Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa
File:                     cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa (raw, json)
Hash identifier:          ze7H+rsyV0lxbhSm7P8h5VIlfC4YGZFIrHSFx6Artzo=
Subject key identifier:   73:71:93:E1:1A:B5:9D:83:65:8F:67:9F:FE:43:FC:97:E1:BA:7B:DF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D40FC1622575EEE183F700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        142.187.0.0/16 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d4:0f:c1:62:25:75:ee:e1:83:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=8383798d-09f2-42c3-a89e-df5c118699e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:3f:7f:01:53:41:29:85:c1:0e:d1:ef:b9:
                    49:e3:58:35:b1:ce:f1:ed:0e:c2:56:92:30:af:35:
                    84:a6:67:2b:0e:b3:61:1f:c7:e7:46:d7:3f:5c:f4:
                    3c:f1:8c:b3:31:04:58:0f:36:bd:e0:52:8e:be:58:
                    af:9d:98:55:d2:20:27:b4:34:26:3b:9b:da:41:78:
                    6b:f4:6f:95:31:15:7e:fd:3f:31:24:f0:a7:40:8a:
                    f5:3c:b3:82:18:06:19:44:d6:94:a3:6a:d8:02:ef:
                    dd:93:a4:01:00:64:b4:7e:c0:af:4d:98:a0:24:82:
                    3a:ef:e9:ec:2c:53:91:0c:66:53:f7:b4:46:e8:63:
                    dd:09:b5:2d:ee:5e:6c:e4:2c:8b:55:41:22:de:c8:
                    3f:ec:ac:52:a5:60:10:52:39:6c:07:b9:7e:16:e4:
                    e6:2a:e2:b8:b1:8c:89:cc:07:17:e7:10:38:d2:96:
                    14:11:95:eb:e0:9c:9a:ba:e8:38:ed:6d:db:de:d9:
                    fd:78:52:c7:0a:fd:32:e3:74:0a:cd:f3:70:ff:46:
                    3c:ad:01:b9:95:65:a4:0b:bd:81:9c:f5:f0:f1:21:
                    bd:fe:e7:20:64:34:10:86:c6:bc:be:c0:de:41:92:
                    f8:65:b1:01:a5:a9:6d:ee:66:ba:49:81:cd:1c:49:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:93:E1:1A:B5:9D:83:65:8F:67:9F:FE:43:FC:97:E1:BA:7B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:cb:9f:60:62:0b:43:d8:bb:c9:6c:96:ed:b2:c8:77:4c:
         03:e1:d3:20:4e:12:51:ba:a2:34:50:8c:b3:ff:05:5e:d7:15:
         52:1a:56:0a:71:00:df:75:7a:30:7d:ac:b6:67:8b:e1:43:e4:
         67:eb:6f:c7:61:08:d2:6b:14:f5:06:b2:90:27:22:70:8c:94:
         fe:95:b4:cc:55:38:8a:bd:5e:8c:a3:16:40:fa:67:52:26:6b:
         cf:3d:6e:53:e3:97:1e:d4:fe:3f:9d:92:a7:28:66:0b:1e:dc:
         a9:cf:db:43:07:92:f6:73:7b:f7:3a:02:e3:ef:cb:0c:18:a3:
         cc:63:ff:6a:55:49:ba:d6:d7:5d:c7:a0:a5:d0:2b:92:df:5e:
         f2:a3:55:01:cc:9e:5f:68:63:36:b9:30:ff:c4:e9:65:f3:15:
         5e:99:bd:7f:96:65:a1:f7:da:a2:94:2d:10:d6:c2:0d:7e:67:
         7d:1e:91:f6:a2:74:66:33:f4:f5:25:f2:19:28:b3:a7:53:62:
         25:18:3c:58:41:b4:01:42:5b:f6:7d:19:79:ef:dd:d9:4f:eb:
         6f:9d:8e:8b:4b:e4:66:b8:1c:a7:50:fc:1a:dc:ea:18:f7:e0:
         3c:48:a9:42:c6:e6:df:0f:fa:44:e1:d8:8f:47:5e:d9:1c:e1:
         9d:02:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:21 2023 by rpki-client on console-fra.rpki-client.org