Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/d472aa9f-76bc-3d72-ab25-775b6bc6b3b8.roa
File:                     d472aa9f-76bc-3d72-ab25-775b6bc6b3b8.roa (raw, json)
Hash identifier:          F4czUG8DOCt1KNK1k+ZxIk5hhooijbUUgC2v7vbkTeE=
Subject key identifier:   3C:3C:1B:37:44:03:F2:8D:F2:43:02:D5:C2:5E:DB:A8:7C:62:A7:D3
Certificate issuer:       /CN=a2b35c64-0125-4744-9037-ed86e569783a
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F8418EC
Authority key identifier: D2:5D:4E:FB:82:97:34:22:75:2F:89:1B:92:32:CE:AF:6D:41:CD:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/d472aa9f-76bc-3d72-ab25-775b6bc6b3b8.roa
Signing time:             Wed 08 Jul 2020 17:40:53 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     7883
IP address blocks:        23.150.144.0/24 maxlen: 24
                          199.119.72.0/22 maxlen: 24
                          2602:fd78::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:84:18:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b35c64-0125-4744-9037-ed86e569783a
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=b940977b-9053-4cc7-bed7-eb047ad53c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:3e:13:7f:87:0e:c9:db:eb:05:fa:5e:e8:
                    5a:34:d0:50:85:9f:7c:3a:fc:35:eb:0a:e7:d6:33:
                    f7:4f:ef:38:c7:ac:97:7e:6e:c9:9a:32:d4:1c:01:
                    4c:f5:a9:65:20:55:e0:a4:08:bb:6e:93:e3:66:46:
                    73:16:4b:91:9c:7a:77:75:d2:3d:ff:47:ce:8b:3d:
                    b0:d5:d3:a5:8c:90:4a:d5:90:b2:81:e1:a5:a2:3b:
                    c4:15:1a:9b:7b:be:e6:cf:89:c6:fa:30:ff:72:7a:
                    b1:a1:46:a8:d8:12:ae:97:82:a6:9a:4f:35:fc:53:
                    45:84:6e:51:d3:8f:7f:02:df:65:7b:dc:d7:ea:7e:
                    f5:09:db:e1:b2:2f:39:f6:58:c7:78:b6:25:06:25:
                    93:d6:50:0e:27:f3:96:aa:fc:b5:92:8b:b9:13:4d:
                    06:d6:8b:62:d2:ca:ef:39:98:98:7f:9f:f5:fb:a2:
                    cf:d0:54:04:22:58:54:a3:65:86:6f:3b:9a:ac:9c:
                    89:e9:ea:96:a7:7a:26:b6:b7:0b:e6:78:91:06:ab:
                    3a:bb:e2:06:45:aa:9f:94:6e:5a:73:4c:d1:80:e6:
                    d8:86:27:6e:13:1b:f1:25:f7:9b:54:ec:8e:3f:35:
                    ac:6c:a3:ac:fe:ad:5b:de:a7:82:ea:d5:47:eb:87:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:1B:37:44:03:F2:8D:F2:43:02:D5:C2:5E:DB:A8:7C:62:A7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/d472aa9f-76bc-3d72-ab25-775b6bc6b3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/a2b35c64-0125-4744-9037-ed86e569783a.crl

            X509v3 Authority Key Identifier:
                keyid:D2:5D:4E:FB:82:97:34:22:75:2F:89:1B:92:32:CE:AF:6D:41:CD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.144.0/24
                  199.119.72.0/22
                IPv6:
                  2602:fd78::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:b0:a2:ff:91:35:b9:c2:7e:cf:ff:73:e2:df:49:57:e1:
         b6:5c:47:8c:69:d4:9f:22:40:83:75:d4:d6:e7:a2:a5:6e:a4:
         ee:2d:14:62:be:f5:2d:3a:35:3e:8e:62:9c:e4:1b:1b:38:6d:
         8f:f4:11:a7:5b:6b:b1:65:3d:31:18:a6:b1:09:27:c8:f3:49:
         cc:bc:43:12:58:ab:da:dc:1f:78:04:b8:34:4e:45:5f:58:9e:
         0c:fb:1b:db:78:39:ed:eb:a9:62:91:52:a8:18:6a:4e:28:49:
         5d:f6:60:64:88:c1:dd:31:ca:1d:74:57:90:6f:ad:10:ff:51:
         4f:ff:a0:71:a0:ac:e9:07:0f:29:cd:4e:48:62:e2:13:ef:2c:
         66:26:15:4a:f6:00:a6:48:38:4f:46:63:4b:6b:0d:3c:8e:89:
         28:0a:62:c2:0e:77:00:f8:9b:9c:49:0d:2d:20:35:5f:3d:84:
         94:d3:8c:c2:4e:a6:44:1e:15:97:e6:55:91:e3:74:6f:0f:22:
         e8:95:98:23:6f:df:26:e1:7b:ef:dc:03:df:d9:c8:35:5b:fe:
         44:7a:aa:3c:64:25:02:b0:aa:ba:64:0c:04:89:41:8b:ff:27:
         7a:8b:de:ee:71:09:f2:ec:e9:1a:6b:12:e8:5d:9b:2e:a7:78:
         94:97:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:14 2023 by rpki-client on console-ams.rpki-client.org