Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3fe4fd8c-0f4c-34cc-9e0b-2e0de1dc5aff.roa
File:                     3fe4fd8c-0f4c-34cc-9e0b-2e0de1dc5aff.roa (raw, json)
Hash identifier:          lya4aoYBi8UiE2/z0SSEIkPjk/sgw5CytQ3PyT8lmdc=
Subject key identifier:   69:13:12:38:9B:81:E1:BA:0E:27:21:1E:4F:1B:72:0E:0F:EC:3A:D5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D411B1BD3FA6FB81D3E92480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3fe4fd8c-0f4c-34cc-9e0b-2e0de1dc5aff.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     7861
IP address blocks:        209.91.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:11:b1:bd:3f:a6:fb:81:d3:e9:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=10de396f-3693-42f0-9693-538b14d92f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:45:e6:24:d7:eb:b5:cc:58:92:7d:61:16:
                    ff:49:80:27:42:b8:d1:ba:03:90:32:40:10:b5:51:
                    93:f9:83:50:31:06:05:43:4b:9d:6c:37:bf:a3:be:
                    d2:af:26:5a:58:04:43:17:4e:94:e0:db:88:5a:83:
                    a6:68:7e:ba:5a:d4:33:ba:cb:ac:df:c4:da:75:05:
                    ca:79:38:d0:c4:36:71:84:22:1f:8c:4c:e4:82:73:
                    ac:ae:0c:22:fa:8f:25:16:31:da:e1:3c:1b:16:28:
                    cb:87:69:b6:a9:c0:4a:c4:68:85:35:84:dc:e9:cb:
                    7e:5e:da:c3:d5:4e:c8:cb:d4:83:a9:23:2d:52:83:
                    d1:c3:b0:1c:0e:ce:62:16:5c:d0:e4:cc:0c:54:f5:
                    7e:4a:c5:b2:1b:ac:aa:ca:e8:25:41:74:29:09:22:
                    0a:2a:87:d2:5c:59:52:a8:27:38:ec:52:d0:eb:79:
                    fc:26:32:b3:25:db:d6:87:0f:bc:93:a3:7d:ac:44:
                    1d:10:b6:ff:62:fc:cb:db:f1:9b:20:e7:8a:92:af:
                    d6:6a:9e:0c:36:16:60:5e:22:64:36:08:8e:36:96:
                    2d:8f:70:33:1d:05:34:cf:c9:57:7b:51:a1:d6:50:
                    4d:2e:9d:0c:26:3b:7b:5f:2d:ca:bc:4c:e8:12:58:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:13:12:38:9B:81:E1:BA:0E:27:21:1E:4F:1B:72:0E:0F:EC:3A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3fe4fd8c-0f4c-34cc-9e0b-2e0de1dc5aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.91.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:e3:e8:f7:7c:17:ea:c8:ac:45:92:3c:10:6c:3f:82:32:
         c9:e3:b4:bc:4c:b3:c9:09:3e:0a:5b:2d:fd:17:30:e1:56:c0:
         e4:d0:1e:bc:f0:f2:2e:86:e3:38:e1:67:77:0a:5f:c3:09:ea:
         1a:48:2e:f7:c6:cc:95:fb:44:14:a9:ab:30:ba:d7:03:1e:9a:
         20:8f:e3:ac:5d:8b:b7:e3:77:46:7e:d3:9d:ef:50:90:a8:76:
         35:88:f6:2f:38:a2:b7:2f:53:50:36:91:81:60:4e:a0:91:2e:
         fa:c5:cd:93:84:4e:db:d4:44:ed:58:59:54:e5:4f:18:85:f3:
         d0:47:10:26:2f:29:0f:6e:8c:55:f6:4d:8b:ce:c4:1f:e3:e5:
         a7:11:29:e1:c9:c3:18:bb:41:dc:89:1c:59:36:e6:57:22:8a:
         2f:a9:6a:5f:8f:0a:2f:ee:2c:6f:c9:8f:d9:1e:18:70:c8:f1:
         66:fc:d1:f9:22:90:e0:6d:97:8b:f0:32:f6:7f:61:43:63:28:
         d5:61:96:a9:41:d4:44:5c:c0:2d:65:e3:6e:46:b4:ef:8a:a7:
         d5:e8:15:4b:d4:06:8d:1f:fc:60:3e:ea:ea:0f:49:bd:5a:db:
         36:9f:c7:09:20:76:47:78:12:20:b6:07:17:96:ef:bb:78:6d:
         82:1f:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:02 2023 by rpki-client on console-fra.rpki-client.org