Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0089e208-0ba0-3980-8133-3301cec8121a.roa
File:                     0089e208-0ba0-3980-8133-3301cec8121a.roa (raw, json)
Hash identifier:          ndORUjpVx24DKKADlSyN/GhovPtrnxCp70Tq2zaJ2eo=
Subject key identifier:   DA:DA:D5:3B:B9:C2:23:18:3C:93:2B:FE:F0:BC:DE:D8:B8:63:AB:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285842CB92FD4B70D159C87946EF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0089e208-0ba0-3980-8133-3301cec8121a.roa
Signing time:             Sat 05 Aug 2023 12:00:00 +0000
ROA not before:           Sat 05 Aug 2023 12:00:00 +0000
ROA not after:            Tue 06 Feb 2024 05:00:00 +0000
asID:                     400111
IP address blocks:        184.105.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:cb:92:fd:4b:70:d1:59:c8:79:46:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  5 12:00:00 2023 GMT
            Not After : Feb  6 05:00:00 2024 GMT
        Subject: CN=f0bf8e25-a0e3-4198-9de4-d0f97e0de70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:fe:cd:ee:8e:c9:26:f2:6f:50:56:ae:14:
                    c4:26:23:26:33:cb:d0:40:78:26:eb:84:f7:68:44:
                    db:dd:2c:6a:2c:32:a5:74:50:84:3a:7d:a1:b3:0c:
                    04:ec:35:b7:cc:b6:da:45:2a:3b:6c:4c:2c:c3:5a:
                    ae:d7:42:85:82:20:17:bc:a8:38:29:39:a4:b8:42:
                    3b:0c:f9:db:e8:19:37:a2:08:4b:56:95:d9:01:ec:
                    cd:93:7e:c3:7a:38:9b:70:e4:4a:e4:b8:8a:b2:be:
                    08:ad:11:0d:8a:80:74:c9:0f:1e:01:6a:23:83:e2:
                    ac:48:db:79:82:d4:c2:d8:d3:62:a7:23:6d:19:4a:
                    8a:2b:7b:c8:39:56:8a:69:58:c5:c7:ad:44:b5:a7:
                    3d:5d:72:ed:f1:c8:57:4b:bd:69:00:87:05:58:69:
                    d3:3a:92:d5:26:c3:4f:db:03:27:db:d3:41:86:49:
                    79:8b:a9:d0:46:ea:97:06:e4:e9:05:2f:b5:66:27:
                    b5:09:09:84:ca:bd:c5:e6:35:10:79:3a:03:81:cb:
                    ba:0a:24:a3:0d:43:7a:5a:e2:fc:cd:b9:4f:49:3c:
                    d9:60:9d:ff:68:4e:3e:03:4d:64:b1:95:25:10:09:
                    17:88:c8:36:16:ab:c7:83:38:38:8d:0e:09:38:70:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:D5:3B:B9:C2:23:18:3C:93:2B:FE:F0:BC:DE:D8:B8:63:AB:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0089e208-0ba0-3980-8133-3301cec8121a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:ab:55:8d:a3:a4:fb:8b:33:09:77:98:98:de:18:fd:78:
         34:61:59:cc:c2:42:56:42:3f:7c:de:51:86:35:7b:cc:f4:0c:
         f8:ff:b4:17:24:5b:41:96:b0:26:69:ec:6b:16:b4:4f:4a:1c:
         5c:ab:a1:73:21:d6:39:9a:05:24:d2:7b:f1:63:72:b0:18:f9:
         9b:52:0c:a4:a2:dd:27:af:c9:b8:7b:8f:48:01:fb:ea:60:c6:
         c8:ed:ec:90:6d:bd:9a:ec:1d:78:5d:3f:6e:28:85:48:5b:84:
         2a:e2:40:08:61:69:71:29:d6:af:79:24:7a:c8:1b:d6:2a:c1:
         a2:de:0b:80:f0:0e:72:7a:d4:59:97:a6:6b:d1:5a:94:59:1e:
         fa:3a:68:18:66:1c:d2:18:0d:cd:c1:b7:65:9b:fa:fd:4a:f9:
         82:25:ac:0a:61:39:18:ee:b6:95:51:03:25:47:37:6e:98:11:
         16:32:7a:ae:7e:74:b6:e6:51:cb:cf:be:cd:44:16:e2:e2:b7:
         21:7f:60:15:51:fc:b5:92:23:28:9d:1a:4e:33:f8:6b:27:de:
         49:a0:a0:34:2e:f4:ba:f7:a9:b7:b8:fd:51:5b:2b:cd:24:e7:
         ab:a7:3a:f5:dd:0a:70:02:60:95:22:ea:de:90:d9:f3:29:f1:
         1b:7e:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 05:45:56 2024 by rpki-client on console-fra.rpki-client.org