Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/e320f532-ec9e-3a27-b32a-4a2f82d7c404.roa
File:                     e320f532-ec9e-3a27-b32a-4a2f82d7c404.roa (raw, json)
Hash identifier:          DBIhCLUHGbQhL8BL0T32NEOgvl4dfU93si0l0YvFuXo=
Subject key identifier:   69:14:A1:FD:17:0B:6B:AB:35:91:DF:2F:9D:61:5C:B7:4B:0B:F5:52
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328583845B714DC6ECDA4D3A22D5180
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/e320f532-ec9e-3a27-b32a-4a2f82d7c404.roa
Signing time:             Mon 14 Dec 2020 05:00:00 +0000
ROA not before:           Mon 14 Dec 2020 05:00:00 +0000
ROA not after:            Sun 19 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        157.248.216.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:45:b7:14:dc:6e:cd:a4:d3:a2:2d:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Dec 14 05:00:00 2020 GMT
            Not After : Mar 19 04:00:00 2023 GMT
        Subject: CN=73f1319b-e5b2-47bc-8c93-ab2a1d04d501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:d6:7a:5b:62:b2:a4:11:a1:14:17:fc:70:
                    7f:ad:91:ce:3e:78:7d:d5:c5:48:00:73:c4:79:3c:
                    58:3f:f0:45:e7:45:3e:b5:d9:c1:24:81:88:ff:f1:
                    8b:ae:b1:19:f1:c0:b0:fb:9e:1e:03:a5:08:20:8c:
                    c7:d6:1c:65:82:d9:f1:82:54:d8:92:0d:0f:47:09:
                    4b:37:d8:21:04:c1:11:ee:7b:8e:7c:22:bc:8d:5b:
                    11:cf:5c:a8:e9:84:e4:ad:df:df:82:d3:6d:17:c8:
                    d5:72:e4:b5:17:2c:8d:da:5b:31:94:8b:6c:9f:ae:
                    ef:c7:ae:2a:3f:26:f8:82:b9:90:6c:66:1d:4b:3f:
                    9a:37:d0:6b:d7:f1:a4:a8:38:ab:96:35:8e:5e:a3:
                    e4:c2:8c:6e:69:e5:75:bb:cd:dd:8a:44:f1:8b:c4:
                    b7:54:6b:6b:14:df:f9:5c:d7:0f:0b:1b:42:06:50:
                    d1:6c:40:7b:be:c7:a3:48:25:b2:46:b3:d3:36:f0:
                    8d:92:cd:e2:3a:00:0b:2f:a5:a8:b0:ac:b4:d6:d8:
                    09:9f:46:84:b4:6c:03:4b:75:aa:f3:4d:38:fc:bf:
                    f0:89:5d:54:fd:07:47:1c:8f:0f:29:c0:ed:f3:25:
                    e6:ed:a3:80:ca:09:0b:fe:45:6c:71:93:5d:80:e3:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:A1:FD:17:0B:6B:AB:35:91:DF:2F:9D:61:5C:B7:4B:0B:F5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/e320f532-ec9e-3a27-b32a-4a2f82d7c404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:49:51:f3:af:cf:03:ff:cc:ab:12:e3:cb:08:ac:7e:63:
         9d:e8:17:66:f6:45:89:dc:47:c6:0a:39:5b:f4:c6:1c:d0:83:
         55:b0:04:2c:54:b8:0f:2e:8e:6b:fb:20:47:f6:e7:d4:a6:6c:
         fb:ee:13:b8:41:57:8e:bd:50:89:bf:1f:d5:6f:60:c1:9c:e2:
         25:f1:86:33:1f:9a:db:58:06:35:c7:27:54:ce:f5:16:9d:1b:
         f6:ae:cc:b6:71:29:fe:a8:68:b7:9b:05:ad:8c:d2:0c:ef:c6:
         0f:7d:25:51:41:3f:d2:ea:fc:26:bb:67:9f:bc:50:0d:96:21:
         97:61:95:fc:c5:a6:2b:ae:cc:fe:57:55:d8:67:5f:36:82:07:
         64:eb:46:be:fa:e3:69:ed:af:de:88:c3:4a:a8:36:3e:d0:3a:
         a4:db:9b:ff:c9:7c:c0:4e:43:aa:38:2d:c5:f4:9e:89:19:18:
         80:9a:6f:02:4f:48:f6:6a:42:ac:dc:54:b2:a8:77:54:9a:31:
         4e:dc:6b:20:25:b1:53:5b:6a:d4:51:89:80:7d:4e:93:5c:3f:
         c0:22:e8:be:4f:51:82:5d:c3:60:80:f1:aa:58:3f:b7:01:0a:
         b7:52:4c:29:db:d3:76:fb:86:e2:7f:54:a3:5d:fc:20:bb:d9:
         59:21:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org