Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e8572423-8030-3062-b16d-4459f5fa2b9a.roa
File:                     e8572423-8030-3062-b16d-4459f5fa2b9a.roa (raw, json)
Hash identifier:          vW7ar/LWavBsYWKDnzs7jA4fUSm0a0+R1CtNoDdtA0w=
Subject key identifier:   C0:78:8C:CB:42:97:22:BC:93:94:70:FE:9F:C5:D1:C6:37:DA:BA:99
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC170A5E4EC51
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e8572423-8030-3062-b16d-4459f5fa2b9a.roa
Signing time:             Wed 04 Mar 2020 14:13:28 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     3949
IP address blocks:        165.254.191.224/30 maxlen: 30
                          165.254.191.228/30 maxlen: 30
                          165.254.191.232/30 maxlen: 30
                          165.254.191.240/30 maxlen: 30
                          165.254.191.244/30 maxlen: 30
                          165.254.191.248/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:a5:e4:ec:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=bc03b680-dcfc-4141-a378-aba0c4af36ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:9a:9d:89:c2:a0:b9:8c:59:6d:04:42:38:
                    c6:bc:d7:1a:17:2f:41:c6:6a:1f:b7:31:c3:38:37:
                    36:83:d1:df:e7:de:02:25:b0:08:26:8c:6d:0f:d8:
                    06:30:7f:21:7e:ca:04:9e:5d:2c:48:d2:9c:63:af:
                    a9:c5:48:e9:88:fd:21:0e:56:36:47:2c:25:c7:83:
                    9f:5e:31:85:0b:2a:50:86:e3:a2:70:67:5d:15:3a:
                    0d:4f:b3:a3:a4:3d:94:b2:ab:ff:52:14:7f:c1:ad:
                    32:2e:3b:33:02:30:77:63:f8:ce:c7:ca:86:56:84:
                    d7:19:6f:92:77:9b:af:58:02:69:b7:5a:b6:71:aa:
                    26:b3:c1:7f:a5:c0:c9:1b:9e:a7:92:25:eb:e9:22:
                    f3:39:25:c9:cd:d7:e2:af:65:27:e5:55:de:38:97:
                    57:2b:0d:b6:c0:27:75:66:c0:77:b1:07:b4:f1:91:
                    bd:3c:a2:93:4c:f7:92:cf:0a:1a:45:ee:f6:57:80:
                    a7:aa:f2:c6:b1:b3:07:99:b3:01:98:0d:64:81:a5:
                    87:83:cd:79:a9:a0:71:63:04:c4:26:e6:72:75:fd:
                    94:1f:0d:ee:4f:c8:1b:07:b3:0a:ef:3b:b1:91:b1:
                    7c:d7:86:25:31:d3:5a:17:99:02:bc:31:84:f8:51:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:8C:CB:42:97:22:BC:93:94:70:FE:9F:C5:D1:C6:37:DA:BA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e8572423-8030-3062-b16d-4459f5fa2b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.191.224-165.254.191.235
                  165.254.191.240-165.254.191.251

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d2:3a:34:b2:a2:80:46:7c:a6:ad:8f:8e:fc:32:c0:4f:74:
         e1:ef:ff:2c:38:c0:82:ce:43:24:32:95:e1:43:60:de:c0:39:
         52:fd:04:bc:bd:c4:5f:9b:44:b2:44:83:1f:75:4d:ab:24:fb:
         64:3c:75:d3:da:c5:8e:ac:8c:59:8b:17:c9:0a:ea:52:9b:c5:
         7d:e1:c8:5a:6e:fe:fd:31:bc:e9:6b:99:69:25:17:4e:b9:56:
         55:f5:6b:1a:3b:ce:42:af:d8:06:f7:c5:52:c6:3f:62:5c:23:
         7d:60:cc:2f:38:89:50:15:2e:8f:d9:8d:3f:c0:6f:b6:82:8e:
         74:fc:7a:ab:34:36:0d:1d:be:48:b5:39:05:90:bc:1c:8d:38:
         82:86:39:a5:cc:24:2b:b2:0e:c4:c7:94:46:5d:80:23:09:99:
         58:fd:a9:e9:a5:cf:1f:b2:06:5a:15:6a:66:77:d4:ac:e3:05:
         cf:4a:77:de:71:cf:92:67:2c:c9:fc:12:6c:a8:73:85:e7:ad:
         0e:ed:3b:27:0b:88:b3:2d:b0:ef:5c:15:40:cb:04:b2:e3:f8:
         d8:cb:44:9d:61:a9:64:0f:61:70:ba:bf:d2:77:f6:66:7a:ab:
         7c:0f:8d:9f:9a:d3:cd:02:b6:09:2e:03:1d:ab:3a:bc:37:cf:
         7d:c1:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:25 2023 by rpki-client on console-ams.rpki-client.org