Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/64589374-b83d-3714-b7ec-82d8b34c4c4d.roa
File:                     64589374-b83d-3714-b7ec-82d8b34c4c4d.roa (raw, json)
Hash identifier:          hRiY3u78jA6LO/pnu43AFEhs7OMBBPmi0pm33nmWXBQ=
Subject key identifier:   AF:E8:AE:FF:FF:E5:1B:1E:40:15:61:BB:A3:11:93:61:C8:58:63:56
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328576D51CC73C042CFC173A53F79B1
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/64589374-b83d-3714-b7ec-82d8b34c4c4d.roa
Signing time:             Fri 31 Jul 2020 14:21:07 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        168.238.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:a5:3f:79:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=8e502c73-54f3-4463-81d6-0cd66ea919df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:d8:e3:a3:5f:d6:d2:70:1d:fe:62:f2:74:
                    67:61:55:0f:5d:bd:b1:10:07:4c:84:71:86:84:ed:
                    7a:18:4c:5e:e2:58:75:ef:32:52:94:90:71:3c:e4:
                    ac:96:23:c9:b4:b3:a8:5d:20:7d:72:21:4b:b2:6e:
                    02:7f:02:64:0a:58:d8:22:fa:56:36:24:3a:60:17:
                    4e:77:62:01:8c:d6:e0:a7:53:c0:26:6a:6d:af:96:
                    1d:8d:a9:4f:a7:9d:c4:b6:29:1f:02:f2:60:61:44:
                    6a:07:43:4e:2c:a4:3c:c9:b5:ce:02:82:62:d1:e1:
                    d5:34:5b:79:af:80:49:47:dc:34:78:f7:cc:37:f6:
                    de:88:ac:9f:d5:03:c0:c3:6c:25:0a:a5:bd:67:38:
                    1e:47:b6:86:eb:bf:4a:02:fc:8e:01:b6:f0:ce:0b:
                    b4:09:99:84:93:48:86:b5:bf:71:1b:be:6c:54:4e:
                    6d:d1:29:fe:f6:1a:ee:b2:bc:14:7e:e6:0b:e3:69:
                    df:e6:8c:a7:5f:bc:9c:d6:36:47:78:c2:b4:d5:cc:
                    e5:f4:2d:fe:f6:7e:5c:c1:e8:c2:8e:ce:12:46:4e:
                    18:47:24:98:19:86:51:2a:eb:b0:2e:2d:0d:7f:8b:
                    5d:7a:e9:68:cf:25:e7:0b:be:f6:db:f4:d3:a5:b7:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E8:AE:FF:FF:E5:1B:1E:40:15:61:BB:A3:11:93:61:C8:58:63:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/64589374-b83d-3714-b7ec-82d8b34c4c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:04:86:fb:ba:36:bb:8d:9b:09:03:4a:89:92:ad:d8:a2:
         4a:cd:b7:fc:43:99:69:d7:88:9b:9f:52:0d:6b:0c:5d:e0:21:
         15:71:7f:09:46:1f:52:81:3b:7b:3d:f8:c4:58:78:39:96:32:
         25:4d:2d:32:e2:b0:04:91:99:95:e1:f5:67:cb:52:00:e0:fc:
         6a:f1:f2:3b:e4:c9:4c:50:12:12:6e:0c:45:95:91:6d:de:3a:
         fe:ec:97:74:4e:18:15:ec:9c:c9:a6:31:b3:be:78:2b:a8:90:
         49:b3:f2:04:5c:16:b6:f5:85:35:15:a6:44:9b:1e:4b:e2:65:
         58:3a:1f:cf:46:99:f0:4d:2c:5c:49:5c:09:4d:52:69:5a:61:
         39:2c:c9:01:04:fb:d6:b2:e2:4b:21:9b:d3:79:66:9f:72:89:
         e9:04:0c:ee:07:31:92:69:3f:3b:5a:06:94:20:00:99:af:52:
         b4:44:53:71:eb:61:9c:39:56:f0:d9:93:3d:48:cd:e6:d9:c6:
         c2:60:d6:ce:e2:d8:44:38:b5:f7:af:43:c8:07:b0:60:2d:57:
         0c:c7:45:5b:6d:f2:c4:be:20:01:16:85:4f:a8:3f:a5:d0:da:
         f2:16:3a:0d:f6:20:5c:8e:b9:a5:94:64:49:e2:7e:ed:10:9c:
         5b:ad:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:30 2023 by rpki-client on console-fra.rpki-client.org