Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/566996ac-83a7-3071-828c-37e062160264.roa
File:                     566996ac-83a7-3071-828c-37e062160264.roa (raw, json)
Hash identifier:          wgUUQt1zPe7a4KPF3cJlt3FvG4lS80r4PpoD2tgYhgw=
Subject key identifier:   70:E7:2F:88:48:7D:98:BF:E6:D4:40:39:D4:AE:80:56:04:B8:CF:A0
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7AE9198FEAAC06DEA37A700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/566996ac-83a7-3071-828c-37e062160264.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        216.239.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ae:91:98:fe:aa:c0:6d:ea:37:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=24afae1e-c228-440a-ad2a-ca002bda1ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:13:54:93:0b:61:f0:ca:7b:dd:ed:5b:18:
                    12:56:41:96:5a:f5:66:07:8b:8c:16:01:b2:b0:bb:
                    80:25:4d:34:f0:f9:c7:7b:6d:de:64:6b:63:ac:3c:
                    e9:12:58:4f:d8:9a:f3:27:95:82:d3:b0:88:77:d9:
                    91:7b:a5:e4:45:22:ff:34:0b:d0:9d:9c:05:18:db:
                    16:16:75:3c:98:d0:bf:8f:e2:20:bb:58:56:70:f9:
                    1d:21:ce:d4:1c:70:0f:27:12:9d:7a:29:85:97:cb:
                    12:af:81:4d:4d:60:1a:0f:2a:0e:1b:f7:d9:09:55:
                    df:2f:d3:27:5c:ae:f1:e9:b6:05:71:09:2e:cf:17:
                    d2:17:eb:e0:fe:da:29:6b:5f:df:1d:cf:ec:cb:25:
                    b5:92:cf:a1:83:5a:19:a7:26:36:e8:1d:5a:af:18:
                    aa:d5:2a:4d:d6:99:ad:d2:da:e7:4f:40:c9:b9:16:
                    45:bd:d0:f3:ef:44:5e:28:01:11:05:e4:25:7e:6a:
                    a7:5e:6b:f4:66:eb:8c:ab:1a:67:9f:7b:2e:6c:32:
                    b7:45:0b:3e:fd:69:12:c9:3c:50:65:24:ac:25:4a:
                    d0:a1:16:41:7b:ea:02:82:23:e0:55:63:c8:f1:c6:
                    30:a2:b4:63:79:fc:5e:51:d5:0e:85:da:74:cd:2b:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E7:2F:88:48:7D:98:BF:E6:D4:40:39:D4:AE:80:56:04:B8:CF:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/566996ac-83a7-3071-828c-37e062160264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:42:29:5d:59:a1:33:fd:98:f7:00:28:d5:06:c9:dd:f9:
         d3:80:ac:d5:66:46:66:93:4c:e0:19:81:1b:4b:a9:1e:26:38:
         25:b4:4f:78:f8:e6:0b:1d:e7:e8:04:a8:f4:76:4a:38:e3:48:
         0c:75:a5:b4:42:96:4d:ed:15:61:6f:68:3b:a7:9a:2d:ff:3a:
         2d:e9:2e:e3:b0:bc:43:67:1d:82:d8:4c:4f:11:13:40:a9:f4:
         d1:be:d3:e9:7e:cb:4d:03:94:76:12:04:78:53:64:f3:ca:8e:
         08:b4:9e:13:59:ac:fb:a7:72:62:47:c2:92:ef:1e:43:d8:d0:
         37:6c:d3:a0:a6:25:63:d8:2b:b8:d1:45:86:15:9b:42:7b:df:
         c8:f3:06:14:99:d3:38:35:79:73:7d:85:49:e7:91:f5:3f:f8:
         5b:76:9d:0c:a1:de:a7:15:b1:d9:9a:2b:75:67:d8:4f:bb:dd:
         76:a0:f8:b9:da:2e:73:26:0e:83:d7:33:62:6b:96:ea:54:72:
         8a:d7:8c:58:26:6c:fa:6f:42:0c:6f:38:b8:e0:5f:91:31:db:
         d9:03:0d:6b:e9:66:51:29:b7:45:6b:9c:1f:42:05:16:93:f0:
         39:88:56:ee:8c:8b:5b:27:d7:9f:68:50:e2:4d:1f:88:e8:cf:
         c9:67:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org