Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ec782ed-fc23-3984-9edc-0b97347f05dd.roa
File:                     1ec782ed-fc23-3984-9edc-0b97347f05dd.roa (raw, json)
Hash identifier:          SYObKG9EXIjOHea5XEgwdZlBf2HhkrZgoyz1aP09OVk=
Subject key identifier:   3D:0B:05:B4:E0:A9:FD:17:9A:8A:B4:29:37:8D:05:8E:15:C4:47:C2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3E32C027DF57FF458CD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ec782ed-fc23-3984-9edc-0b97347f05dd.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        65.95.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:e3:2c:02:7d:f5:7f:f4:58:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=3261bf2b-da37-447f-a8ac-9068b79aff7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:23:78:66:7e:a4:15:13:22:95:cd:f7:42:
                    cf:b1:7a:10:07:c2:0b:9c:bf:a8:ec:8d:df:e3:43:
                    f7:a4:68:17:24:b2:4d:8a:42:c0:8d:97:44:a2:d6:
                    14:f9:de:0d:21:be:2e:07:5c:94:1b:af:40:ab:f5:
                    db:26:a8:62:15:f1:aa:4e:4d:b7:39:85:dc:b3:1e:
                    c0:8c:f6:f1:58:da:d6:cd:2f:69:7c:3f:b2:20:53:
                    13:a2:0b:01:f3:cb:88:39:33:ac:25:56:4b:cd:69:
                    f3:b8:0c:c2:7e:e3:01:6d:82:86:fc:16:1f:9a:e6:
                    34:0b:db:9f:85:43:25:17:cc:77:1b:17:33:de:91:
                    9c:48:04:99:3f:ac:68:0a:e9:1a:a0:5d:0b:4e:39:
                    0b:c6:0c:84:6c:b5:4d:6b:45:c5:41:27:1c:fb:e6:
                    97:61:2b:70:52:d7:ef:9f:08:46:a2:1d:d4:b0:25:
                    ae:b4:9d:c0:a8:dd:4d:01:21:5d:6c:98:9b:8b:57:
                    7c:dc:19:11:82:41:00:23:6b:41:88:87:a5:89:6b:
                    f2:2b:ca:92:43:1d:38:7f:79:b2:68:0a:a7:71:9b:
                    f2:a2:d7:f3:29:68:20:db:49:5e:e6:63:37:ac:c5:
                    6d:0f:5a:84:62:38:20:eb:8f:84:ba:b9:32:1f:0e:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:05:B4:E0:A9:FD:17:9A:8A:B4:29:37:8D:05:8E:15:C4:47:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ec782ed-fc23-3984-9edc-0b97347f05dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:25:1c:15:6f:20:14:42:62:bd:62:78:7f:2e:0c:33:49:49:
         7b:6b:13:7b:7f:23:03:2e:13:2d:a7:9b:14:a9:5e:5d:b9:5c:
         56:a0:e3:3a:ab:e4:ab:c9:57:f6:b6:f4:f2:99:e9:d2:aa:d3:
         e7:5a:09:cd:0f:a0:dc:79:bb:b2:55:dd:02:64:05:0d:54:05:
         e4:db:72:ee:dc:66:53:53:31:35:9d:42:b6:40:36:b3:df:be:
         4d:a2:7d:8f:be:a8:0c:d3:12:63:9d:24:42:e9:3d:2c:f9:7b:
         43:6c:d9:cc:51:05:9a:63:5e:d8:9f:08:08:a8:6f:45:b5:a5:
         90:17:cf:0e:62:0f:16:0c:f0:d7:95:3a:42:bc:42:72:57:ea:
         d3:d3:65:59:e4:ec:4e:7f:4e:da:ea:ad:a9:7c:7b:9c:75:b0:
         a9:1d:a4:74:00:d4:13:0d:50:74:5a:d1:70:4b:f7:6f:97:37:
         ce:0a:ec:fd:9d:6a:3f:cc:a9:ee:b8:91:b4:75:20:4f:18:f3:
         e1:7d:5f:72:d4:5f:be:8d:8f:68:79:b6:d5:f7:aa:a1:2f:6b:
         12:54:d7:2d:94:63:76:c4:32:8c:88:4b:d2:1c:34:5c:bf:df:
         34:3e:6a:0c:34:1c:3f:a7:61:08:2c:bb:48:97:c5:be:2a:da:
         eb:b3:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:25 2023 by rpki-client on console-ams.rpki-client.org