Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6348dae4-80a6-3194-8bfd-effdb64f0c11.roa
File:                     6348dae4-80a6-3194-8bfd-effdb64f0c11.roa (raw, json)
Hash identifier:          4BC1l+Sj+x77LF0F3QJY7nFPqVUtdX4O8ZtTr1vlqvE=
Subject key identifier:   FE:B6:82:68:4B:09:69:89:24:0E:B5:64:1B:12:DC:F2:27:78:7F:E2
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285841E46CAACCCEA2BC5840F18F80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6348dae4-80a6-3194-8bfd-effdb64f0c11.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 02 Jun 2023 01:44:46 +0000
asID:                     398549
IP address blocks:        23.162.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:aa:cc:ce:a2:bc:58:40:f1:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun  2 01:44:46 2023 GMT
        Subject: CN=4cd6fb7f-0e8d-4561-ad53-e0fe592bd6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:63:4d:8b:5e:df:c9:89:4f:93:8f:94:1b:
                    c6:ee:78:09:7e:26:8b:6c:be:c7:c3:20:84:a9:4e:
                    42:e1:2a:03:83:c3:07:cb:20:45:cb:a2:5f:66:9e:
                    ed:24:e3:e5:03:26:19:0a:bd:f0:9b:e6:cd:47:ad:
                    e4:ce:67:cc:ca:b5:fa:ab:20:3a:19:35:b1:61:ed:
                    34:e2:21:73:8b:26:de:68:0f:8d:c7:3a:9c:cc:98:
                    b0:c6:1c:9a:e1:91:2f:9b:03:c1:d1:df:a6:f4:1a:
                    9f:5c:f8:96:2d:51:8b:c9:f6:42:45:a9:e4:39:90:
                    b1:77:86:37:9d:7e:fb:41:52:68:17:7f:43:39:6d:
                    2c:21:26:ab:e0:96:29:2b:e4:3a:bd:46:b6:c8:03:
                    62:1b:f4:bb:5b:d9:93:5a:5e:25:3d:0c:39:9e:65:
                    f6:9d:da:c9:cc:cb:ba:30:27:10:40:14:6f:e2:85:
                    8b:f2:b7:73:99:14:d7:05:be:18:83:e6:7c:6e:d2:
                    95:a5:dc:19:e8:d2:46:03:1b:8a:8e:41:a3:d8:7b:
                    d9:90:d6:01:b0:fe:4f:7a:ae:76:fa:86:87:0b:12:
                    91:14:03:e5:35:d7:92:b2:14:ec:01:25:9f:a9:ba:
                    7e:6a:82:16:15:19:64:63:11:19:63:7c:32:d7:b0:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B6:82:68:4B:09:69:89:24:0E:B5:64:1B:12:DC:F2:27:78:7F:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6348dae4-80a6-3194-8bfd-effdb64f0c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:08:7c:77:ba:92:c8:44:0c:e0:eb:c1:bd:3c:a9:4b:42:2d:
         41:da:47:55:39:21:88:f0:93:17:cc:4e:08:f3:1e:5f:a0:ba:
         af:4e:29:32:dd:87:6b:6d:97:14:40:7d:a7:98:dd:c8:5f:ae:
         a2:47:45:f9:b7:d0:01:ea:2a:a3:29:7c:b2:0e:64:1a:36:c7:
         ed:f4:9d:f5:7d:98:8e:46:fd:d0:1b:6d:ac:40:f9:1f:a3:4d:
         62:85:6f:45:66:f6:68:e1:e8:92:b8:b1:48:5f:1b:31:1c:fe:
         f7:f4:54:e5:2c:49:6c:c0:72:84:7d:05:cb:8a:7b:4a:dd:8c:
         9e:35:3e:f8:38:24:8e:d7:ca:15:e0:1b:0a:4e:77:75:c5:1c:
         c4:5c:1d:b8:d7:6e:04:f8:be:c5:1d:b1:2c:bd:46:db:27:a5:
         a4:c2:45:13:97:de:3c:11:bb:f7:a5:b5:85:9e:7c:e9:81:57:
         28:9c:a9:9d:8b:00:6d:9b:96:d6:c3:13:ff:81:0d:5c:e4:aa:
         db:4b:f2:67:b1:4e:c5:28:81:9d:73:06:fd:07:fd:43:60:83:
         16:04:cd:bb:5a:84:6a:de:f5:4d:73:31:ac:8e:6b:a7:41:29:
         76:2f:50:ed:e3:6f:9b:17:b1:43:fe:4d:44:02:62:dc:5e:9b:
         8a:6b:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:58 2023 by rpki-client on console-fra.rpki-client.org