Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f33f113-928b-39da-954a-f18a61531fa4.roa
File:                     8f33f113-928b-39da-954a-f18a61531fa4.roa (raw, json)
Hash identifier:          IB+hmVs7KpHYff4pRbxJKcjgLGiaT0opHMzT7jzcMzA=
Subject key identifier:   99:02:CB:76:63:D9:7B:1D:EC:07:A7:05:EC:B1:B5:E8:50:52:6D:52
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583927EA97CB47B05CAA038C80C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f33f113-928b-39da-954a-f18a61531fa4.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 08 Jun 2023 04:00:00 +0000
asID:                     393792
IP address blocks:        204.141.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:27:ea:97:cb:47:b0:5c:aa:03:8c:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun  8 04:00:00 2023 GMT
        Subject: CN=fcb3bc6c-1626-4cc7-9d89-b74ecd9d9474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:c7:62:8e:59:26:da:25:04:59:a2:02:84:
                    d7:f3:9e:5c:18:d2:7d:4f:b1:45:c4:90:e6:f2:48:
                    c7:31:8c:3f:7f:5f:be:1f:c4:b1:86:5c:06:22:98:
                    81:24:50:40:68:2b:5e:2c:59:1e:37:0c:64:73:37:
                    80:d1:68:e2:76:a5:a9:d7:25:bc:44:6e:38:01:5a:
                    ce:63:c7:a6:15:3d:8c:b6:9b:13:5c:e3:70:29:f8:
                    47:91:59:f4:6f:7c:80:d7:8a:f4:49:1a:f4:db:5a:
                    5f:64:36:86:d0:3c:ed:eb:e6:90:7e:38:67:9e:ff:
                    c0:5d:32:1c:88:69:f6:77:25:8b:e0:d3:37:40:e4:
                    6e:a0:57:d1:f9:e8:31:5c:ab:ae:70:38:0b:93:20:
                    eb:ba:1a:1f:20:af:38:7a:06:0f:20:38:97:d1:5e:
                    01:3e:10:db:67:6f:0c:e3:eb:fd:8f:7b:b6:39:b8:
                    d5:be:ae:0b:85:25:c8:85:d5:e3:66:2c:e7:c7:2c:
                    1f:de:e5:91:05:ca:1d:38:bc:d8:23:55:ad:84:29:
                    f8:ff:f0:cd:a2:67:f0:94:e7:ff:f7:f9:05:ef:5f:
                    9f:04:d0:97:ea:f9:c6:9b:ec:64:34:d9:1b:84:c4:
                    04:0d:4b:77:83:62:e4:c0:13:40:38:65:f7:68:23:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:CB:76:63:D9:7B:1D:EC:07:A7:05:EC:B1:B5:E8:50:52:6D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f33f113-928b-39da-954a-f18a61531fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4a:9f:37:a3:b5:ee:c5:56:3d:b7:2f:20:59:73:17:5a:ab:
         31:87:87:1d:48:10:eb:04:45:af:12:f1:41:b4:58:8c:e0:9c:
         65:a8:a0:8f:36:cf:7e:90:5a:0a:b1:68:d6:5f:fe:7f:85:91:
         8e:d7:be:65:f5:ae:b9:ca:c2:21:0d:77:2e:8b:2f:57:42:70:
         ec:64:11:df:11:b7:fb:a6:67:e3:c8:3f:9f:9b:53:8c:2f:8e:
         cb:6d:98:16:d6:b2:47:f8:94:a9:ca:07:c0:35:17:89:98:ca:
         5b:cf:c3:27:19:a8:55:91:a0:7c:e0:c9:37:6d:de:b8:6e:de:
         fb:70:87:85:13:22:39:6f:51:7e:ea:7b:18:a3:72:eb:69:21:
         3f:6e:a8:cc:e2:cf:ed:ac:64:a4:6c:d6:85:44:72:20:27:4d:
         f9:fb:92:5b:8a:cd:63:0d:5b:84:46:41:47:3b:be:1a:36:36:
         22:87:0b:71:cb:d1:23:22:32:e8:4d:ef:eb:93:c2:d8:3f:c1:
         fb:6a:41:25:4d:71:da:ab:d2:0c:62:c5:0a:36:9a:b5:4f:e9:
         30:bb:d8:ce:f5:4f:b4:a4:83:79:72:f3:a5:22:61:34:af:94:
         7f:15:d3:f4:e0:c3:02:a6:0a:93:38:6d:3f:29:89:94:13:b4:
         71:74:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:24 2023 by rpki-client on console-ams.rpki-client.org