Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/977e0cfa-0b68-39ec-8070-8d9a682ed58a.roa
File:                     977e0cfa-0b68-39ec-8070-8d9a682ed58a.roa (raw, json)
Hash identifier:          1r6EhHhjI279wDVEQwDFRw3o7qyZHQ1aFW04O2m+Wcw=
Subject key identifier:   87:D4:1F:9F:67:54:09:75:2D:10:22:EC:07:9C:8D:E3:12:6E:BE:38
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7AAF6D67C13006153C5E680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/977e0cfa-0b68-39ec-8070-8d9a682ed58a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:aa:f6:d6:7c:13:00:61:53:c5:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=27291649-0af8-43dd-8efe-4dc60bd9984b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:52:1b:87:6c:cc:55:43:8c:88:69:4e:79:7b:
                    2e:26:df:af:9f:ae:61:a1:dd:d7:99:d4:2b:34:dd:
                    d9:51:a4:96:d4:b1:ba:56:79:98:b8:94:5a:43:fe:
                    d7:4d:b2:61:79:70:f2:3f:8d:fa:93:d6:8a:b4:c9:
                    3c:86:9c:09:69:38:81:79:fc:49:ad:ae:42:5c:42:
                    3c:ca:ef:18:d5:18:1c:c4:7e:99:65:b0:f2:91:7e:
                    51:51:4e:73:23:ae:0f:1f:af:e1:cb:08:1c:14:f7:
                    70:d7:6f:97:c5:f4:0b:95:16:f6:34:e7:24:1e:ca:
                    21:39:d8:97:c8:ac:fd:49:20:0f:be:4a:50:7d:f4:
                    06:58:e8:30:4d:9f:ec:c3:47:b8:7f:65:74:7f:23:
                    49:1c:aa:41:97:0c:7c:bb:66:c7:ae:55:7c:7e:6d:
                    01:31:0e:3c:d1:a9:56:17:5d:af:5e:9d:87:10:56:
                    0c:48:65:bc:fe:b9:9f:39:72:02:4b:40:ec:46:eb:
                    3e:40:df:e0:89:b3:e9:01:95:10:c1:b8:8a:52:11:
                    18:ac:b5:eb:8f:71:56:10:77:03:d6:8a:f9:71:e2:
                    93:d0:40:5c:91:27:90:55:66:30:ef:c7:55:b6:18:
                    ef:47:10:f8:58:2b:f6:c7:40:7b:09:32:d3:b2:bb:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D4:1F:9F:67:54:09:75:2D:10:22:EC:07:9C:8D:E3:12:6E:BE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/977e0cfa-0b68-39ec-8070-8d9a682ed58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:50:64:0b:b1:8e:23:18:9b:55:4e:78:1a:68:9e:4c:b6:1a:
         c2:75:47:b5:fd:11:10:1c:68:fa:3e:0c:86:e9:d3:06:78:4b:
         54:2a:7e:62:ba:b5:04:72:71:0c:5f:bb:56:0e:ad:72:d1:f3:
         f8:9a:04:fe:70:7e:46:c3:20:cf:0a:cb:65:3b:82:f6:9e:31:
         7f:4b:ca:b5:68:fa:35:c3:9a:75:22:79:30:f5:be:01:c1:25:
         f2:f2:54:c9:ba:cc:3c:7c:b5:06:a8:5e:fa:56:b0:5b:05:c5:
         b1:6e:e3:be:20:46:0a:fd:e6:6b:23:88:81:7f:58:d4:2f:60:
         c7:c3:06:03:58:9c:02:30:26:7d:83:4b:17:5e:60:41:39:69:
         6c:42:30:7e:3b:5b:9a:7d:ea:03:17:9d:92:27:d2:b8:43:80:
         60:53:9b:09:c7:94:91:4c:13:9b:a1:35:5e:43:da:13:c3:5f:
         8b:0f:e7:cb:fe:ca:7e:99:ae:f5:cd:f4:a3:8c:e2:71:a7:7e:
         8a:c1:40:69:dd:24:a8:eb:ce:4d:0f:28:37:a2:67:ef:44:46:
         a6:bc:7f:de:1f:26:2e:48:eb:c9:4a:2d:43:ab:8b:c8:8a:35:
         6e:db:3e:57:58:6b:bb:83:87:42:3e:47:46:d6:05:6d:ba:53:
         d2:39:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org