Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/0a6346f4-ebdc-3674-beb0-550ebef28f08.roa
File:                     0a6346f4-ebdc-3674-beb0-550ebef28f08.roa (raw, json)
Hash identifier:          6VNpsCjJUrUN1MdMzLnVvk+y+OOPzeCKmgczSQgLxo0=
Subject key identifier:   27:B5:F2:45:2F:ED:B7:2F:5C:C0:CC:EF:0D:AA:12:70:78:44:58:D9
Certificate issuer:       /CN=065ee998-46a2-4051-a1a1-b267cd239391
Certificate serial:       010D0C9F4328576D51CC73C042CFC17329F62C97
Authority key identifier: BE:BE:C6:A8:26:70:00:9B:E3:A7:43:A8:AE:C6:21:CF:5E:E0:41:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/0a6346f4-ebdc-3674-beb0-550ebef28f08.roa
Signing time:             Tue 07 Jul 2020 15:47:45 +0000
ROA not before:           Mon 06 Jul 2020 04:00:00 +0000
ROA not after:            Mon 10 Oct 2022 04:00:00 +0000
asID:                     33549
IP address blocks:        104.37.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:29:f6:2c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065ee998-46a2-4051-a1a1-b267cd239391
        Validity
            Not Before: Jul  6 04:00:00 2020 GMT
            Not After : Oct 10 04:00:00 2022 GMT
        Subject: CN=d499d851-bd9c-4a88-b1f7-327b9b8a81c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:c9:9c:f9:31:1a:a8:84:1e:88:ca:9c:d0:
                    31:95:90:0d:85:59:b6:f0:e0:88:79:b8:e7:6f:9e:
                    76:3a:bb:f7:d4:72:0b:c7:35:a3:df:24:4e:09:02:
                    11:c4:d9:b5:e9:a8:a2:db:cc:8f:02:22:c4:c6:6a:
                    fe:28:0b:f7:3d:81:ae:1a:80:66:25:e3:14:22:69:
                    74:ea:2b:ac:b2:82:c2:7d:db:15:8b:33:8e:b4:59:
                    d7:75:95:e9:a0:eb:6e:aa:55:63:51:61:12:0a:9b:
                    a5:e0:ca:36:de:09:94:59:bf:3e:ae:35:ce:b0:3c:
                    46:58:f5:1c:28:38:5f:ce:1c:f5:98:6e:73:44:8d:
                    ca:e8:dd:5a:61:03:65:30:e1:fa:f8:4c:dd:28:f7:
                    00:2e:46:ee:1d:22:f2:e1:86:91:a2:b1:ff:09:4e:
                    4e:b3:0e:dd:14:61:df:20:2f:b0:31:a2:3c:26:e4:
                    33:8c:64:22:2d:a7:fd:5c:ce:f8:61:7c:2e:5f:52:
                    f7:bf:79:8b:30:9f:1a:0a:49:f4:91:8a:67:6e:70:
                    61:14:7a:33:78:bc:c2:03:91:7b:5e:03:28:c3:6c:
                    76:e9:34:30:56:ab:ea:41:72:8c:25:02:dd:28:00:
                    b8:98:5f:bc:41:4b:17:a0:5d:d8:c4:7f:68:a1:fc:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:F2:45:2F:ED:B7:2F:5C:C0:CC:EF:0D:AA:12:70:78:44:58:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/0a6346f4-ebdc-3674-beb0-550ebef28f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/065ee998-46a2-4051-a1a1-b267cd239391.crl

            X509v3 Authority Key Identifier:
                keyid:BE:BE:C6:A8:26:70:00:9B:E3:A7:43:A8:AE:C6:21:CF:5E:E0:41:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:08:89:42:1c:c3:47:be:65:d4:23:4d:8e:a3:67:ef:d8:bc:
         a3:91:2c:da:0a:97:a7:7e:52:83:c6:85:ab:88:77:28:87:d7:
         d2:14:19:62:8a:a8:b9:53:97:77:d8:15:40:e7:27:2d:10:47:
         8f:c1:5f:33:0c:b0:66:ca:1c:3a:84:a5:e9:f9:e2:d2:38:f4:
         bc:05:b2:ad:ad:ee:42:b6:15:a3:6b:16:c4:f5:19:5a:a7:a2:
         57:33:86:46:cb:35:5f:8e:bc:d1:1b:40:ec:cc:81:3b:37:0c:
         fe:53:25:8f:f9:02:b3:46:15:bf:c9:4e:38:54:91:b1:34:cb:
         ec:b8:e4:00:1a:5f:93:37:23:0f:52:91:ed:a7:e2:7f:aa:ac:
         90:94:a0:b4:6b:fc:38:04:40:a1:d2:25:0d:27:bb:56:ea:04:
         47:2c:41:ea:37:65:03:c6:36:77:f9:33:67:5e:b3:1b:25:6e:
         53:ee:44:9e:d9:07:ea:f1:d1:9d:14:cd:a8:be:6a:95:39:05:
         f7:13:da:31:b6:50:31:52:1b:7b:40:8c:5e:37:9a:20:ba:d5:
         ab:ee:f8:3b:92:b9:48:2a:e1:90:84:04:10:cc:2e:0f:0f:ac:
         31:8a:6d:b0:06:dc:6c:50:a2:59:7a:f9:11:9f:67:bd:72:46:
         5e:59:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-ams.rpki-client.org