Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/210651b5-9d43-3561-a59f-fcba6e827042.roa
File:                     210651b5-9d43-3561-a59f-fcba6e827042.roa (raw, json)
Hash identifier:          t4xloMj/X74lcH5L4TdvfbyJphs+N8yZjW+bWB2+Mig=
Subject key identifier:   F6:A7:A1:7D:DB:30:14:E9:EA:D9:41:D1:D9:3A:A0:0A:69:A6:C5:B4
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328583B7AE0F1DA0281BAB8A374AC00
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/210651b5-9d43-3561-a59f-fcba6e827042.roa
Signing time:             Fri 01 Oct 2021 04:00:00 +0000
ROA not before:           Fri 01 Oct 2021 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     399728
IP address blocks:        172.98.48.0/24 maxlen: 24
                          172.98.51.0/24 maxlen: 24
                          2620:98:e005::/48 maxlen: 48
                          2620:98:e00e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7a:e0:f1:da:02:81:ba:b8:a3:74:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Oct  1 04:00:00 2021 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=b9e162e2-41ab-4567-922c-597ed6b123d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:ae:d9:f9:5e:d7:b1:e3:5a:f0:44:43:3a:
                    08:62:53:ba:d4:ff:8f:c4:b1:5b:e6:d3:22:5a:3e:
                    79:be:30:55:07:95:52:9f:62:6f:41:f9:4a:cd:bb:
                    dd:7c:62:b8:59:61:8c:bd:f7:32:94:fd:c3:92:3b:
                    2c:a9:16:07:23:0d:58:db:f7:a9:37:a0:36:b0:8b:
                    16:b0:34:68:e4:12:d6:8d:5f:1f:3c:20:42:8d:93:
                    a2:53:ec:30:0f:b2:f1:54:20:06:98:02:00:c4:eb:
                    38:8a:be:06:01:1b:22:15:7e:eb:42:35:9d:50:94:
                    fb:9d:b2:20:db:d4:c0:03:42:ee:2d:73:41:d7:16:
                    c2:83:6a:ec:90:64:a9:5c:8e:c8:6e:46:28:1c:ce:
                    c2:41:f3:fe:9d:10:11:78:0a:c1:ce:fe:38:24:f6:
                    b4:c9:05:97:c2:16:b8:a0:e0:d4:28:d5:57:8a:e4:
                    53:bd:95:b0:14:5e:09:07:be:42:7a:09:f6:71:b5:
                    f8:fe:1e:46:15:4a:f6:ef:f4:28:8e:9c:3c:cc:68:
                    49:99:16:f4:63:83:6c:20:b6:05:da:9e:ec:c0:e9:
                    6a:cc:74:d1:79:73:90:bd:89:82:1e:0f:c8:4d:d7:
                    e9:f4:78:d4:00:d4:7d:24:c2:c5:b5:7f:01:1e:75:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A7:A1:7D:DB:30:14:E9:EA:D9:41:D1:D9:3A:A0:0A:69:A6:C5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/210651b5-9d43-3561-a59f-fcba6e827042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.48.0/24
                  172.98.51.0/24
                IPv6:
                  2620:98:e005::/48
                  2620:98:e00e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:53:a8:a7:0c:f9:31:df:2b:95:36:0d:90:ed:75:25:94:
         9b:b5:38:90:da:92:38:01:13:55:6f:99:96:9b:8c:b9:d4:cf:
         95:b6:db:5d:e1:e5:11:79:9a:e4:cd:39:51:17:07:70:26:ac:
         01:e0:e3:da:16:6c:cd:9f:94:f8:1d:17:0a:72:d2:fc:3d:52:
         d3:d0:db:d6:25:c6:3a:23:2b:11:ad:a4:db:3f:00:ac:02:ab:
         d0:2b:71:ad:7e:cf:0e:f2:b5:32:50:a8:8f:59:f2:06:fd:c5:
         7e:a7:94:3f:61:d1:fd:36:b6:ae:01:04:a5:56:8d:d1:60:3a:
         b5:ad:d1:91:98:b4:d9:37:60:b0:f5:4d:af:05:62:e6:a3:a0:
         95:52:91:37:c7:ae:58:6f:55:a5:9a:f2:24:62:77:d1:8b:7a:
         00:c0:b8:8d:d3:0c:cc:6e:47:7e:e1:7a:a6:43:7b:98:d0:0a:
         c0:b3:e4:96:bc:0e:97:ee:19:ed:de:9b:c9:0b:0c:89:72:d6:
         b8:ef:0e:44:db:2f:52:30:83:de:89:0a:a5:f9:3e:1f:6e:f8:
         5b:03:86:44:d6:e1:4f:54:31:5f:1a:a0:06:7a:3c:0e:3a:9f:
         49:f4:04:5a:1c:18:d3:d7:31:c7:ef:9b:70:99:d6:d9:9b:9f:
         7b:07:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:28 2023 by rpki-client on console-fra.rpki-client.org