Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/204fd853-287a-327a-9012-38e020f2f887.roa
File:                     204fd853-287a-327a-9012-38e020f2f887.roa (raw, json)
Hash identifier:          G6U6rvBOCCA0Wzb8IBQ/wWbbdInJ3s2zp9m9d5QI5iU=
Subject key identifier:   6F:66:F8:F8:15:E2:B3:66:27:55:DD:A4:65:90:DE:83:0D:D4:BB:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C83A69505130FB5044CA8A1A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/204fd853-287a-327a-9012-38e020f2f887.roa
Signing time:             Fri 07 Jan 2022 05:00:00 +0000
ROA not before:           Fri 07 Jan 2022 05:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     40050
IP address blocks:        64.71.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:83:a6:95:05:13:0f:b5:04:4c:a8:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  7 05:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=483be154-771d-4b72-bd4b-47b0ad9f1d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:d6:f5:c5:bc:b7:80:aa:42:f8:71:e1:49:
                    b9:50:5a:66:31:f8:99:b1:6c:2c:63:a1:14:b6:f1:
                    01:a2:3b:dc:47:3b:88:e2:ef:c2:1a:ff:16:a0:fd:
                    01:46:23:c5:48:0a:8c:b3:e9:79:e5:8e:73:cf:f6:
                    8a:2e:2a:21:28:e1:5e:12:fc:86:c0:c7:36:a6:70:
                    8f:ed:fe:bd:64:84:41:96:37:7a:70:ea:ef:86:85:
                    6b:a7:d4:b2:70:a5:89:4a:48:9c:1d:61:ed:f2:68:
                    38:be:6e:5f:3a:19:f9:3c:3f:f3:f3:53:5c:20:00:
                    61:87:1a:8e:ac:bd:a0:a1:23:7f:99:a6:18:e8:01:
                    b7:7d:8c:f3:e1:dd:84:9f:c6:fa:ac:b3:c1:97:dc:
                    16:23:11:10:c6:98:36:48:af:ce:54:ba:b2:46:6a:
                    d9:ef:d7:39:76:c0:b9:ef:18:8a:06:ff:af:ef:6d:
                    19:8c:be:08:11:1b:f3:65:b4:76:45:7d:ef:64:7a:
                    01:ec:21:cf:1f:6a:67:25:b8:b4:db:26:5a:7a:89:
                    3e:5b:c3:91:10:4b:37:4b:3d:a5:6e:be:32:14:17:
                    2a:54:c2:9e:f9:a6:e7:ef:d5:d4:45:45:e5:63:07:
                    e5:85:e8:45:61:f5:3e:13:4c:31:e5:9d:52:47:07:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:F8:F8:15:E2:B3:66:27:55:DD:A4:65:90:DE:83:0D:D4:BB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/204fd853-287a-327a-9012-38e020f2f887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:44:62:66:ad:b9:48:bf:1a:97:10:fd:d0:8f:3e:e2:0f:
         18:c2:3c:f9:88:5d:22:54:49:0f:41:62:32:83:5e:11:03:6e:
         f3:55:8c:b2:0f:ee:41:ec:e6:8f:1d:e2:a0:64:51:9a:93:85:
         aa:44:6a:47:a5:b3:53:d4:fb:9c:0f:99:1b:be:6b:82:10:b4:
         99:4a:aa:d6:86:43:6f:86:65:52:a7:3e:26:a4:b0:2e:c1:20:
         fa:a4:0e:fb:a0:01:aa:55:55:e5:1d:f7:c3:5d:0b:7b:e8:00:
         af:10:06:1c:91:81:13:e2:fa:16:ff:20:9d:ca:ea:0a:5b:26:
         e9:73:74:04:45:f3:85:01:0e:9b:f2:a5:03:c1:f1:7b:d5:5a:
         dd:c6:7d:aa:4b:fd:1b:17:d2:e2:dd:8c:32:b4:cc:cd:10:d8:
         dc:ca:78:7f:99:68:e7:85:fa:d9:1f:56:25:e0:29:4c:e9:ab:
         c9:e2:1c:1a:0c:8c:40:a6:9f:72:30:d0:37:f9:85:58:fc:ab:
         12:29:47:51:d7:e5:73:80:ec:42:c5:d7:a7:79:74:30:81:ba:
         ee:b5:71:62:f8:94:f1:b5:ae:69:c9:5c:88:77:23:aa:ab:d2:
         4f:0a:90:ba:f4:3a:ac:c6:b3:56:95:48:ac:d0:d0:d7:43:5d:
         86:5e:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-ams.rpki-client.org