Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/a03e9e9f-6dbf-3d74-90f6-18f71d190805.roa
File:                     a03e9e9f-6dbf-3d74-90f6-18f71d190805.roa (raw, json)
Hash identifier:          rml68N3SNTye8KfbCa5yKkAkutjKbBTYWsV1rsSg0EY=
Subject key identifier:   C4:3F:78:E2:89:CE:A5:E5:72:D4:C2:FE:60:BC:85:4A:7D:C2:01:B8
Certificate issuer:       /CN=5fb6f799-d584-48a1-9c74-50e91497918a
Certificate serial:       010D0C9F4328576D51CC73C042CFC16696699C37
Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/a03e9e9f-6dbf-3d74-90f6-18f71d190805.roa
Signing time:             Sun 21 Oct 2018 11:36:35 +0000
ROA not before:           Tue 25 Sep 2018 04:00:00 +0000
ROA not after:            Thu 23 Mar 2023 04:00:00 +0000
asID:                     7018
IP address blocks:        23.112.0.0/12 maxlen: 12
                          45.16.0.0/12 maxlen: 12
                          99.32.0.0/12 maxlen: 12
                          104.0.0.0/12 maxlen: 12
                          104.48.0.0/12 maxlen: 12
                          107.128.0.0/12 maxlen: 12
                          107.192.0.0/12 maxlen: 12
                          107.208.0.0/12 maxlen: 12
                          162.224.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:69:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Mar 23 04:00:00 2023 GMT
        Subject: CN=50861dd0-9111-460d-b187-7ea573a1bf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:11:d3:18:fa:7a:2c:39:77:90:bf:de:38:
                    1e:e6:0a:1b:61:20:d9:cd:0b:41:e0:c0:49:fd:1b:
                    dc:79:be:4f:5b:fb:fb:5b:8e:77:2b:95:95:4f:ff:
                    38:31:f5:b5:1c:0e:aa:cb:e0:0d:f9:b3:86:56:f9:
                    4e:69:d9:1b:40:72:0c:ba:25:3a:ec:e8:3b:b9:a7:
                    b6:4b:9c:72:0c:fa:a5:8e:07:8c:9d:7c:59:a9:2c:
                    e4:a3:c0:66:b3:48:26:e6:37:d3:3a:21:74:42:7c:
                    52:9f:0e:19:9f:af:fe:93:4e:75:a0:e7:35:73:d0:
                    6e:32:55:d9:64:0e:28:ad:c8:0b:91:9e:cc:43:fb:
                    84:3f:61:f9:76:86:23:71:c1:b4:82:82:4f:e3:29:
                    f5:71:28:f3:5a:0c:01:6d:db:95:31:0a:30:0a:80:
                    46:b7:21:c3:4c:01:9c:b0:49:37:d5:e5:cb:16:60:
                    04:b0:d5:8c:45:a9:f5:f6:f0:6a:04:fc:9d:5c:2f:
                    ce:22:a1:76:25:e6:b0:eb:c8:02:e6:fe:07:d6:d3:
                    d7:89:5e:44:6d:e8:9a:87:9d:1f:0e:72:5a:1f:97:
                    87:9d:c6:a3:42:2b:85:3f:e1:94:2c:92:87:b8:40:
                    a1:2f:b0:0f:17:da:16:32:77:e1:37:26:1e:35:1b:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:78:E2:89:CE:A5:E5:72:D4:C2:FE:60:BC:85:4A:7D:C2:01:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/a03e9e9f-6dbf-3d74-90f6-18f71d190805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl

            X509v3 Authority Key Identifier:
                keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.112.0.0/12
                  45.16.0.0/12
                  99.32.0.0/12
                  104.0.0.0/12
                  104.48.0.0/12
                  107.128.0.0/12
                  107.192.0.0/11
                  162.224.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:3c:34:4f:0c:16:28:7e:10:ab:fc:6c:32:5b:ee:46:cb:
         94:d7:18:5d:0d:81:a1:63:ca:74:62:ec:b9:d3:d8:b9:1f:c2:
         86:72:27:a5:77:d1:ff:f0:7a:a2:58:bb:2f:0b:3e:68:be:88:
         5b:8e:ac:aa:c4:69:99:2e:ff:92:ba:43:07:4e:0c:4a:38:87:
         a0:39:e1:e6:93:3d:21:d8:aa:66:29:19:68:d8:17:cc:83:95:
         22:78:19:c4:7a:d7:78:92:bb:b8:aa:34:54:1b:1b:f5:f0:6e:
         a9:d2:27:a8:ce:79:51:54:89:10:ed:72:fd:a8:bb:04:83:6f:
         e8:54:77:83:db:bc:5a:ec:66:cc:7b:17:40:a7:7a:cc:5d:13:
         3c:c2:71:01:5b:80:23:04:df:13:a3:06:ff:9b:bf:2b:f7:6c:
         5f:57:d4:82:7d:60:a2:a9:42:f0:a5:79:56:cf:09:b1:73:cd:
         fa:e0:8c:c7:a5:eb:d7:6c:24:b7:bd:82:1d:c8:ce:0d:67:93:
         45:0d:93:92:64:d9:9d:c2:63:b6:a9:55:91:2b:5f:f0:b5:65:
         82:ea:cf:2d:97:41:3e:79:aa:1f:54:ff:4f:3f:c3:7d:8d:16:
         fa:0e:e9:96:02:28:95:f8:74:99:cd:ef:bb:4f:ea:7e:97:34:
         ad:2e:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-ams.rpki-client.org