Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c9e26899-1ed0-3b1b-b47b-e3b255d66de4.roa
File:                     c9e26899-1ed0-3b1b-b47b-e3b255d66de4.roa (raw, json)
Hash identifier:          KYqfqiixKlz6VEU7l40b/vljs21hXJVdHMk2tKELnHA=
Subject key identifier:   DF:5B:B0:CF:7C:0B:4E:5A:A1:BD:DB:A6:D2:69:AD:A8:3F:4B:B9:11
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328583B1475D528404BC4406D44C180
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c9e26899-1ed0-3b1b-b47b-e3b255d66de4.roa
Signing time:             Thu 12 Apr 2018 04:00:00 +0000
ROA not before:           Thu 12 Apr 2018 04:00:00 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     7922
IP address blocks:        161.129.38.0/24 maxlen: 24
                          161.129.36.0/24 maxlen: 24
                          199.15.76.0/24 maxlen: 24
                          23.150.32.0/24 maxlen: 24
                          23.150.33.0/24 maxlen: 24
                          161.129.33.0/24 maxlen: 24
                          161.129.37.0/24 maxlen: 24
                          161.129.40.0/24 maxlen: 24
                          161.129.44.0/24 maxlen: 24
                          199.15.77.0/24 maxlen: 24
                          199.15.78.0/24 maxlen: 24
                          199.15.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:14:75:d5:28:40:4b:c4:40:6d:44:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 12 04:00:00 2018 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=b57b92de-7fc7-415c-96fa-8b04eb4196fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:92:69:62:56:ff:72:cc:ac:d4:7f:bf:96:
                    d6:77:83:92:54:b4:9b:33:42:2c:45:06:3c:fb:85:
                    87:32:32:9a:2f:bb:11:9e:3a:1b:05:c3:c3:22:29:
                    9a:7c:eb:60:b5:18:ad:7b:6f:c7:cf:4c:94:46:21:
                    94:f7:19:41:ac:b9:8e:23:05:ca:5a:ea:aa:eb:e6:
                    cb:48:24:0c:91:2e:77:de:a9:61:a4:d0:a8:17:ee:
                    82:85:29:48:6c:8f:6d:ca:f0:67:96:d9:ce:7b:b5:
                    46:68:97:fa:4b:08:f8:45:70:20:11:6d:09:c7:fd:
                    82:af:35:72:3d:0f:6c:8b:5d:29:b0:2a:aa:85:d1:
                    1b:ff:03:86:4a:c6:bc:fa:76:9a:a0:78:cc:6b:9a:
                    9e:cb:79:1a:ee:d3:8f:2a:9d:33:e9:9d:1a:43:26:
                    38:73:14:aa:c7:1c:8d:b2:44:8f:8f:46:a9:e1:e3:
                    19:7f:7c:a4:1b:96:d7:14:66:4c:c5:f9:89:8b:9b:
                    e8:7f:ce:c8:2a:28:b2:cf:72:1b:20:2a:28:d4:bc:
                    55:c7:5e:50:e2:d6:20:eb:a7:f1:cf:1d:1b:84:ee:
                    0e:a3:40:a1:54:55:45:32:9e:b4:3f:17:27:e1:b9:
                    44:da:26:7e:00:c1:ab:68:93:d6:30:9f:0a:00:01:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:B0:CF:7C:0B:4E:5A:A1:BD:DB:A6:D2:69:AD:A8:3F:4B:B9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c9e26899-1ed0-3b1b-b47b-e3b255d66de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.32.0/23
                  161.129.33.0/24
                  161.129.36.0-161.129.38.255
                  161.129.40.0/24
                  161.129.44.0/24
                  199.15.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:03:74:c4:42:ef:18:45:27:a8:d1:c8:ff:02:2c:47:f6:
         44:e9:f0:04:50:78:ac:85:ae:d4:40:3e:2d:c5:6b:78:9c:a9:
         5a:6f:16:b3:50:3d:e2:18:98:6e:91:41:0b:53:56:ca:6a:c6:
         1d:d9:75:48:e0:0a:71:f5:db:a9:23:aa:e1:0a:c1:a7:00:ff:
         22:b0:c9:0f:38:b4:58:68:a1:7f:f1:f1:95:92:1c:ce:1b:9e:
         29:a5:68:1e:e7:77:7e:e5:a4:ae:07:ab:ee:a5:71:4a:a6:89:
         b4:f1:c7:01:92:65:74:eb:7f:79:0e:c3:41:dc:64:a8:1b:b2:
         d4:00:38:de:89:dd:dc:8d:d8:25:ff:ca:91:cf:f6:15:61:46:
         f2:05:9d:89:ff:c8:cc:b6:1b:14:90:bd:fd:d1:a5:38:cd:5a:
         95:6b:7d:0d:9f:73:91:09:af:fe:f7:09:02:c8:ee:70:c6:33:
         48:60:30:cc:d5:30:60:7c:c4:10:51:06:a1:27:e5:52:9e:4d:
         63:d0:ea:7e:df:4b:04:c0:b6:b7:0f:04:3a:e5:21:97:c4:e2:
         9d:8e:ec:70:8d:05:90:ec:be:0a:57:db:cc:69:4d:25:49:a8:
         af:1f:b4:44:69:39:53:71:2b:67:22:6e:eb:a5:c4:4a:c6:ae:
         c6:02:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:28 2023 by rpki-client on console-fra.rpki-client.org