Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cab4bc50-8c1c-311c-b73d-1c6e0ada2f9d.roa
File:                     cab4bc50-8c1c-311c-b73d-1c6e0ada2f9d.roa (raw, json)
Hash identifier:          Je8GBvliBsIJ/vTf6kXW7QysGC/+LJvnKxjFD0FmJNU=
Subject key identifier:   44:92:85:60:A4:18:42:6E:2C:D4:38:E7:EC:E3:C1:FB:25:69:95:B2
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858382B089852D43432FB912C3900
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cab4bc50-8c1c-311c-b73d-1c6e0ada2f9d.roa
Signing time:             Mon 16 Nov 2020 05:00:00 +0000
ROA not before:           Mon 16 Nov 2020 05:00:00 +0000
ROA not after:            Fri 10 Mar 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        208.123.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:2b:08:98:52:d4:34:32:fb:91:2c:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 05:00:00 2020 GMT
            Not After : Mar 10 05:00:00 2023 GMT
        Subject: CN=c99347cb-20d8-4e70-9cc2-0585725a8dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:dc:cf:d0:c5:aa:ba:16:4e:38:ed:f2:ad:
                    ca:a7:88:eb:c0:f4:c5:19:ed:2d:32:5a:ad:f9:f1:
                    93:48:0c:ba:f7:80:0f:ff:50:72:92:f8:42:17:a9:
                    32:be:62:35:3f:3b:0c:78:3d:03:74:b2:49:d4:59:
                    bd:9e:42:bc:3f:37:be:99:fe:1a:df:29:09:cf:9f:
                    d6:0c:be:0e:99:cb:d3:86:2c:f0:04:1e:11:27:9f:
                    25:b6:f2:85:50:46:9e:f0:e7:b1:b9:64:a7:11:2d:
                    d4:5b:69:3f:86:b0:78:4e:dd:e2:00:fe:91:72:db:
                    34:e8:c7:bb:0e:e5:ff:76:75:c6:5e:73:b2:66:4a:
                    1e:44:66:4d:17:d1:bb:20:55:94:be:bc:c5:88:62:
                    01:b6:24:cc:c4:ce:db:3c:62:52:bb:3e:a5:be:2c:
                    84:ef:b9:d7:74:d2:79:47:b0:d0:d0:63:a2:01:b7:
                    a8:e8:2a:57:9e:05:b2:f0:e4:93:65:a3:5c:c6:3c:
                    89:43:9a:2a:f9:71:ae:1c:98:11:bc:40:35:15:0a:
                    19:70:95:2f:7d:08:0b:99:05:f1:d9:e6:fe:04:26:
                    46:fd:29:42:78:22:97:e6:05:30:d1:a4:67:d0:ec:
                    fd:f7:37:a5:2c:51:c7:b3:0a:42:89:44:dc:0b:7c:
                    86:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:85:60:A4:18:42:6E:2C:D4:38:E7:EC:E3:C1:FB:25:69:95:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cab4bc50-8c1c-311c-b73d-1c6e0ada2f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:16:4a:81:42:05:8c:10:4c:96:37:c8:6c:bd:26:74:f3:
         5b:2b:d3:dc:d2:0b:e0:7f:d4:8c:8d:fb:89:18:3f:7c:34:f3:
         e6:db:e9:be:bd:89:35:dd:ee:97:99:66:a5:c7:6d:00:f8:2f:
         74:50:6b:45:23:03:ae:21:11:71:9f:e0:94:eb:29:2f:62:8d:
         15:de:b7:33:38:08:9c:58:60:df:3c:52:70:9d:d6:2a:92:26:
         dc:56:5c:fa:2e:30:67:f7:98:da:f2:50:a6:84:22:ab:31:d2:
         b6:69:78:6e:19:b6:2a:dd:55:2c:f2:e4:fc:f5:33:7b:80:30:
         b1:6e:0a:88:91:52:53:d1:64:08:7a:46:62:98:35:23:cd:d8:
         b0:9d:4b:1e:42:f2:c9:19:dc:70:f7:62:98:e5:aa:78:47:ee:
         ed:ca:97:01:d6:f4:27:51:6e:f5:42:7d:8c:79:cc:74:1c:ef:
         4f:14:5c:0b:e6:70:61:51:6b:a4:98:c5:af:5f:96:1c:ac:9e:
         84:e3:cc:5d:7e:75:51:33:9c:15:37:7b:4d:53:57:d0:c3:aa:
         4b:55:31:56:54:21:4f:07:9d:ee:78:94:de:f9:dd:ca:88:91:
         ef:46:86:b2:73:f2:30:2c:34:fa:2c:31:f8:fc:e1:1e:1e:b3:
         86:4d:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:16 2023 by rpki-client on console-fra.rpki-client.org