Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/6c36fbd3-cfb5-35da-89f8-6389992f3d85.roa
File:                     6c36fbd3-cfb5-35da-89f8-6389992f3d85.roa (raw, json)
Hash identifier:          /SfbmsTWv/4/1Izs29s5NVBV4/KeRVGaU/UkyC2TX3Y=
Subject key identifier:   65:DE:8F:B7:0C:F7:D0:84:F8:26:67:D3:7E:EC:7E:F3:E0:92:A5:CB
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F43285841E46D3ABEA8E60820DAE0BB40
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/6c36fbd3-cfb5-35da-89f8-6389992f3d85.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 07 Jul 2023 14:33:00 +0000
asID:                     13849
IP address blocks:        23.133.82.0/24 maxlen: 24
                          2602:fbb5:1::/48 maxlen: 48
                          2602:fbb5:b25::/48 maxlen: 48
                          2602:fbb5:a25::/48 maxlen: 48
                          2602:fbb5:b53::/48 maxlen: 48
                          2602:fbb5:a53::/48 maxlen: 48
                          2602:fbb5:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:3a:be:a8:e6:08:20:da:e0:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  7 14:33:00 2023 GMT
        Subject: CN=d5420568-ad05-44d9-82e5-fc1857b60775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:9b:02:22:68:1c:03:85:d8:4a:d1:08:d7:
                    47:06:1e:30:1c:fd:ed:17:b3:6a:5a:ab:5c:b4:68:
                    f0:42:dd:b4:50:a6:74:0d:05:21:a2:89:bd:8c:75:
                    76:f8:75:ae:84:14:fe:53:56:22:a5:34:18:28:e4:
                    06:80:ae:5d:b5:89:e4:1a:a9:72:6a:11:ff:24:ec:
                    9e:39:bc:0d:5a:23:a8:24:9d:f8:e6:db:f2:dd:5b:
                    bc:34:b6:e6:de:86:2d:bc:6e:c3:b2:88:cc:df:b6:
                    b8:a8:a3:75:35:0e:2c:87:44:72:76:c7:1f:53:a7:
                    82:1f:db:70:f7:69:cf:10:1d:ec:5a:8c:26:fa:7c:
                    f1:87:dd:a0:5c:cd:9b:2e:39:5a:4a:f8:d7:b9:20:
                    6a:a0:4d:10:23:03:a9:1e:59:a0:43:ad:23:d9:56:
                    f5:01:fe:18:cf:a7:a3:cb:5f:8f:4a:d9:17:df:68:
                    ec:22:14:d4:bb:99:69:9f:01:12:38:e7:f3:09:8a:
                    c8:e0:f1:ee:ed:d6:cc:49:72:16:02:52:11:7c:04:
                    d7:9d:61:8a:c4:c7:d4:5d:98:1f:46:5f:ad:bd:f3:
                    86:d0:02:b1:7d:be:18:7d:7d:15:a6:ed:bf:b3:20:
                    34:b2:d7:58:d4:7e:27:41:c0:07:27:db:d9:ed:e5:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DE:8F:B7:0C:F7:D0:84:F8:26:67:D3:7E:EC:7E:F3:E0:92:A5:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/6c36fbd3-cfb5-35da-89f8-6389992f3d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.82.0/24
                IPv6:
                  2602:fbb5:1::-2602:fbb5:2:ffff:ffff:ffff:ffff:ffff
                  2602:fbb5:a25::/48
                  2602:fbb5:a53::/48
                  2602:fbb5:b25::/48
                  2602:fbb5:b53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:f7:68:83:de:79:98:5a:13:ec:b2:78:f3:ee:7e:43:1e:
         a2:3b:0d:a7:1b:be:61:b2:3b:d4:fa:44:c5:90:e2:bc:47:3a:
         21:e3:99:57:c0:52:2e:c6:a3:f2:73:2f:53:36:ed:02:88:2b:
         23:2b:7e:67:70:74:f3:ab:32:ad:e3:a4:47:fb:bc:72:84:c7:
         00:6c:a2:f2:92:14:46:75:b2:b3:b1:ea:dd:8a:b1:3e:0b:5d:
         ab:eb:bf:d4:fc:91:dc:e6:8a:67:93:99:44:7f:e6:23:e1:a2:
         c3:42:9a:94:52:50:28:78:0f:ac:f9:72:ba:d0:37:8d:c6:66:
         ba:4e:c9:79:fd:2d:88:28:53:bd:35:0f:00:dc:ce:c8:ba:35:
         3d:ad:77:18:ed:bd:c0:2e:ae:4b:4c:1b:65:1f:78:c3:65:c0:
         ff:9f:99:1a:2d:eb:67:f6:92:bd:73:ac:8f:79:a6:6f:09:be:
         04:3f:10:95:0e:cd:09:c3:7a:93:c2:29:79:4b:b4:7e:d8:a0:
         9d:46:80:7a:ef:71:38:9e:97:b3:4a:54:ef:d9:80:7d:fb:65:
         58:d4:00:97:91:ea:09:15:0c:31:94:70:e6:2b:bc:d7:fe:68:
         58:ef:33:c2:fb:1c:2a:7e:2e:0e:c7:72:3f:76:8d:39:76:12:
         87:d8:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org