Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ced9b230-fbd9-300f-96b8-79cb8b103de0.roa
File:                     ced9b230-fbd9-300f-96b8-79cb8b103de0.roa (raw, json)
Hash identifier:          /A9unOSgz1IfO0BzZrtSZfkv2hGClU8GeFGTMfLVzUI=
Subject key identifier:   EC:92:E4:BD:9E:1F:88:AC:B2:78:3D:92:42:7C:83:C4:FA:31:59:FE
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285839964AC724B99732375F483580
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ced9b230-fbd9-300f-96b8-79cb8b103de0.roa
Signing time:             Wed 16 Dec 2020 05:00:00 +0000
ROA not before:           Wed 16 Dec 2020 05:00:00 +0000
ROA not after:            Mon 17 Jul 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        172.82.74.0/24 maxlen: 24
                          172.82.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:4a:c7:24:b9:97:32:37:5f:48:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Dec 16 05:00:00 2020 GMT
            Not After : Jul 17 04:00:00 2023 GMT
        Subject: CN=56d230db-2341-4221-859a-ef5c5090a48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:11:eb:3c:b0:69:0f:bf:64:8c:4d:0f:70:
                    50:0b:36:37:14:2e:7f:de:5d:a1:59:a3:47:04:e0:
                    3e:f8:25:5d:d9:b4:59:f3:70:9a:2b:63:fc:0d:57:
                    fd:4e:48:14:8e:cc:c9:cf:7f:fb:52:d5:a1:0a:4a:
                    47:54:e4:f9:71:2e:37:aa:71:53:a2:84:bc:48:17:
                    2f:5a:06:d8:ba:2d:dd:b8:32:a9:34:a8:70:fb:6b:
                    fd:b7:98:37:59:5a:8c:03:54:dd:92:60:82:63:61:
                    0e:22:f3:12:a5:cd:3e:d7:2f:00:d0:ef:83:c2:14:
                    86:da:3b:e0:7d:e0:e9:48:33:26:cb:3c:92:b3:7f:
                    cf:bf:92:c9:a2:0d:72:86:9c:8d:94:9c:2c:19:3f:
                    8b:11:8a:6e:d8:97:e0:c1:86:16:e1:3e:3b:09:66:
                    56:5e:c4:2e:b3:29:b3:cb:d9:05:e0:f8:9a:86:bc:
                    0b:14:a0:ec:6c:6b:83:8d:2d:41:10:24:bd:9e:f6:
                    7f:a2:8f:ba:9b:2f:2f:73:88:5c:f4:e4:b3:5b:c4:
                    e4:64:8c:5f:7d:37:3a:8d:fa:02:c9:dc:56:dc:91:
                    c0:97:3f:19:c8:03:8c:a1:0f:23:a1:cc:60:fd:ea:
                    1d:f3:16:93:ed:9f:a0:09:99:a5:78:02:77:b4:8a:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:E4:BD:9E:1F:88:AC:B2:78:3D:92:42:7C:83:C4:FA:31:59:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ced9b230-fbd9-300f-96b8-79cb8b103de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:cf:8a:5a:16:7d:2d:be:b6:09:86:6e:dd:d7:4d:01:44:
         8b:09:62:c5:7b:04:9f:f3:07:b3:ab:1d:9d:07:4d:77:c5:6a:
         54:a1:ee:94:95:92:a8:5d:3d:86:c9:64:51:f8:c9:7c:d5:47:
         ca:d2:44:36:aa:fb:8e:00:20:a0:9d:b4:68:6e:03:31:b9:c9:
         e6:d3:5f:f3:e4:f3:a0:69:0e:55:93:9b:67:35:2b:90:72:52:
         80:78:a0:04:2d:29:ee:d1:96:bb:b2:0d:c0:e8:31:5e:b6:9f:
         00:f4:10:37:de:18:b9:0a:7e:97:db:3e:b1:1a:c6:9a:a1:4d:
         08:33:21:38:d3:8a:fe:9d:17:dd:5c:a2:ea:00:ff:d7:8f:9b:
         af:dc:a9:eb:cc:cf:d2:4e:cd:4c:4f:12:1a:4f:74:13:c4:39:
         50:93:f4:e6:6f:a2:53:da:d8:d6:51:5e:f5:06:b4:c2:79:db:
         05:49:f9:48:44:2a:04:0f:25:d1:70:27:b3:84:21:9c:da:20:
         e1:4e:2b:1b:16:64:e5:f7:55:7b:13:52:b1:0d:10:bd:69:69:
         bc:77:d4:90:a3:d0:77:4b:1d:22:dd:04:d0:27:86:9b:ff:fa:
         cc:ae:6e:f2:65:a0:13:e2:18:bf:92:05:d2:be:4b:79:8b:38:
         98:3e:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:08 2023 by rpki-client on console-fra.rpki-client.org