Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa
File:                     fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa (raw, json)
Hash identifier:          Dgt0k+k2/xca4DrM6h1jQ5Rf0gzd9Y2U2HMoJNGRXLQ=
Subject key identifier:   39:BE:A6:0C:24:49:98:F0:DC:F5:F1:49:34:E2:94:AE:C2:80:F6:7F
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328583A6FABAD658AB57B58F9A5AEC0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     10747
IP address blocks:        170.133.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:6f:ab:ad:65:8a:b5:7b:58:f9:a5:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=c0ca0a21-1995-4fca-8a2f-499b9feb8351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:c5:5a:ed:4f:3c:82:97:9e:48:02:16:61:
                    1a:1c:75:62:5b:55:b4:83:93:15:30:a2:7c:8e:12:
                    12:18:43:d8:b0:38:27:5c:6f:b8:57:10:78:ff:b1:
                    ce:e1:58:22:ca:a1:2c:57:fb:ec:73:1b:98:86:66:
                    ae:5c:94:c0:09:5c:09:eb:fe:fc:d7:3f:d6:b4:ef:
                    ba:39:78:87:33:ea:48:94:a2:3f:5d:76:b2:96:29:
                    af:60:4e:c8:96:fb:9b:ff:7e:20:a3:cd:38:46:2e:
                    48:d3:27:9a:6e:bd:6f:6c:5d:7b:3b:8e:4c:09:2d:
                    3f:cb:07:8a:ff:27:dd:55:10:6d:92:a3:d8:90:b7:
                    11:88:05:c3:22:b0:06:16:f4:10:7c:e5:4d:d2:00:
                    d4:73:9a:21:61:06:0e:01:3a:ab:6b:e6:2a:26:32:
                    50:ee:92:00:51:53:af:3b:06:1e:2c:80:25:f2:69:
                    8b:91:ad:ff:b2:94:b7:a8:a2:89:1f:47:1e:24:7a:
                    68:53:50:02:03:48:56:eb:a4:d4:01:eb:61:3d:d2:
                    e5:6e:4f:0b:7e:52:30:f6:24:50:84:46:fc:d8:b5:
                    f0:6f:29:1f:4d:7f:49:b2:00:d8:dc:e3:fb:6c:74:
                    af:18:4b:b6:6b:41:2a:0c:df:45:1e:a3:c2:f2:aa:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:A6:0C:24:49:98:F0:DC:F5:F1:49:34:E2:94:AE:C2:80:F6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fc89b76b-db7d-3a1c-91da-eea6f9613f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:e9:0f:0e:8e:8c:31:60:e6:4a:64:52:97:f0:96:0c:2f:
         de:48:be:15:6f:34:04:71:e8:db:e6:ab:82:79:ff:75:25:78:
         fa:7b:7a:09:65:a7:a7:be:91:00:3c:cc:90:e3:47:5d:82:28:
         24:dc:dd:64:a1:bc:f2:08:23:08:82:30:21:4f:51:e4:9c:b3:
         a9:ab:7c:34:a7:9b:ce:96:22:1c:61:52:54:7c:20:05:a5:1c:
         cc:5c:88:31:7c:0b:3c:7e:e1:42:82:2f:ab:eb:d6:3f:1e:c1:
         74:99:cb:55:ae:96:c7:53:36:f0:1e:90:a1:44:24:c1:8e:fe:
         31:2a:6b:6e:c2:00:7b:8d:e7:6d:3b:60:53:6b:ae:02:ce:0b:
         e3:a0:e1:f6:7d:a8:d5:46:d7:02:ef:bf:82:af:91:98:13:72:
         99:e5:24:62:ea:11:3f:18:16:87:35:9f:84:11:03:97:22:9b:
         c0:29:f6:79:2e:3b:2c:a4:11:68:06:61:6b:a0:4d:13:2c:7e:
         71:5c:4f:7f:77:a9:63:e0:5e:bf:7b:41:7d:b6:18:57:38:4f:
         91:80:ad:a8:e7:dd:d0:77:ac:34:b7:9a:6a:c2:af:6e:bb:4d:
         82:e0:4e:c2:d3:2f:3d:5b:2f:27:c7:af:96:73:ed:c7:05:c8:
         53:61:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org