Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/08f988fb-9835-3e5a-866f-02b04ab2a686.roa
File:                     08f988fb-9835-3e5a-866f-02b04ab2a686.roa (raw, json)
Hash identifier:          HBwmaWMSq6RMut9nyUaAMqAqjdsQT1caxDyqaCdyImI=
Subject key identifier:   71:15:E4:DD:33:E5:5B:1A:58:A2:90:D0:5E:D5:68:89:BF:A3:55:7F
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285843F9264F28676C0BFE94AB5FF0
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/08f988fb-9835-3e5a-866f-02b04ab2a686.roa
Signing time:             Wed 22 Nov 2023 14:05:40 +0000
ROA not before:           Wed 22 Nov 2023 14:05:40 +0000
ROA not after:            Tue 20 Feb 2024 14:05:40 +0000
asID:                     834
IP address blocks:        45.62.168.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f9:26:4f:28:67:6c:0b:fe:94:ab:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Nov 22 14:05:40 2023 GMT
            Not After : Feb 20 14:05:40 2024 GMT
        Subject: CN=b5daf860-8fc3-46e8-8972-5f82e262b767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:8b:18:16:a1:43:b5:f4:22:34:aa:cd:94:
                    33:ed:4f:9c:a8:cd:71:2e:1f:15:a3:0f:44:0d:94:
                    f1:82:dc:1e:50:72:62:60:79:00:c7:bc:49:fa:58:
                    3a:43:ff:55:f2:ba:03:1c:96:4c:c1:f1:3a:cd:27:
                    a3:6b:c6:a1:80:83:b2:b2:6e:77:4c:3e:48:cc:c9:
                    02:70:56:35:f3:8c:98:f4:a8:a8:f5:06:c8:df:03:
                    d8:0c:fc:1a:8a:98:b3:26:98:54:df:a6:10:14:91:
                    6a:08:35:74:40:60:c7:35:6d:5f:72:54:df:5a:1f:
                    34:a9:b2:0a:6a:28:68:f0:df:46:3f:a0:79:17:a7:
                    18:93:fe:22:bd:cb:3f:8e:bb:c4:43:64:12:f8:ba:
                    f1:0b:59:2f:62:a3:51:3e:11:7f:3d:7c:8e:db:c5:
                    e7:8e:dc:b3:5b:50:27:a1:9a:19:7d:d9:90:8f:77:
                    1f:fd:58:eb:5d:37:19:95:dd:d9:a8:79:8d:a3:61:
                    50:0f:ac:05:8e:31:4f:cc:83:fb:5d:ee:57:69:f8:
                    d5:67:c3:1f:a0:37:dc:5e:6e:90:93:c0:0f:d7:92:
                    fb:7f:56:e7:e0:15:d1:6d:09:9b:97:86:d4:52:70:
                    d8:f9:05:b1:1c:e8:56:56:95:41:41:6f:27:2f:dc:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:E4:DD:33:E5:5B:1A:58:A2:90:D0:5E:D5:68:89:BF:A3:55:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/08f988fb-9835-3e5a-866f-02b04ab2a686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d5:9f:9c:b2:fb:be:ff:72:1e:e4:ed:b3:d5:af:7b:92:21:
         fa:98:b0:70:d0:9d:60:13:a7:58:bb:d9:2c:f9:84:9b:ca:b1:
         1b:fd:3c:f3:34:3a:01:d6:cd:2f:6c:4e:29:38:2d:6a:05:eb:
         f8:fc:a7:e3:4a:4a:88:d4:a5:f1:08:1c:cc:e9:17:1d:60:3f:
         bc:27:48:8d:0b:89:62:51:e5:33:26:1c:4a:94:68:b8:ed:ae:
         b4:75:6c:8f:99:52:f1:a1:2e:a0:ff:e6:5c:c7:48:66:96:e6:
         e7:8e:62:9a:db:4d:a7:b0:35:f8:a2:62:9d:ac:f3:6a:fc:43:
         f7:87:ff:8e:68:55:42:14:17:c0:31:e2:fe:f8:f9:60:a7:e6:
         7b:e6:e8:51:01:d7:72:4d:e6:3f:08:02:a4:94:c9:7d:6b:a3:
         cd:9e:cc:28:95:e7:7f:11:79:f6:c6:4f:e7:97:d1:8b:00:de:
         db:22:3e:27:1e:8f:e7:f0:33:45:b8:a8:d0:26:26:48:6a:3c:
         ea:0f:7e:78:ee:8b:10:4f:e2:b3:bb:42:26:c7:90:8c:3d:fa:
         46:4a:5a:57:38:d4:ec:c2:8f:2b:3d:9e:98:64:16:b8:a1:c1:
         61:f1:61:59:5d:b4:1e:cc:b5:d7:7f:cd:c5:07:76:cd:59:f5:
         54:b9:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:45 2024 by rpki-client on console-ams.rpki-client.org