:A0:26:D6:3E:B1:8D:40:0C:46:66:D2:C4:CC:CD:F4:79:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb97b4cc-f6c3-36dd-96e1-6525b97c9eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:52:9a:4e:38:80:46:f2:0d:26:4e:db:34:43:ec:5c:03:b9:
         28:f0:46:cc:dc:52:52:c6:20:b6:ed:66:71:7c:c0:97:33:19:
         37:e3:ff:fc:d9:0a:87:88:f7:7e:06:fc:03:13:64:17:f7:bb:
         13:45:2a:1d:bd:f6:7b:6d:3f:5a:f2:43:ce:23:93:68:09:ee:
         c7:11:f0:e1:0f:03:53:3f:36:6e:b5:d4:f2:0a:1d:af:1c:4c:
         df:5b:a3:65:4f:06:9e:67:da:e5:5d:cf:d2:7c:99:6f:b1:ad:
         b3:f6:c6:48:7d:2a:55:88:5e:f0:b2:e5:c4:cb:37:50:c5:1f:
         be:a2:3b:b8:27:76:43:d3:d4:59:8d:6d:14:bc:d3:ac:31:d7:
         7c:52:82:e1:7f:eb:23:82:e5:32:f9:8b:53:d5:99:b8:77:b2:
         ff:20:03:89:fc:ae:bc:3b:df:b8:36:92:a6:5f:c6:ff:45:8e:
         0e:0c:71:55:82:0c:bc:a4:ff:00:20:56:49:4c:22:b0:2c:79:
         50:77:22:6c:dc:ab:2d:fe:c6:0b:36:c8:65:39:b8:b6:3a:2d:
         9f:87:85:a1:96:ce:67:4c:51:7c:a7:ca:9a:9e:8c:b8:3c:30:
         9f:8f:ad:8f:68:60:3e:e5:1f:41:26:f6:b2:f5:bb:cf:f4:5e:
         10:66:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org