Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/937cb478-463b-38e6-ac98-924af0fff903.roa
File:                     937cb478-463b-38e6-ac98-924af0fff903.roa (raw, json)
Hash identifier:          KBnyf95tr4cx2vGdo5j/sf6Us3mV3ogL2O+PsrPuDVc=
Subject key identifier:   29:F3:40:C5:FC:DD:3A:8A:84:DA:FF:1F:F6:46:80:8F:36:F5:F6:D6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7B64571080B83193FAFF700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/937cb478-463b-38e6-ac98-924af0fff903.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b6:45:71:08:0b:83:19:3f:af:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4906c3c2-5e06-4494-8b15-8f8bd1649417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:f0:b4:30:91:7f:3b:52:18:93:64:4d:90:
                    7a:ba:3a:d5:d9:3c:b9:52:f6:25:80:62:a6:4f:38:
                    0f:c4:39:f4:ad:1d:aa:1f:8d:00:5d:36:62:8d:b1:
                    51:9a:e6:f7:da:ba:4d:2a:62:e8:88:bd:0b:0c:d5:
                    3f:08:55:91:6b:73:27:02:3d:e4:54:a3:9f:c8:6d:
                    15:85:75:4d:15:58:50:e4:5a:af:ee:1d:aa:f4:7e:
                    a6:d4:93:09:37:ae:a4:98:ca:c4:f5:2a:cf:1d:92:
                    fd:62:05:5f:23:c1:a8:23:50:4c:a0:d1:c8:b2:96:
                    42:cb:46:5d:99:c5:7f:36:f6:bb:40:6d:c7:d6:b6:
                    3f:72:a0:5b:3b:8f:95:39:4b:c2:96:23:10:a9:e0:
                    8c:88:40:4b:81:4d:84:c1:f7:87:5c:26:9e:69:e2:
                    59:02:67:68:a9:0b:6c:fe:10:14:0a:f0:d3:34:a8:
                    c1:84:fe:97:48:59:9c:4e:a1:e3:00:9c:54:6a:80:
                    f3:69:e9:79:b2:cb:74:18:6c:60:2c:4c:5f:bc:3d:
                    7b:fb:4b:4b:8b:2b:02:2f:18:1e:b3:f8:5c:48:6e:
                    01:1e:a2:26:0e:13:9e:e1:e4:05:ea:fc:6d:a8:0b:
                    3b:42:f9:a9:5e:8d:56:9d:7d:dd:f7:7b:f1:65:5d:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F3:40:C5:FC:DD:3A:8A:84:DA:FF:1F:F6:46:80:8F:36:F5:F6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/937cb478-463b-38e6-ac98-924af0fff903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:37:a3:4d:52:9b:e1:d8:6e:47:db:5e:e9:4e:b9:2e:80:
         ac:bc:46:3e:78:85:23:1e:7c:36:a2:60:bf:89:39:fd:15:95:
         be:9f:84:7f:80:17:fc:81:b5:8c:06:9e:07:f1:4d:50:0a:42:
         ed:4a:6f:4e:4d:51:a8:c8:11:f6:8a:02:48:9f:86:14:60:13:
         3f:c2:f6:04:50:8d:c8:d4:c4:00:14:89:63:3f:c0:85:e8:74:
         a9:c6:43:c7:5c:d7:b3:58:c0:29:9b:ca:ab:12:f6:66:6b:48:
         ea:7d:f8:27:31:41:b4:c4:9f:fb:11:4e:e7:a0:73:e8:3e:0e:
         9c:54:08:de:06:8b:04:fa:05:ee:cf:7c:d9:52:73:86:a3:78:
         28:bc:e9:11:52:bf:0e:b9:08:33:fb:a2:56:90:c9:e8:81:4b:
         49:c5:37:fd:50:a3:d9:c0:3a:d0:9c:05:8d:d7:a1:44:ca:9d:
         b3:0e:0d:b6:8e:f0:b6:89:86:ce:a0:23:b8:84:f2:f7:bc:0a:
         17:51:9f:52:e5:1d:06:d3:1e:19:70:32:5b:be:b1:05:7a:ed:
         a7:3c:41:13:a9:b5:2b:61:c2:f8:3d:8f:31:bd:47:69:9a:8e:
         22:4c:e8:e6:68:9a:6f:de:3a:06:64:52:e9:f0:07:17:ac:27:
         cb:44:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org