Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/88e64a13-d6e5-35ca-af97-771f446c83bd.roa
File:                     88e64a13-d6e5-35ca-af97-771f446c83bd.roa (raw, json)
Hash identifier:          oSqQc4fFv+ccyzJlqpbHjpBTANDE8xHbry0RNcCu+kQ=
Subject key identifier:   9C:0C:55:FF:BB:7B:B0:EF:28:54:10:70:39:FD:D7:28:CF:34:DE:8C
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730BAAB390
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/88e64a13-d6e5-35ca-af97-771f446c83bd.roa
Signing time:             Wed 01 Jul 2020 18:36:43 +0000
ROA not before:           Wed 01 Jul 2020 04:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.187.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0b:aa:b3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Jul  1 04:00:00 2020 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=ad88ce0c-5217-4bf3-92ec-2cd942d79151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:44:80:be:80:70:c7:02:e7:ba:33:07:2c:
                    4a:d0:71:37:11:89:ac:62:9f:b1:12:e2:68:67:3f:
                    fa:63:78:39:a6:1d:7e:37:44:a2:76:4e:75:5d:88:
                    35:7a:4e:92:d3:e3:ec:bd:73:51:df:22:70:8b:0d:
                    48:d9:cf:03:f9:19:d5:87:f6:31:32:fc:5d:6c:ae:
                    21:44:f6:40:52:69:a9:c2:8a:10:d3:c5:81:f5:16:
                    ed:d7:08:a9:b2:0a:c4:86:f5:c8:2b:c2:81:79:74:
                    f0:63:1c:d6:c4:e9:ce:0f:e5:78:aa:24:23:d8:1e:
                    54:f2:c6:c6:73:51:8e:00:7e:9e:b9:ec:7c:88:98:
                    d7:ce:a9:4b:59:c0:cc:d4:c3:93:4d:fd:a5:35:17:
                    d1:af:02:c6:b9:75:e9:b2:82:65:73:17:6c:d5:fa:
                    a8:31:71:f4:cf:f3:25:71:11:26:82:41:83:38:b8:
                    2e:1a:5c:d0:11:86:54:fa:d2:2b:b5:76:dd:a0:33:
                    5e:76:10:d3:7c:1b:c1:42:c4:ee:1a:a9:89:f4:01:
                    09:ad:a4:8e:0e:43:4f:0a:ef:c1:c1:c2:50:fb:8c:
                    f9:83:d3:80:db:36:51:ae:ef:55:9d:b6:2e:a0:1e:
                    f0:ac:1e:be:a0:6a:50:2a:eb:30:ff:93:dd:cf:9d:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:55:FF:BB:7B:B0:EF:28:54:10:70:39:FD:D7:28:CF:34:DE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/88e64a13-d6e5-35ca-af97-771f446c83bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:94:be:41:5a:4e:fb:6a:4f:a1:8c:92:92:15:4d:f1:79:
         31:7b:b5:45:d6:7b:b8:62:26:4f:aa:31:6f:43:2a:9d:0b:4f:
         44:47:db:83:38:9d:61:1a:7f:e6:b4:1f:cc:13:6f:30:b5:aa:
         11:0c:cd:a7:d9:86:34:7b:ae:94:05:15:88:8e:e7:b2:54:bc:
         df:2f:61:16:3c:21:e5:a1:e5:ac:50:6f:e5:57:2a:65:43:45:
         4a:de:85:aa:42:14:e1:00:26:93:52:fe:01:8e:48:96:f3:52:
         8d:8e:7a:e1:29:d9:5a:fc:23:a6:ea:a2:85:07:4c:85:39:9a:
         12:83:b2:4b:c8:ce:5d:69:94:dd:38:89:a5:8b:45:49:74:de:
         04:bd:a2:de:34:a1:f7:90:e8:89:ca:b3:f0:d4:15:ca:4d:5d:
         5f:e9:bf:ca:30:2c:3b:68:a2:9c:d5:fb:e2:d0:74:23:21:11:
         0b:57:af:ba:5d:1b:9c:88:79:5d:7c:68:66:7d:a8:b0:a2:85:
         6f:13:7d:20:78:69:8c:15:7c:6d:22:cc:ce:50:43:10:49:b7:
         6a:04:3e:22:31:90:47:1d:a9:78:a3:43:97:47:d5:62:cb:bd:
         28:fc:f9:82:36:1f:19:63:bf:19:89:12:89:5e:20:ac:ce:ed:
         61:b6:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:58 2023 by rpki-client on console-fra.rpki-client.org