Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56181af3-994c-3f1c-92f9-b2378f1b56ac.roa
File:                     56181af3-994c-3f1c-92f9-b2378f1b56ac.roa (raw, json)
Hash identifier:          yXyVWsqqKA6Yb6VsViaiYoaFxlaohiiMeP/0kgQ7Nng=
Subject key identifier:   52:43:EB:2F:0F:C4:9A:07:CF:39:7B:2A:FD:B3:46:B9:68:B6:A0:98
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583B841734F0B9C99B15E6143980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56181af3-994c-3f1c-92f9-b2378f1b56ac.roa
Signing time:             Thu 07 Oct 2021 04:00:00 +0000
ROA not before:           Thu 07 Oct 2021 04:00:00 +0000
ROA not after:            Thu 07 Apr 2022 04:00:00 +0000
asID:                     1544
IP address blocks:        65.49.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:84:17:34:f0:b9:c9:9b:15:e6:14:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  7 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2022 GMT
        Subject: CN=c746b59b-c078-4df2-a657-a9c36ebce70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:99:7e:37:42:cf:4d:78:05:a8:33:76:e7:
                    7b:fd:31:72:64:1a:1d:fa:00:c1:dd:24:92:e6:e3:
                    43:ec:41:7c:1b:f8:b2:1c:15:93:d3:bf:a8:01:41:
                    1c:a6:fc:50:f8:91:77:16:40:06:66:56:86:a2:99:
                    dd:e7:f0:d6:b6:27:7c:6e:5a:0e:47:d7:f8:a9:18:
                    28:a3:37:89:97:b6:20:64:46:17:ca:b9:bd:8c:80:
                    8b:2c:48:40:5d:0a:a1:00:f0:1f:a7:02:e1:ab:3e:
                    11:4e:62:94:dd:09:3e:13:04:eb:74:7f:99:2b:aa:
                    a5:f7:99:0b:58:f3:77:d7:55:97:0a:eb:f1:86:e4:
                    24:2b:50:a4:03:59:e4:4a:ab:b4:f9:f3:3c:47:24:
                    ec:b2:b7:22:4b:62:d8:21:13:f9:60:3c:50:4c:0b:
                    07:5c:25:db:8c:40:5a:aa:ac:20:8c:24:b4:7a:b4:
                    11:78:1e:d4:0a:f4:e2:25:81:6a:2c:2a:29:82:04:
                    43:f6:57:71:89:8d:a6:73:7c:fb:96:6d:14:8c:31:
                    1b:6e:44:68:17:53:95:ad:04:9e:5d:e8:bc:30:ab:
                    53:6b:0d:12:ba:06:60:cc:19:5f:71:39:49:37:40:
                    c8:e0:84:49:9b:80:65:e8:a6:12:e9:96:64:e3:b9:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:43:EB:2F:0F:C4:9A:07:CF:39:7B:2A:FD:B3:46:B9:68:B6:A0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56181af3-994c-3f1c-92f9-b2378f1b56ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:a6:e8:c6:a3:f1:76:f0:27:13:dc:46:c4:61:c4:8c:94:
         fb:34:01:3a:62:89:c8:83:10:0f:ff:1e:43:c8:23:fe:38:ec:
         77:7f:2b:50:48:2b:62:b7:c1:88:2d:57:9a:90:d6:29:8e:8c:
         65:dc:aa:4f:98:2a:24:ea:a8:60:a3:d5:d2:7b:90:86:61:f0:
         17:18:64:2b:47:f2:e7:59:47:63:07:b6:3a:c5:bd:24:8c:85:
         63:8c:67:32:f3:fc:e3:4d:fd:3f:a1:1e:31:9a:4d:85:08:3e:
         b6:ea:86:ed:aa:51:93:b2:18:71:87:0e:1c:83:62:bf:36:53:
         61:2c:d6:ae:a6:aa:ad:80:bd:9a:68:50:0c:a8:4f:2d:89:7f:
         c3:b7:fa:4e:0a:3a:c6:7a:40:00:bf:0a:a0:d1:de:a2:28:e3:
         a5:f0:dc:e0:48:af:05:91:a4:e2:a4:8e:7b:5b:a5:9e:c4:91:
         7e:9c:88:0f:11:6b:64:77:e9:c0:cb:1e:6c:33:91:f0:3e:f1:
         bf:94:3d:56:c4:aa:ff:12:9b:ea:56:03:c0:8e:b4:13:fd:ba:
         69:23:0a:d5:4a:33:da:0b:a3:a8:a5:69:3c:7f:be:97:b7:3d:
         3d:71:87:d8:4d:45:65:cb:06:98:dd:7f:e8:8f:cc:43:31:8b:
         fd:3e:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:37 2023 by rpki-client on console-ams.rpki-client.org