Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bade68f4-7fd0-33b9-9957-5a65be72e21e.roa
File:                     bade68f4-7fd0-33b9-9957-5a65be72e21e.roa (raw, json)
Hash identifier:          JpUEb7VQNmWP56+O+Gsd0tKW2lhX6oxBpWTDRKndAQI=
Subject key identifier:   ED:E4:A1:4B:D7:D1:54:4A:23:BC:21:60:4A:4C:6E:0C:9B:BB:02:07
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7AE1222D2EDC17BC843B200
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bade68f4-7fd0-33b9-9957-5a65be72e21e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:12:22:d2:ed:c1:7b:c8:43:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=6f9a6c4d-9156-4337-933e-f4546defa7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6e:a9:97:e5:20:19:2b:f1:54:83:f1:4f:01:
                    7c:8e:b4:08:cb:57:7c:66:3b:7f:9f:6a:a3:44:98:
                    c5:44:e4:c4:d6:5f:14:fc:de:9a:26:11:cc:81:c3:
                    47:7f:a0:ea:8a:e0:21:94:6e:cf:68:ba:40:74:e0:
                    79:9e:d6:7c:ae:59:67:fa:62:bf:d4:21:f1:e9:ad:
                    49:f6:ae:82:7e:ed:8d:9b:ea:9a:32:6d:a5:44:ae:
                    1a:17:a9:82:d8:eb:1a:df:da:c4:46:02:b9:b1:a9:
                    cf:f7:ae:0e:bd:72:f8:8a:8a:52:45:fa:2e:72:7e:
                    15:43:33:05:6b:e3:52:6d:d3:94:95:76:de:0b:56:
                    77:b6:e5:47:04:30:75:7e:19:d8:3a:9a:19:54:7c:
                    67:ed:c8:2c:93:cf:93:b3:2f:fb:74:f0:b3:92:6d:
                    90:22:80:d2:5c:d0:f8:24:18:a7:22:97:10:64:8d:
                    a3:a5:c3:7a:3a:fb:28:43:d2:e7:9d:ce:55:0d:04:
                    31:39:c0:f7:35:c4:e0:3d:a2:14:09:bd:33:2a:da:
                    02:6d:09:51:3b:ad:19:be:8d:9c:b0:8d:c5:ae:ae:
                    27:97:04:92:b8:80:2f:34:03:27:80:f3:d0:20:87:
                    0f:14:d1:24:39:06:e6:b1:e2:73:85:31:e9:93:3b:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:A1:4B:D7:D1:54:4A:23:BC:21:60:4A:4C:6E:0C:9B:BB:02:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bade68f4-7fd0-33b9-9957-5a65be72e21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:00:79:41:9c:ca:a3:66:ab:1c:ba:f0:ce:25:6d:55:38:6a:
         1f:04:5a:55:bb:5e:89:3e:8b:0b:ac:2f:7a:90:bc:a7:96:83:
         cc:a9:62:28:6d:c0:ab:84:7c:1c:be:42:a6:cb:a5:56:37:f2:
         a3:40:18:e4:a6:ef:06:f7:92:1d:45:93:7a:80:24:53:46:74:
         4d:36:0e:87:98:ce:fd:15:d3:4d:db:87:c9:e8:77:63:c0:8a:
         64:be:3a:bd:5f:32:af:87:9b:d6:05:57:2b:4f:3b:50:d9:24:
         01:a4:1a:77:be:7b:43:cb:11:56:ce:f0:9c:8b:91:a8:3c:1f:
         44:22:10:19:c6:67:3c:ee:49:b6:b6:f3:12:58:27:b1:9f:6a:
         85:39:b9:cb:86:bb:c5:2b:48:d5:74:6d:49:1d:93:81:6b:e9:
         2f:c1:4f:82:58:f3:98:db:c2:c5:0b:7a:47:ec:1b:9d:49:fc:
         7d:f4:36:37:34:89:70:a5:2d:24:18:f4:0d:de:8f:73:8d:74:
         d7:8b:4c:4e:2b:29:78:0e:bf:00:83:44:c4:c6:9b:44:04:61:
         41:a8:ac:e8:d8:41:83:9c:23:e1:82:f4:4b:2a:0a:d3:ca:e6:
         f5:37:23:ca:fd:06:dc:68:bd:b0:98:ae:f3:e3:c0:38:1f:9a:
         4e:82:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org