Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/036bea6f-dcfb-3d24-b631-39f0ecd4100e.roa
File:                     036bea6f-dcfb-3d24-b631-39f0ecd4100e.roa (raw, json)
Hash identifier:          hjjH7w3dmo4loaH/WAni3kYx5LSsdA5vh26Bwhs1Bkg=
Subject key identifier:   0F:F3:A3:3E:70:70:92:8B:B4:56:58:4C:60:9E:B8:E4:A9:2F:E7:EF
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720B3179CB
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/036bea6f-dcfb-3d24-b631-39f0ecd4100e.roa
Signing time:             Tue 12 May 2020 23:21:31 +0000
ROA not before:           Wed 21 Oct 2015 04:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     40065
IP address blocks:        45.58.53.0/24 maxlen: 24
                          202.5.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0b:31:79:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct 21 04:00:00 2015 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=d11fd6c4-35b6-4ea7-b46e-f41af9c7dc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:5d:8e:39:3f:73:fd:41:e9:78:5e:a3:d0:
                    e8:71:7f:63:42:df:c3:89:cc:0e:29:df:a5:44:92:
                    aa:42:23:89:6d:4d:7c:8d:52:4e:42:95:12:16:f6:
                    ed:9f:62:85:65:a6:64:97:0b:f1:32:ec:61:f9:ae:
                    66:bd:ee:06:5a:5c:cf:59:fd:fd:bb:bd:3b:bc:d9:
                    28:a8:b9:ff:a8:74:71:88:1d:0a:c2:c6:58:42:62:
                    df:9c:44:d6:14:88:18:92:84:77:e9:d9:9d:63:da:
                    a3:b9:c4:9c:44:14:a8:99:78:80:e6:bf:af:83:75:
                    8c:5c:8a:0f:39:b4:1e:54:65:0c:4d:d4:cb:bc:c7:
                    09:f9:58:10:a5:db:4f:6f:df:60:d0:bd:82:30:0a:
                    af:1f:be:2e:df:70:f0:0a:08:8e:ba:55:11:42:2e:
                    f2:15:31:fa:2a:15:eb:9a:68:25:51:e0:3f:f9:3b:
                    dc:a1:d3:64:ca:01:bc:ba:b3:1d:07:04:2a:26:ed:
                    51:19:e3:54:cc:ad:97:87:15:d4:c9:11:b7:8f:7a:
                    c5:bb:b0:d7:d5:70:74:6d:c3:16:19:07:a6:8b:ac:
                    70:46:a0:8e:b4:80:a8:dd:4a:07:db:6f:da:e8:80:
                    9d:0f:13:25:7f:b8:2a:ee:72:44:b9:21:c4:15:cb:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:A3:3E:70:70:92:8B:B4:56:58:4C:60:9E:B8:E4:A9:2F:E7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/036bea6f-dcfb-3d24-b631-39f0ecd4100e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.53.0/24
                  202.5.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:da:12:cf:37:e3:c7:ab:18:2f:e2:d0:58:19:ec:b1:c5:
         65:4b:ef:7a:37:28:83:63:01:99:46:f0:0e:9a:aa:71:4c:55:
         da:a3:70:25:78:8a:9d:cc:f8:1d:63:3d:dc:9f:92:38:71:09:
         0b:d1:48:28:56:20:8d:0a:3a:cf:33:ea:90:c6:46:4c:be:b0:
         e0:c0:2c:b3:df:9a:12:61:17:ea:dc:94:dc:a9:8d:8f:42:50:
         93:df:8f:91:f0:f0:46:2f:a5:10:3d:18:40:18:21:28:a0:74:
         b4:c5:fe:c4:50:f4:25:be:34:14:e8:db:e5:13:c6:13:d8:7d:
         9b:f1:df:de:86:68:88:1c:e0:bc:24:d5:b0:59:91:d2:16:35:
         c5:59:5e:0f:de:03:ba:f5:7a:c3:28:ba:7f:58:8a:68:49:38:
         22:11:13:10:bb:02:b6:15:07:dd:c8:07:f6:10:08:16:19:0d:
         85:33:d1:a5:ef:f2:d2:d3:d5:b6:fe:87:f0:b8:91:43:6c:c7:
         01:cd:0b:2a:68:e0:7f:0b:f2:7e:3b:51:66:f4:2c:26:09:2c:
         1c:e8:6a:4e:7e:3d:bb:3e:f4:65:f1:33:1c:1c:84:52:da:29:
         47:f7:de:ad:f2:25:74:ad:3c:f6:72:75:5e:39:e5:5d:19:9e:
         fa:04:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:03 2023 by rpki-client on console-fra.rpki-client.org