Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d179582-2689-3561-b1be-fc7103532f69.roa
File:                     1d179582-2689-3561-b1be-fc7103532f69.roa (raw, json)
Hash identifier:          +6pVEwlAbxTZs7ac31fO6KQxO2lSf+ExD7ClFT3vcwM=
Subject key identifier:   8C:E4:EB:FB:30:51:B1:2B:10:E9:AA:FE:00:A2:77:30:29:63:F7:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6DD3B96E916BC0D1BD980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d179582-2689-3561-b1be-fc7103532f69.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     54288
IP address blocks:        65.19.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:dd:3b:96:e9:16:bc:0d:1b:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=0963700d-367d-4893-8000-ec91e455e27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:dd:22:95:c3:fe:68:8d:b6:81:83:b1:37:
                    6f:c8:00:c3:cd:28:33:a7:59:4a:0a:79:0b:53:b9:
                    c9:67:ca:08:a9:94:a4:08:e5:ae:c6:9b:f0:c6:a9:
                    e2:e3:db:68:8e:ae:7f:20:6b:36:22:ef:ad:01:78:
                    53:64:f5:43:a2:2b:2f:4d:49:7e:db:3d:18:21:c4:
                    36:6d:13:82:f4:45:1e:82:ba:4e:4d:52:b8:c5:c4:
                    a2:0f:33:c6:8e:1a:b5:cd:00:88:db:5f:71:93:ce:
                    2e:57:50:b1:aa:98:df:b7:cf:3a:9c:dd:21:aa:f4:
                    9c:fc:fc:48:53:04:2b:44:f6:9b:ca:70:36:ff:89:
                    0c:b4:38:30:0a:fd:5e:e7:87:7b:58:31:1d:32:50:
                    01:b6:90:63:8b:a1:dd:70:83:14:28:55:4c:0d:5c:
                    64:ce:f7:0f:b0:b0:aa:f9:1d:0f:c4:62:e1:f0:8f:
                    32:31:7f:3a:da:d3:50:f2:1e:c6:c6:fd:e8:b2:0a:
                    d6:e8:b4:85:f0:78:ee:03:f9:31:e0:56:04:ae:a9:
                    68:ac:a9:91:7f:1c:64:c7:af:e7:62:b9:73:62:88:
                    3d:47:d6:b2:57:84:62:aa:9a:5b:6b:18:77:46:81:
                    36:dd:66:9b:2e:86:53:95:4b:15:3b:3e:5d:aa:ea:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:EB:FB:30:51:B1:2B:10:E9:AA:FE:00:A2:77:30:29:63:F7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d179582-2689-3561-b1be-fc7103532f69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:d4:31:73:7d:eb:d2:0d:93:25:a8:78:2f:97:7a:d1:a1:
         62:20:cf:80:09:24:4d:3b:0a:81:36:d2:ec:13:bc:f4:af:18:
         58:83:2f:00:55:7b:c9:4d:69:f4:25:14:c4:53:dd:60:18:d9:
         ad:c2:5c:2e:d6:a9:29:b9:b5:ea:d6:85:57:64:d2:7f:f1:29:
         fc:26:0c:ac:ad:7e:d3:e2:cc:8f:84:c5:c5:4b:85:87:70:ef:
         1f:d3:86:24:f9:fc:f0:46:f6:a4:36:fe:f9:26:24:74:9f:90:
         b5:af:87:f7:8c:78:8f:a6:d5:39:f5:d0:70:26:da:0a:01:01:
         f3:1d:c4:25:13:d8:1d:1c:e4:65:b5:ca:6d:10:50:3f:f3:59:
         bc:d4:a0:3f:8e:6c:b3:d8:97:b3:d3:e4:69:1d:f9:97:14:fd:
         bc:16:cd:d1:20:76:e7:55:dc:1b:e3:4d:be:b5:47:81:35:05:
         21:d7:a2:d4:62:ba:30:3e:ea:97:b2:ef:84:03:3a:b0:22:34:
         ea:72:6e:03:6b:47:44:1b:44:b6:4e:42:55:62:bc:95:f7:87:
         58:dd:34:df:63:4e:ca:8d:13:35:5f:1f:e3:05:a0:44:6d:b9:
         45:bd:07:ce:16:9c:db:44:88:51:57:74:10:c4:b2:66:92:7d:
         78:24:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:35 2023 by rpki-client on console-fra.rpki-client.org