Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3cfeadf-28bd-3812-9693-e9656c1b1bf8.roa
File:                     b3cfeadf-28bd-3812-9693-e9656c1b1bf8.roa (raw, json)
Hash identifier:          aLP463cF5ojA+6VPZWGEy5EeQ+KNUTY6gQoqmAHg5c4=
Subject key identifier:   CB:01:6A:70:1E:CA:9D:72:27:75:3A:32:9B:D4:19:DF:0F:7D:D7:63
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858419E8AEDFA08C428089E53D280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3cfeadf-28bd-3812-9693-e9656c1b1bf8.roa
Signing time:             Sun 23 Apr 2023 12:00:00 +0000
ROA not before:           Sun 23 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Apr 2023 04:00:00 +0000
asID:                     397243
IP address blocks:        156.154.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:9e:8a:ed:fa:08:c4:28:08:9e:53:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 23 12:00:00 2023 GMT
            Not After : Apr 26 04:00:00 2023 GMT
        Subject: CN=61cec8c0-58ca-46fc-b0b5-47e173745537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:e6:3b:c0:a7:51:5d:ff:d0:8f:00:f0:e3:
                    a1:00:ab:5b:ea:e2:cf:15:18:69:53:df:bf:31:e4:
                    2e:31:e0:24:8c:58:03:ce:b5:88:1f:59:25:da:94:
                    f5:dd:ed:bc:e4:f0:9b:0a:98:b1:04:7c:c7:3e:bf:
                    af:72:34:3f:59:6d:48:3f:c8:b1:40:44:bc:4e:a6:
                    a4:3d:7f:72:6c:da:cb:a4:a7:bc:b8:d4:85:91:d6:
                    d6:93:1d:d7:98:8a:5c:be:e0:7c:d6:53:91:b5:e8:
                    57:12:cc:ce:1b:8c:8d:34:16:96:86:c4:c7:df:18:
                    2a:94:a8:02:67:d5:91:06:47:a3:a9:b1:fd:e3:dd:
                    24:17:1f:18:af:a7:8c:d3:3f:64:97:90:6b:e9:3b:
                    5b:c7:a6:b7:20:5d:a4:98:29:9a:3d:57:dd:48:41:
                    22:59:08:7c:4d:1c:e9:99:59:26:76:60:49:ad:1d:
                    e5:61:25:9d:0e:22:89:2b:11:4d:d1:b5:b5:f4:37:
                    b7:3b:c1:d5:64:f0:35:30:55:66:db:b5:76:d9:bf:
                    06:2e:3d:75:ec:b5:8a:e8:dc:d3:be:af:5c:d8:0e:
                    52:c2:90:14:5c:04:4d:cf:8b:a2:b9:bc:69:1a:8f:
                    fd:89:08:8c:e5:96:61:35:1d:32:41:54:76:45:70:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:01:6A:70:1E:CA:9D:72:27:75:3A:32:9B:D4:19:DF:0F:7D:D7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3cfeadf-28bd-3812-9693-e9656c1b1bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1f:8b:54:88:33:05:f5:84:69:45:7e:39:e9:2e:b2:2a:4d:
         6e:68:d3:87:10:46:cd:ba:86:58:b7:73:ac:6f:0b:9f:90:e1:
         8f:c8:4b:13:da:e4:19:ee:37:07:9e:cd:94:f4:72:31:2d:7b:
         45:49:47:77:26:4a:f1:d0:a7:55:97:e9:cc:2c:70:cc:d5:90:
         75:30:42:9f:29:27:a2:fc:54:99:39:68:3c:f3:1f:11:d8:24:
         8d:e9:a7:71:76:fa:05:ef:a2:9f:43:32:ca:4e:5b:91:7e:9c:
         ba:97:21:b7:41:6d:92:3e:a2:e0:e1:ac:fd:ef:77:17:8d:d4:
         07:ef:0c:ed:ec:d1:3f:47:01:98:3d:48:d9:04:ca:75:d7:f6:
         08:fa:84:1c:8c:e0:75:d3:05:67:18:a6:cb:de:94:5b:ae:d3:
         33:4d:48:b2:df:43:34:d5:f8:51:8c:9f:2d:03:c9:69:2f:a7:
         3a:a1:31:2e:7e:f3:54:b3:91:4a:be:fb:c6:38:e8:bc:ff:ac:
         12:e3:72:1b:07:17:49:3d:94:79:92:e8:86:7f:1d:d5:1d:db:
         9c:89:80:0d:1b:94:b2:51:13:a4:0e:28:71:20:db:ab:85:d1:
         5f:e1:1b:ae:3b:d4:d8:70:8c:d7:68:cb:09:4f:d5:03:98:af:
         71:3a:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org