Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ab1f8ee-ee29-3cac-8fcb-be0234cc397b.roa
File:                     7ab1f8ee-ee29-3cac-8fcb-be0234cc397b.roa (raw, json)
Hash identifier:          0o+KQPi4TWxG9lIQR7ey0aCSr7uCG7PCQJ0eTXmeYNU=
Subject key identifier:   A2:C7:04:85:B9:C2:C6:EF:3F:03:7E:3D:0C:AB:21:A8:84:47:61:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DDF95EC73ED82C603A6A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ab1f8ee-ee29-3cac-8fcb-be0234cc397b.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     18865
IP address blocks:        216.218.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:df:95:ec:73:ed:82:c6:03:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=d2142116-623b-4160-8e25-502ef080ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:05:02:ad:b6:d4:df:5f:35:43:d4:9c:90:
                    99:a6:e8:58:b4:84:2a:16:56:70:eb:07:a6:7d:0c:
                    c6:17:0e:16:b4:a2:19:72:56:03:d2:e9:fe:7e:83:
                    54:9c:d7:00:f4:6a:0e:10:e2:fa:1b:27:a6:45:3e:
                    c5:91:97:b9:4a:e0:96:44:17:82:cc:97:5c:66:10:
                    09:81:bf:c2:2d:10:db:da:f0:d9:2f:81:61:0b:72:
                    06:1e:dd:4d:97:bd:42:de:ea:d0:23:80:ea:8f:02:
                    2c:fd:1d:10:32:b8:b3:8c:ca:41:08:a2:0c:40:c2:
                    0e:4d:38:7c:54:c8:9f:1e:77:b6:cc:a5:ea:75:92:
                    23:52:33:ce:21:70:7c:b7:d5:80:6a:fb:b7:25:b3:
                    b8:3b:e0:7b:9a:9b:72:83:24:01:3e:d7:f0:f2:0f:
                    5c:f5:24:35:be:0b:f1:cc:0f:c7:56:e1:ba:ee:c5:
                    ce:ee:93:83:08:b8:f1:4f:c8:3a:06:36:80:2c:84:
                    ba:31:b0:3a:1a:3f:59:d3:bd:aa:8b:2c:61:62:b5:
                    86:d6:44:ae:c4:94:6b:a8:5d:68:50:6b:63:2d:99:
                    b5:c2:4a:43:c7:cf:e2:2f:4d:29:ce:99:4a:ae:b3:
                    25:f9:af:43:ac:8f:04:9d:69:6b:9a:57:90:c3:be:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C7:04:85:B9:C2:C6:EF:3F:03:7E:3D:0C:AB:21:A8:84:47:61:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ab1f8ee-ee29-3cac-8fcb-be0234cc397b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:db:81:6e:66:67:ba:3f:74:9e:9f:aa:4c:07:82:04:33:de:
         e7:30:38:f1:54:f5:45:0a:11:02:aa:33:75:0f:88:4f:01:83:
         09:3b:b9:04:56:a2:b6:73:f2:b8:2d:45:59:05:97:ab:6c:a3:
         99:51:48:2b:ff:3f:f3:50:08:e3:91:e9:b2:af:8b:a0:40:dd:
         1a:c8:d4:7c:9c:60:7d:d4:57:80:25:f1:f9:54:2f:dc:24:61:
         92:59:86:14:48:7d:4a:8a:b1:7c:f9:c8:13:a9:5a:3c:2c:af:
         57:36:9b:81:b2:57:74:45:9a:55:0b:45:f3:70:53:ee:c3:72:
         55:60:1e:48:d9:9a:04:07:46:ef:c5:c7:a5:a6:d4:fe:82:ab:
         4e:a3:68:35:e4:4b:e6:35:f2:a4:f0:43:3e:5d:1b:6b:3b:b2:
         7b:8a:e8:9e:43:17:53:2c:ee:b5:e1:42:9c:ba:7d:f4:10:ee:
         ae:d4:5d:cc:c9:0b:fd:0b:c7:24:79:95:07:ae:a4:f0:21:a6:
         4c:38:f1:86:f5:59:f0:49:a5:19:e4:d1:d2:f4:55:cb:b8:d5:
         89:63:1a:6d:4f:94:57:be:09:b5:85:6f:78:79:14:2a:03:35:
         26:e2:93:d6:ca:8a:5d:de:33:07:06:96:49:24:48:e7:dd:13:
         61:d6:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:43 2023 by rpki-client on console-fra.rpki-client.org