Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/a88d085e-efb7-3e92-a5c8-e3fdbdb171a6.roa
File:                     a88d085e-efb7-3e92-a5c8-e3fdbdb171a6.roa (raw, json)
Hash identifier:          RpCtY3SIBm17fKtZ5q7UPldZmOZw0KYJ2IOPrtVJU74=
Subject key identifier:   F1:8B:45:9C:04:61:93:13:A4:94:76:AA:3D:17:FF:F1:16:24:71:1D
Certificate issuer:       /CN=18063090-3337-4bcb-93cd-f57cb925fd54
Certificate serial:       010D0C9F4328576D51CC73C042CFC1646FF239F9
Authority key identifier: C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/a88d085e-efb7-3e92-a5c8-e3fdbdb171a6.roa
Signing time:             Fri 06 Jul 2018 14:15:02 +0000
ROA not before:           Fri 06 Jul 2018 04:00:00 +0000
ROA not after:            Mon 01 Aug 2022 04:00:00 +0000
asID:                     4901
IP address blocks:        162.250.136.0/22 maxlen: 22
                          2620:118:5000::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:6f:f2:39:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18063090-3337-4bcb-93cd-f57cb925fd54
        Validity
            Not Before: Jul  6 04:00:00 2018 GMT
            Not After : Aug  1 04:00:00 2022 GMT
        Subject: CN=204670af-396d-4e7a-bc1c-06f7fd168e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:d2:69:f9:80:98:c6:86:ce:2a:b8:e8:9d:
                    a7:90:9b:63:ab:cd:8d:2b:8c:70:d8:89:66:46:f8:
                    22:39:d5:ee:c4:f2:4b:7f:86:d5:74:d4:f6:d1:f0:
                    72:6f:fe:e5:4f:b2:e3:b0:d5:ec:aa:15:cc:e4:f2:
                    a2:4d:b2:de:a9:76:c0:3c:ea:0d:b4:12:1f:e0:58:
                    aa:e0:d8:7d:be:65:22:21:11:47:15:eb:03:00:84:
                    ff:fc:99:58:52:87:37:09:46:bc:de:09:c4:d1:c7:
                    5d:ae:1c:5c:14:c7:77:ed:d8:ce:f5:78:94:3a:a6:
                    0e:76:9c:56:90:89:de:30:e1:e6:a0:59:55:be:40:
                    96:9e:55:f4:31:0c:4a:a6:e3:d9:f7:f0:54:af:a5:
                    ce:6b:3f:9c:fb:0d:a3:37:b4:b2:24:5e:a0:80:ea:
                    bf:13:11:96:8e:49:d6:08:e0:27:a9:40:29:48:4b:
                    e5:cb:6d:07:bf:df:c5:a7:a1:e4:02:7c:fe:de:d0:
                    c3:e4:0e:c5:6e:1e:c9:e0:ce:0d:53:d3:e0:44:b3:
                    75:d7:b6:1d:9f:0d:0f:c9:76:a7:63:f7:57:75:9d:
                    6a:75:c6:3e:9e:ea:9d:29:ce:b3:be:5e:94:75:fc:
                    b1:e4:60:b6:30:f5:31:99:68:f6:6e:e8:6a:c3:c1:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:45:9C:04:61:93:13:A4:94:76:AA:3D:17:FF:F1:16:24:71:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/a88d085e-efb7-3e92-a5c8-e3fdbdb171a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl

            X509v3 Authority Key Identifier:
                keyid:C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.136.0/22
                IPv6:
                  2620:118:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:62:1b:6d:e4:ac:4b:fd:bc:18:81:a2:bf:d4:9c:e2:b5:e0:
         9f:8b:26:88:12:32:fe:1b:2c:23:27:28:ca:9f:9a:0a:33:ee:
         b5:88:3f:33:86:d8:91:7d:79:89:f4:31:f2:4d:83:89:7f:3e:
         23:9f:c4:17:ca:46:82:01:4e:93:5c:e0:3d:96:8d:d7:92:5c:
         84:66:c7:e3:3f:3f:4f:21:c8:83:19:48:93:52:e0:b1:b5:87:
         3d:cb:cc:08:ab:95:fd:19:50:4a:c2:b7:81:d5:33:59:fe:2c:
         c3:fa:15:72:26:43:45:08:f2:79:22:bb:31:9c:f0:d7:ba:65:
         d3:a0:db:d2:3e:f4:47:02:7b:8c:bb:e2:08:5a:ce:a9:cd:ac:
         50:df:fd:f8:c2:9c:14:d7:50:39:c8:54:b8:f3:82:1b:7d:df:
         eb:2a:e1:ca:0d:4d:99:03:cd:62:6a:40:dd:0b:7c:1f:22:43:
         d7:a4:4b:1a:a1:b1:0e:7f:c9:72:09:25:c1:b7:76:42:36:03:
         8a:a9:bb:84:b3:b6:a0:68:50:00:5e:49:33:94:f4:d7:c6:e4:
         d2:b7:94:c7:a4:5e:50:35:6d:a8:ca:b1:33:01:5e:a5:19:7a:
         62:cc:68:e0:9b:f0:d4:76:3f:14:14:7c:16:0c:93:4d:84:9f:
         9a:b0:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:58 2023 by rpki-client on console-ams.rpki-client.org