Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd7f073c-2225-36a4-9f1e-de9ca3425a0c.roa
File:                     bd7f073c-2225-36a4-9f1e-de9ca3425a0c.roa (raw, json)
Hash identifier:          HCUIWrEnD0DL9oyQQ36qpQesYeUmdjpcQli/4+LG3ms=
Subject key identifier:   87:DC:32:12:4C:E7:C6:EB:C3:A6:40:50:AA:A4:61:9D:5B:08:61:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793503CB57C1FB0FCCD88F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd7f073c-2225-36a4-9f1e-de9ca3425a0c.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     63949
IP address blocks:        64.62.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:03:cb:57:c1:fb:0f:cc:d8:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=e901bb46-3a33-446d-8324-22f4985cbb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:b2:c1:34:f7:49:d9:9e:57:ac:0d:9d:e9:
                    8b:60:86:f1:4d:78:4d:36:66:38:83:cd:9e:09:2c:
                    ff:67:a7:bc:ee:1a:28:90:29:59:45:b5:30:19:6a:
                    a0:72:86:32:41:d1:8c:09:2c:e2:be:b9:6a:2e:89:
                    db:b4:0c:5e:c1:53:14:5e:ae:8c:77:51:c2:70:22:
                    23:28:63:a9:79:47:08:da:a1:b9:5a:fa:c6:83:7b:
                    2a:6e:0e:dd:d7:3e:64:fe:b8:92:78:fc:ef:22:f6:
                    d0:d6:43:60:13:7c:f1:a3:58:8f:a2:03:0d:60:f9:
                    a8:77:44:24:c2:9a:b8:61:50:fe:a3:cf:73:72:97:
                    c1:02:dd:de:7b:b9:54:90:4f:0f:25:97:83:17:8f:
                    15:3d:4f:e3:f9:7b:a4:35:58:f1:ac:e2:a8:37:69:
                    8d:ed:d6:96:73:c8:b1:d6:10:ac:9a:ad:04:45:30:
                    3c:d0:df:0a:19:8a:bd:bc:4b:05:a6:aa:03:58:68:
                    8a:0a:d5:8c:73:24:d6:28:22:7c:ad:7e:67:cd:9e:
                    af:e3:e2:54:a7:56:c9:e3:b7:e4:eb:3c:24:8c:68:
                    bc:18:4b:bc:eb:63:b3:5f:59:b0:07:f8:e5:f1:99:
                    a5:2e:a2:c3:4c:c4:13:71:47:a0:6e:99:09:6e:37:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:32:12:4C:E7:C6:EB:C3:A6:40:50:AA:A4:61:9D:5B:08:61:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd7f073c-2225-36a4-9f1e-de9ca3425a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:cb:04:d8:ca:27:7e:7b:70:47:2e:18:6c:8b:14:1a:ce:
         7d:5f:c1:2e:75:12:f4:37:c0:50:8c:5f:e2:dd:8e:0f:03:2f:
         19:4a:4d:2b:ee:12:42:24:d5:25:49:e6:20:c5:77:7d:2c:37:
         2a:51:ce:7e:2a:ab:ca:70:7d:37:44:bb:30:ab:a9:26:38:f8:
         71:a2:01:6e:08:df:f5:92:6f:12:37:18:18:5f:ec:ef:27:26:
         2a:a6:c1:ba:f7:88:8f:fe:64:78:12:d0:48:c9:b0:0f:1c:49:
         00:36:1e:f1:4a:70:ee:0f:7f:51:a8:fc:05:16:70:2e:3c:cf:
         c1:b5:2b:1d:a1:3b:93:99:48:3b:b7:93:df:d9:0d:ef:47:12:
         b9:81:2b:55:a3:70:65:1b:18:58:c5:bc:7d:7f:f1:b3:18:f2:
         5e:5c:9a:b5:1b:21:71:5a:96:ac:82:f1:45:41:f5:f2:28:32:
         74:e8:57:48:05:23:a3:6b:23:4b:bf:8d:19:2b:d4:c7:a5:a2:
         bc:ad:ad:86:3b:35:4e:f0:61:99:f8:72:e0:a3:22:fc:30:f5:
         ec:96:e0:57:4b:19:c7:9f:82:2b:31:66:1c:1b:99:db:c5:f7:
         8f:77:f1:f9:29:87:3f:91:54:dd:26:3e:33:98:40:85:68:2c:
         02:21:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:47 2023 by rpki-client on console-fra.rpki-client.org