Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/968e5374-29f8-3da3-86ff-5c9796042814.roa
File:                     968e5374-29f8-3da3-86ff-5c9796042814.roa (raw, json)
Hash identifier:          6gCMPl6XDR3chEwX9W6Tlszce+G45fxdAUAxFObB4Pk=
Subject key identifier:   54:C4:3D:06:C5:7F:5B:AD:35:D5:8E:15:F6:06:6F:85:C0:32:43:B8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5091E4EB35B3474F025680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/968e5374-29f8-3da3-86ff-5c9796042814.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     54934
IP address blocks:        184.105.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:91:e4:eb:35:b3:47:4f:02:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=8c3ef6b9-7ee8-4f47-8246-53988a6c901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:1f:08:2f:b0:bf:7c:ca:c1:9b:10:d7:35:
                    01:3d:fc:3c:af:56:10:10:22:ed:42:b7:6a:a5:9d:
                    d9:ac:84:cd:10:b1:22:dc:75:3d:c9:ad:33:da:66:
                    10:13:10:f5:f5:6b:f8:1e:eb:a0:34:63:16:be:19:
                    4b:b6:f6:58:57:0c:98:b7:01:f5:42:fd:3e:af:55:
                    14:42:af:39:27:6f:a4:7a:da:7c:ec:9c:3d:b4:eb:
                    0a:68:fc:26:5e:08:91:62:98:ae:c0:6c:49:fd:b9:
                    a1:72:2c:de:79:fd:9e:47:68:ed:de:dd:5a:c1:f3:
                    b7:8f:fb:80:f3:8f:b6:2b:2d:da:4f:3e:25:33:1f:
                    60:fb:bd:7e:4d:68:d3:1d:c1:11:26:75:dc:51:47:
                    ef:c9:60:a4:80:fe:36:c9:16:b9:c0:66:6e:ea:19:
                    a1:f0:a8:8f:0e:fe:d4:f4:90:97:07:d0:08:8a:2c:
                    9e:f5:d8:a5:eb:d2:09:fc:40:b4:0f:30:ef:03:6a:
                    78:a8:86:87:4a:8e:da:bc:41:85:ac:5a:54:4f:9b:
                    1d:e8:d4:f4:96:5b:0e:fe:9a:31:c9:47:de:fa:7d:
                    a9:4d:4d:56:84:8e:62:37:2d:5c:10:1c:1f:cc:26:
                    0f:08:64:9c:72:00:f1:cd:6e:e4:7e:87:d1:80:ac:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C4:3D:06:C5:7F:5B:AD:35:D5:8E:15:F6:06:6F:85:C0:32:43:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/968e5374-29f8-3da3-86ff-5c9796042814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:42:82:15:f4:df:b6:05:ab:83:de:f0:bc:0e:2d:17:77:
         0e:4a:a2:86:a6:14:e1:31:a2:9c:69:c6:2c:7e:dd:28:02:06:
         f2:a4:b0:ca:b8:d8:b8:64:49:e4:77:c4:a6:71:82:bd:f8:c2:
         02:09:6c:2a:5a:ea:ec:9b:8c:44:02:13:70:0d:08:d6:3f:7f:
         a7:8f:46:a6:96:1e:0f:9d:b3:a9:44:a2:ba:75:65:bc:70:43:
         2e:d3:62:36:55:ab:3b:5b:19:16:1d:91:af:db:0e:5e:d5:e3:
         33:56:dc:06:2a:d9:bd:fb:cc:c5:a8:7f:27:3f:73:56:01:da:
         8c:e0:14:9a:ca:de:52:02:4b:ee:2e:d3:5e:a1:12:11:55:c3:
         38:db:2e:c2:f8:c4:65:e9:e2:00:7c:d2:ba:9f:d0:25:5e:92:
         03:25:f4:f0:68:0d:6a:d0:d3:93:30:1e:52:ec:2b:96:68:8e:
         cf:bd:ed:f1:91:cb:41:d5:43:44:cd:0e:ef:0b:0e:4c:ed:1c:
         29:9e:e8:ca:26:29:5c:23:13:82:a5:0d:10:20:bd:6a:40:b6:
         b1:e5:aa:97:fb:90:4a:24:87:cc:e6:7b:e5:86:4d:50:0b:6e:
         44:c7:6f:bc:d6:9c:d3:e7:72:b9:1c:46:58:fe:e9:08:fd:1a:
         3c:e0:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org