Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e1411db-816c-37f0-9b1a-6b8d75750905.roa
File:                     9e1411db-816c-37f0-9b1a-6b8d75750905.roa (raw, json)
Hash identifier:          nebb/NHlNn+m5WE+JqPHLITUm+TjMAvldYOQy/0RAyc=
Subject key identifier:   8E:C1:4D:76:AC:62:4E:DC:DB:8F:9C:8B:7E:BA:14:11:3A:DC:7A:5A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793526B8C9820AF968EB9D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e1411db-816c-37f0-9b1a-6b8d75750905.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     16679
IP address blocks:        184.105.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:26:b8:c9:82:0a:f9:68:eb:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=59f492eb-82fc-4749-b128-bbad1dd02026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:97:af:45:c2:9a:6d:65:91:f7:66:7c:73:
                    18:e4:bc:02:e5:ac:84:25:64:77:7e:b3:19:79:59:
                    4b:14:d2:38:c3:d9:fb:31:c6:22:d9:b5:00:f4:f0:
                    20:0c:0a:36:0a:30:77:0c:d0:9e:16:57:e3:dd:2c:
                    69:bf:65:87:39:6a:d2:f5:fd:19:5c:81:cb:39:9e:
                    a4:98:aa:f1:82:e5:68:5b:7a:8c:1b:f9:10:80:b7:
                    c7:13:b6:0f:d6:18:2d:08:4b:e5:25:5a:d6:6a:81:
                    7e:af:56:61:6d:d0:c0:d9:41:68:43:b1:93:4d:94:
                    b9:26:f0:df:e2:f5:08:52:5d:10:3f:f9:bc:b7:7e:
                    6f:bf:3a:2f:99:cd:97:d4:fb:76:39:20:01:fc:f5:
                    1e:16:05:b6:c4:29:5b:50:a5:72:35:ad:22:41:e0:
                    4e:78:d2:b7:61:31:4f:14:f5:4f:76:19:92:80:38:
                    b9:99:18:9b:de:be:1c:c4:cd:11:b5:c4:ff:77:96:
                    8c:09:2f:bd:11:32:27:b8:33:88:e9:78:d4:7c:4c:
                    ae:b8:22:5f:50:41:a3:67:ed:f9:a8:76:8a:c8:5a:
                    01:85:f0:e9:99:51:0a:66:22:ed:d2:27:92:ef:4b:
                    f5:9d:b7:b5:a3:b1:4e:8d:27:52:b4:58:e1:6f:04:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:4D:76:AC:62:4E:DC:DB:8F:9C:8B:7E:BA:14:11:3A:DC:7A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e1411db-816c-37f0-9b1a-6b8d75750905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:87:f7:25:03:20:09:d4:37:f2:ba:1b:ad:8b:4a:40:02:dc:
         3b:df:0f:69:ef:ff:5f:2c:f2:be:30:32:7b:f6:1c:27:07:7b:
         67:7f:a6:26:e2:d9:43:00:6d:d7:0e:bc:13:68:26:cd:92:35:
         59:1c:50:fc:a0:5b:13:81:ea:d4:78:70:36:66:33:9c:db:cd:
         75:cd:ad:3c:7c:95:6b:30:e3:23:7f:a1:57:f1:61:d4:aa:02:
         ec:84:f1:30:26:59:b8:fb:75:b0:dd:f0:e2:33:82:54:2b:43:
         c8:c9:88:1a:03:e3:1b:a0:eb:ad:09:ad:a2:09:66:fd:9a:8b:
         fa:40:69:02:d4:d6:44:fc:1b:78:7f:1d:4d:5f:5e:7b:21:2e:
         8b:b9:60:60:08:c0:ae:9f:58:59:56:66:da:c9:48:c2:68:86:
         d7:69:a9:da:04:56:30:1e:67:b4:e8:24:1f:27:49:eb:19:4b:
         0e:e0:ed:4d:02:65:03:a8:9f:38:51:76:19:c5:17:5d:32:00:
         c3:72:25:a3:7f:4c:bb:af:28:4e:2c:bd:c4:8c:55:e6:e3:6f:
         ba:e3:67:43:8a:58:f6:a7:8f:af:83:b4:94:6a:a1:40:4b:3c:
         15:78:e1:95:b4:c8:67:b8:52:5c:20:9e:10:58:54:00:c2:51:
         bf:8f:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:40 2023 by rpki-client on console-ams.rpki-client.org