Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/383819f8-7227-33cf-8654-83aa97d92524.roa
File:                     383819f8-7227-33cf-8654-83aa97d92524.roa (raw, json)
Hash identifier:          cU4g395G/vK25VLkzs9cHoKh9WYo3CRbKdNGbozE3No=
Subject key identifier:   DF:9F:B9:F9:0C:8C:2E:8C:D7:3F:25:37:44:BE:64:28:EB:1C:EB:24
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858377B2C8DAAED03FFAD78628980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/383819f8-7227-33cf-8654-83aa97d92524.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     2914
IP address blocks:        2001:418:0:7000::/64 maxlen: 64
                          2001:418:3ff:4::/64 maxlen: 64
                          2001:418:3ff:5::/64 maxlen: 64
                          2001:418:3ff:8::/64 maxlen: 64
                          2001:418:3ff:12::/64 maxlen: 64
                          2001:418:1456:b0a::/64 maxlen: 64
                          2001:418:1456:b15::/64 maxlen: 64
                          2001:418:1456:b16::/64 maxlen: 64
                          2001:418:3801::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:7b:2c:8d:aa:ed:03:ff:ad:78:62:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=fa4cfcb1-2dbc-4de4-b6f5-0348882453a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:66:0a:a7:95:69:67:26:dd:ae:cb:1e:45:
                    d2:ab:1c:cd:53:52:61:0c:48:6b:b8:39:36:bb:8b:
                    5a:c9:bb:3a:f7:51:23:e7:07:62:53:c0:33:85:9b:
                    8d:9d:2f:12:6f:84:d3:54:d9:b4:7f:01:0b:84:93:
                    16:30:35:34:b8:f4:94:be:e6:82:e2:d8:5a:3a:c9:
                    53:ea:be:ab:c0:29:10:7b:12:fc:98:8b:f2:8f:37:
                    84:6e:81:60:6b:5e:e0:f2:2e:35:dd:7a:64:c8:a0:
                    96:be:54:6e:0a:d5:a9:20:bf:f4:2b:73:01:88:f4:
                    a6:9f:cb:a7:e5:2c:6e:46:39:5a:16:ef:7e:bc:3c:
                    72:a3:c4:38:67:82:e8:cc:6a:ec:b2:27:46:ce:4e:
                    d8:51:7c:bb:74:10:42:cd:5a:a3:c4:5c:62:b6:9d:
                    9e:16:3e:8b:9d:8f:2d:5a:51:bb:e8:17:f0:4c:3f:
                    ae:c0:61:64:97:38:15:36:94:a5:c2:9d:54:e9:f0:
                    6f:79:17:06:3c:97:8d:ad:30:e2:aa:12:1c:52:eb:
                    4b:b6:51:5a:bc:de:6b:0f:c1:11:16:8a:45:83:ad:
                    9c:7a:67:f7:88:92:f1:6a:e7:56:6b:9c:58:a4:60:
                    9e:ff:0d:f0:06:0a:7c:da:50:ce:15:36:73:24:c3:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:B9:F9:0C:8C:2E:8C:D7:3F:25:37:44:BE:64:28:EB:1C:EB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/383819f8-7227-33cf-8654-83aa97d92524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:0:7000::/64
                  2001:418:3ff:4::/63
                  2001:418:3ff:8::/64
                  2001:418:3ff:12::/64
                  2001:418:1456:b0a::/64
                  2001:418:1456:b15::-2001:418:1456:b16:ffff:ffff:ffff:ffff
                  2001:418:3801::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:05:99:5f:fc:9b:9f:79:12:f1:2a:06:c3:fa:52:9d:9f:
         2b:52:a6:48:9e:d6:68:33:a4:87:37:44:88:92:7d:b2:1f:bc:
         16:2f:ec:95:8d:b4:68:ff:4f:51:6a:9b:a7:df:61:7b:0f:c4:
         4b:4d:6a:94:fa:16:e5:43:73:d8:8d:3e:38:48:33:d9:72:08:
         ad:0a:c1:ce:b4:5e:9b:8e:d2:07:aa:c5:a0:08:56:0a:1d:19:
         ed:65:23:ba:24:60:79:68:90:f5:a1:d4:dc:69:bd:6d:ff:84:
         36:4a:ff:81:c6:3e:80:24:54:73:ab:5d:65:0f:90:46:b1:39:
         f8:6a:7f:91:74:36:cf:46:21:19:1f:08:a7:f6:ac:61:a2:e9:
         04:b5:ca:9b:78:a5:55:8b:c3:92:1d:bb:54:94:91:00:70:6f:
         9e:86:b1:43:ee:91:bc:ae:c6:d1:a9:f4:a7:88:e5:35:bc:8c:
         eb:50:a1:38:fa:96:d3:a9:c4:a6:e1:67:f8:e8:d2:8d:d4:4e:
         fd:b7:e7:db:82:ee:8d:98:a2:18:6f:f3:eb:db:64:71:47:d4:
         ff:ee:14:e0:5e:9a:4f:c8:53:9a:9e:16:c6:78:b4:0b:0c:58:
         3f:a7:67:36:54:89:51:cd:12:24:c0:5a:a4:54:3a:54:e9:eb:
         80:30:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:24 2023 by rpki-client on console-ams.rpki-client.org