Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f061af04-f9f7-33f8-8bba-3c1c04026208.roa
File:                     f061af04-f9f7-33f8-8bba-3c1c04026208.roa (raw, json)
Hash identifier:          bonMoCvF+EY1xtRwqMEZdFBiXEwwtPWv2cJRHAjSmPU=
Subject key identifier:   1A:BE:9A:E1:AF:FA:56:B9:14:BC:2E:AF:97:3E:B8:63:D9:AA:9D:48
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7D8A503162F34CE02006620
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f061af04-f9f7-33f8-8bba-3c1c04026208.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        104.205.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:d8:a5:03:16:2f:34:ce:02:00:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=c533df44-fa77-4c96-9f7c-dee1ad54c949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:ff:88:e2:0f:63:66:21:ce:2d:69:11:10:
                    66:68:f5:93:52:22:30:28:2f:56:43:7c:ed:29:b2:
                    cc:32:42:6e:aa:cd:52:ff:99:bc:3b:ae:88:2f:85:
                    5e:91:a6:45:06:12:12:97:44:3a:dd:d2:f0:5c:6d:
                    33:54:d4:3b:5d:f2:76:02:c1:b0:b1:df:04:67:7e:
                    41:94:66:46:e4:b6:b7:7c:11:14:df:17:e4:6c:f5:
                    ef:9f:a5:aa:10:11:57:fa:fe:f0:06:f4:3a:8d:14:
                    fc:6a:50:c6:5d:e3:1f:37:11:a3:f8:e7:fa:fa:a7:
                    fe:05:c5:84:98:23:99:29:55:c6:1d:a5:39:39:c6:
                    f0:69:94:2b:11:09:62:d5:47:75:2f:d3:23:e5:4d:
                    f7:27:63:bb:b5:3c:96:02:76:f5:4d:e7:06:8e:09:
                    70:b8:28:25:a3:d4:b9:bc:a2:3d:0a:bf:81:6e:96:
                    97:76:c5:e7:7f:52:19:f1:e1:85:6a:17:b8:43:1a:
                    8e:87:0f:c4:da:cc:29:5f:4f:c5:f8:f1:ca:35:28:
                    2e:71:34:07:46:52:d4:1f:45:28:b9:e2:14:2f:d9:
                    9d:2a:0e:d2:6b:c2:e1:fe:86:37:69:82:f5:f6:5b:
                    56:67:0d:a6:91:09:41:db:72:6c:ca:bc:4b:3b:5c:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:9A:E1:AF:FA:56:B9:14:BC:2E:AF:97:3E:B8:63:D9:AA:9D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f061af04-f9f7-33f8-8bba-3c1c04026208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:14:e4:91:15:38:51:41:c7:bd:b1:08:f8:6e:95:07:b6:9c:
         1c:1d:df:72:02:63:d9:d2:90:a5:b0:de:fa:93:c9:f4:cc:29:
         b7:b0:d4:17:6e:10:5e:8f:4b:5c:4c:87:ae:d9:1f:28:7e:06:
         a6:f5:f6:f8:1b:b8:7c:cd:b8:91:ee:8e:1f:c2:d9:1c:9f:83:
         41:a9:9a:ef:e0:e6:ea:06:36:61:27:fe:47:cb:e1:9f:fe:f9:
         af:5c:be:d9:6b:03:b4:96:eb:da:6b:ff:3c:5e:7a:64:9c:18:
         64:b5:2b:9e:24:86:9d:32:8b:93:ec:90:db:63:18:c1:7a:cd:
         9e:5c:6a:36:73:75:89:00:e8:90:d4:05:4b:d2:d7:ab:4b:d0:
         13:98:75:4c:6c:37:2c:26:8d:27:a7:59:c5:4a:52:a4:c6:43:
         99:89:55:47:29:40:e7:60:13:8c:fe:e8:00:68:de:97:03:df:
         6c:c0:5f:35:83:8d:57:37:e7:c5:56:a4:33:0f:b9:8d:be:79:
         8e:6e:f8:b6:dc:95:26:a7:59:4a:f1:62:a3:57:48:17:75:8b:
         ab:cf:6d:51:3a:30:94:fd:b4:b6:68:ec:f0:f9:8d:6c:fa:54:
         96:e4:3a:31:cb:dc:10:a6:78:db:ed:f8:97:94:cd:c2:05:d0:
         30:a8:cf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org