Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f843a3ec-406f-3942-9e73-98a4e20e89ef.roa
File:                     f843a3ec-406f-3942-9e73-98a4e20e89ef.roa (raw, json)
Hash identifier:          27CiLlNp2SoGhwkCMPQcL/WcB016cFc+OpTxVADNaSQ=
Subject key identifier:   33:82:EF:1C:F5:70:13:88:B1:84:09:64:16:3F:A9:DD:85:88:F2:85
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50786230F964C70B8218E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f843a3ec-406f-3942-9e73-98a4e20e89ef.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     394330
IP address blocks:        184.105.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:78:62:30:f9:64:c7:0b:82:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=f9b14b70-b6fa-456d-9799-2d5d2f108b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:02:3b:68:32:bc:ea:e9:89:fb:11:6b:08:
                    10:d9:db:72:b7:8b:4e:65:16:fb:3b:22:d1:5e:fa:
                    7f:af:5f:63:3e:23:ef:68:42:08:99:28:5f:9a:33:
                    44:75:36:51:f4:f5:27:fd:b9:91:d6:dc:4d:8b:60:
                    64:74:37:5e:45:35:4d:e5:5f:dc:78:d7:89:c1:7b:
                    5b:4a:15:01:ba:2b:0c:97:aa:ea:74:25:97:78:a5:
                    b2:66:de:73:5d:ca:e0:83:b3:46:c7:03:5e:50:0a:
                    1e:0e:be:f2:a7:1c:ab:f4:91:e3:0e:21:09:6a:e1:
                    44:03:43:e3:49:e1:00:47:6a:2b:f5:2b:c8:7c:ae:
                    65:43:4c:93:13:af:a9:44:a5:40:7a:e2:fb:8d:8c:
                    dc:0f:05:21:88:5f:64:e3:78:2f:aa:72:58:87:02:
                    2e:ca:c1:74:ea:01:4f:c5:f8:85:4c:b9:38:ec:1e:
                    a5:eb:09:b6:e2:ee:4f:d9:35:6e:d2:c9:fc:a0:a0:
                    ee:9d:7e:ed:41:ea:1d:77:86:d0:96:c0:10:da:d4:
                    ab:08:be:33:27:12:62:20:c7:fe:3e:02:21:9d:eb:
                    25:44:1b:a0:ba:7a:0d:81:c5:8f:be:fa:ef:58:18:
                    b7:82:b6:0d:89:52:65:d6:af:de:de:95:4e:30:a6:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:EF:1C:F5:70:13:88:B1:84:09:64:16:3F:A9:DD:85:88:F2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f843a3ec-406f-3942-9e73-98a4e20e89ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:f2:7e:e9:c1:8d:48:37:6c:80:33:05:04:d3:75:60:3e:
         b7:50:c2:17:0d:62:41:f7:a7:ba:d5:d8:72:67:d5:ff:8b:44:
         8d:ac:28:e4:52:32:df:69:05:aa:a3:d0:8a:fd:29:a5:c9:54:
         ce:c7:72:9a:08:30:d3:ce:56:d6:0b:b1:f1:2d:8c:13:70:3a:
         21:ad:1c:57:b1:d3:89:a7:4a:cb:54:41:7e:6e:51:9a:51:55:
         a7:94:02:b5:7c:11:54:de:d5:b0:61:a2:33:2d:7d:16:4a:e2:
         c4:cd:58:99:a7:da:54:9e:2b:79:7a:40:6d:5e:3e:08:20:0e:
         4c:a1:cd:ee:66:f8:af:37:c4:a3:c0:68:0c:7e:67:6b:63:bb:
         3d:e2:11:5c:c1:2b:2c:5c:84:64:e7:82:7a:4b:8f:0d:6c:55:
         7f:41:32:f4:c3:db:b9:7e:82:28:4f:b0:52:5e:c4:30:ff:ad:
         dc:db:1c:31:10:09:29:28:f0:22:88:1b:84:1c:95:10:ca:01:
         1b:bc:ad:51:7a:d5:bf:f9:e8:16:b9:6e:0a:8a:e9:3a:11:a3:
         c5:62:05:3c:9a:cc:69:b1:5d:e4:11:1e:0d:01:98:bd:b0:b7:
         7e:f3:52:c5:06:aa:87:33:a0:8b:35:ee:98:41:8a:71:04:9f:
         a8:a3:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:03:39 2023 by rpki-client on console-ams.rpki-client.org