Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/38afaed3-0cf4-33a2-b9fa-93b7648e5bb2.roa
File:                     38afaed3-0cf4-33a2-b9fa-93b7648e5bb2.roa (raw, json)
Hash identifier:          nSGzlBvWQfA7B7z0EKPSmERHDw+fqwseLQakFjkL9WI=
Subject key identifier:   79:07:4B:0F:5D:56:A3:32:6A:71:50:99:B6:94:EC:3B:AD:D1:45:22
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C4219FAB42A38D71FFE6A5A94
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/38afaed3-0cf4-33a2-b9fa-93b7648e5bb2.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Sun 17 Mar 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        207.126.154.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:19:fa:b4:2a:38:d7:1f:fe:6a:5a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2024 GMT
        Subject: CN=b155f586-185f-4d75-a16e-b70363f3776c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:96:be:d6:98:24:a8:74:f7:00:71:ab:99:
                    b6:e8:08:f4:ce:3f:7a:9f:40:02:91:67:bd:79:37:
                    0e:dc:fd:d7:3a:b1:38:60:cf:19:10:e7:53:7d:79:
                    c4:67:de:6b:55:5a:ad:d8:32:7a:97:dd:0d:70:48:
                    2b:42:6f:4b:e1:c1:d1:df:fa:68:1c:d9:0a:09:92:
                    6f:c9:7f:02:77:d2:4a:68:b9:84:ef:60:7e:fc:42:
                    50:43:a0:c9:51:d0:57:0b:e7:12:e3:c3:4f:27:a6:
                    73:37:30:58:8c:1c:78:b6:a7:67:28:4f:78:a9:44:
                    ae:8f:e1:d3:ba:2a:b9:40:21:ae:56:b0:3a:52:3b:
                    ed:0e:5d:71:e0:e9:c9:33:46:01:86:1d:b7:50:89:
                    a2:ac:47:1c:45:32:4d:bf:88:50:08:76:e5:5c:1a:
                    01:30:47:79:a7:e9:f6:c4:52:90:4a:c7:e7:c9:2f:
                    44:38:ac:e5:ee:62:41:c0:78:a8:aa:18:af:1a:7c:
                    93:2d:eb:e1:f6:84:2b:33:31:ad:37:c6:08:31:ac:
                    74:06:f4:34:f6:c3:8b:06:2e:40:16:dd:a0:55:1b:
                    e9:02:60:6e:01:90:5c:a7:fa:a6:83:76:f6:9a:8d:
                    63:59:9d:72:cd:74:6c:19:bf:82:6f:83:ec:cd:ce:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:4B:0F:5D:56:A3:32:6A:71:50:99:B6:94:EC:3B:AD:D1:45:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/38afaed3-0cf4-33a2-b9fa-93b7648e5bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:df:b1:c1:f8:d8:13:8a:cf:1a:11:ab:0e:f6:91:57:38:
         61:5f:92:aa:e9:b1:4d:1d:79:66:00:22:b3:7d:73:8b:d6:0e:
         cd:4a:4c:39:64:da:66:f4:84:d4:82:c4:ad:c1:21:c3:2f:ee:
         81:16:a2:15:21:d1:8d:d6:72:c7:4e:97:50:cb:c5:a9:17:65:
         61:e0:63:50:49:f0:d2:9e:33:ff:c2:26:86:98:7d:ff:f4:92:
         93:40:a5:4d:18:0d:87:b2:72:e5:de:9b:33:5d:c8:3d:b2:9e:
         ab:bd:1d:44:90:ed:0d:55:55:c5:92:63:65:7a:12:ae:eb:93:
         22:ff:50:b3:f8:71:65:b1:c3:94:a8:a4:6a:2c:74:56:0f:6a:
         c3:22:21:cb:7b:1d:78:f4:74:14:8b:bf:47:ee:a1:5d:0e:fe:
         45:ee:8e:0d:ed:90:88:d7:10:9b:c8:a8:15:9c:0d:f7:0b:60:
         13:d8:a3:2e:54:d8:35:66:be:9a:61:01:43:82:95:df:71:43:
         d9:13:31:a8:f6:1e:7c:3c:c8:fc:6c:53:28:a2:1b:43:ed:64:
         3e:43:cf:c9:de:06:81:00:61:82:d1:c4:5b:db:39:11:6d:08:
         5d:16:8e:7d:e0:03:74:e9:61:1f:2f:e9:a9:46:f0:db:18:d6:
         be:7b:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 06:44:02 2024 by rpki-client on console-fra.rpki-client.org