Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8cd3b1c4-cef1-3ab1-9666-071b9b7b6bb5.roa
File:                     8cd3b1c4-cef1-3ab1-9666-071b9b7b6bb5.roa (raw, json)
Hash identifier:          Bbzf35csqB+JUproqn16JEEaiUL1poqgAHiCmo5/G2A=
Subject key identifier:   37:81:4E:4D:A1:F5:49:B0:F2:47:FA:BA:39:E4:D9:15:50:61:4E:97
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E459EF5842988204083F3A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8cd3b1c4-cef1-3ab1-9666-071b9b7b6bb5.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     21723
IP address blocks:        207.34.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:59:ef:58:42:98:82:04:08:3f:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=643f3686-3550-405b-a090-0439db5d2268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:07:05:49:f3:26:a7:b4:2b:a4:b3:69:40:
                    25:55:88:45:18:72:96:86:e2:02:30:49:98:18:e7:
                    b2:8e:f8:33:59:cb:2c:d4:3b:bf:7b:ab:db:47:3c:
                    40:15:f5:b8:42:25:bf:f5:90:3c:65:22:40:46:86:
                    9d:77:12:57:e2:05:94:e8:ec:67:5f:b1:b1:e6:d0:
                    14:55:58:ba:6d:c6:22:40:f2:31:09:4c:59:28:72:
                    6a:56:2e:ce:c2:92:2c:62:9d:d2:45:29:d1:da:86:
                    2f:75:cb:8e:cc:fc:86:27:da:b4:42:d3:bc:5c:08:
                    a6:af:67:f7:a1:50:16:eb:f3:36:6c:55:c6:2b:d0:
                    3a:82:f1:42:15:96:61:f9:46:d9:ca:53:25:e4:49:
                    53:b4:c9:82:cd:2e:5b:69:95:c2:13:d4:4e:28:b9:
                    97:4a:1c:6a:2b:a5:ca:1f:90:b8:92:c6:1a:34:6d:
                    b0:b0:67:f4:31:01:39:b7:44:af:20:85:62:79:ff:
                    e0:07:43:73:6d:a2:c9:70:e5:72:54:6b:9a:9b:2e:
                    44:17:70:dc:18:89:8f:f1:40:dd:8a:15:98:ef:bd:
                    d4:2e:02:d3:d6:ea:ae:01:f4:18:6f:2b:1c:36:1a:
                    2a:7c:26:13:93:6a:ed:a7:e9:c5:4c:a3:60:f1:99:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:81:4E:4D:A1:F5:49:B0:F2:47:FA:BA:39:E4:D9:15:50:61:4E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8cd3b1c4-cef1-3ab1-9666-071b9b7b6bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:56:15:fc:ac:12:fe:cd:48:19:c4:54:cb:84:d4:41:f0:54:
         c4:d5:78:b7:26:d6:99:ba:48:4a:ee:c9:52:f0:19:9e:65:f0:
         31:d0:fa:f7:ec:ec:a6:ba:81:10:f0:7c:53:cc:f1:6a:7c:01:
         1f:02:d1:08:b6:e4:45:c0:e9:04:3b:03:ab:c1:0b:df:97:2c:
         07:31:f7:db:5c:54:e6:3c:f0:47:b7:0f:65:1d:30:07:ea:04:
         4e:66:27:6c:cc:64:12:ff:4a:41:65:d5:26:52:e8:ff:51:10:
         3b:64:53:8d:d0:49:f9:87:e7:09:33:c2:2c:2d:83:60:f9:7a:
         77:7b:f7:61:48:46:28:13:c7:c2:4e:83:c6:7c:19:fe:a6:f4:
         0b:24:13:7b:3f:7a:a7:2b:f8:a3:01:02:85:a8:df:61:9b:bb:
         85:67:62:4f:a1:48:23:80:d3:56:43:b7:86:85:e1:35:45:3c:
         69:b4:b3:3f:89:07:f3:f4:2f:fd:a6:64:c2:9c:ac:07:60:e4:
         71:5c:49:0f:53:b9:af:48:e9:f7:78:ee:ec:24:20:64:63:54:
         c4:d8:30:d7:3d:4c:60:9a:84:5f:48:3f:8b:77:16:dc:54:17:
         3c:46:72:3c:6d:de:7d:72:6e:bd:42:59:9a:2c:a3:2f:c7:c2:
         37:f0:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:04 2023 by rpki-client on console-fra.rpki-client.org