Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/54f7f8e4-287a-342f-ab77-28b025df0a5b.roa
File:                     54f7f8e4-287a-342f-ab77-28b025df0a5b.roa (raw, json)
Hash identifier:          8IaAsL9HViwjq5GPTlt+0IwpEwAry4POb5mERxl8/NI=
Subject key identifier:   A0:6B:D5:6A:59:D0:82:4B:8A:1C:8C:F6:E9:D7:F9:E1:EF:D5:48:7F
Certificate issuer:       /CN=85befeae-24b8-4c74-a4dc-19e1382944ad
Certificate serial:       010D0C9F4328583AD3F4CDBB0AF970A7C93A7E80
Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/54f7f8e4-287a-342f-ab77-28b025df0a5b.roa
Signing time:             Sun 01 Aug 2021 04:00:00 +0000
ROA not before:           Sun 01 Aug 2021 04:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     7786
IP address blocks:        156.154.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:d3:f4:cd:bb:0a:f9:70:a7:c9:3a:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad
        Validity
            Not Before: Aug  1 04:00:00 2021 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=ec1adb18-3261-4aae-88ef-6362c7b263fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:65:a8:33:27:bc:42:33:f4:f2:d7:e9:ce:
                    fe:42:aa:24:b2:71:da:3f:66:1f:3a:c9:77:3b:58:
                    69:1a:69:a0:78:5e:01:39:ab:92:2b:c9:6f:a1:0f:
                    2a:6a:bf:68:f8:ff:05:5b:3a:c3:f3:6a:ba:8f:33:
                    18:c9:ea:df:6d:81:58:7a:35:9f:76:a5:0d:55:bf:
                    c1:9a:f9:1a:28:1d:76:f8:0d:92:d5:c7:ea:e5:f6:
                    10:51:75:44:fe:5b:88:00:a6:2d:0a:85:fe:f8:d7:
                    c3:99:05:91:29:e4:f0:ac:f7:08:fa:91:97:5d:f5:
                    91:56:49:ce:11:36:45:3f:1f:9f:c6:b7:4a:90:c3:
                    f4:28:3a:32:6a:eb:74:1f:2f:f4:76:c8:30:22:5c:
                    ff:c5:53:9c:ad:2f:6a:4f:9e:1a:dc:94:2b:f9:9c:
                    87:5f:b4:1d:66:61:f8:ab:de:1f:5e:cd:fe:42:f4:
                    31:99:8b:bf:63:1b:bf:db:ed:ee:a2:46:44:de:cc:
                    ed:d2:89:6f:d1:38:95:c5:7c:97:3a:42:e3:86:bc:
                    75:c3:65:ca:c1:b3:15:06:9f:5d:79:4e:ae:a4:05:
                    40:28:62:ca:11:aa:31:69:17:76:0f:2a:ff:03:fa:
                    1d:09:63:51:08:22:c0:07:48:21:25:18:f9:18:1c:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:D5:6A:59:D0:82:4B:8A:1C:8C:F6:E9:D7:F9:E1:EF:D5:48:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/54f7f8e4-287a-342f-ab77-28b025df0a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl

            X509v3 Authority Key Identifier:
                keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:72:23:a4:bb:ed:80:a1:41:a1:79:ce:a3:93:be:6e:8e:
         1d:2d:d5:97:28:53:36:3c:7a:b0:71:6c:3d:17:9d:50:c6:e2:
         cc:42:13:b3:21:95:aa:23:15:c3:91:36:57:2e:2b:85:fb:06:
         cc:f9:86:ca:c9:86:d5:7b:7e:c8:19:cc:ba:2a:bd:f3:b5:ea:
         76:84:ad:dd:9f:96:0f:aa:86:ea:d9:50:84:58:d9:64:9a:1b:
         dd:33:80:72:f4:9d:35:d7:6b:2e:cf:d2:65:e9:97:b1:29:54:
         7a:dc:dd:ff:bf:ad:07:17:05:53:b6:3b:ab:06:74:a1:53:1d:
         67:2f:c2:c7:e5:0e:c6:3d:e4:fe:4d:b6:c1:5d:27:63:3f:f7:
         d1:4a:4d:9a:e2:8e:13:a1:21:bc:69:7e:ad:de:a3:7a:a8:fa:
         4c:91:4b:de:59:a1:e7:6a:c0:fa:88:62:21:53:a7:e6:0a:f7:
         b6:4b:af:65:38:3f:46:a3:99:55:5f:ae:1b:50:80:2b:6a:cb:
         31:27:c6:c1:e9:99:16:b8:47:d9:d8:a4:58:a4:3c:87:3f:3c:
         19:3b:7c:f5:96:2f:96:00:4e:7d:2e:29:be:28:06:26:85:a5:
         57:67:70:c7:90:da:8b:b0:96:3b:21:a2:cf:ca:74:e9:06:57:
         54:67:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:41 2023 by rpki-client on console-fra.rpki-client.org