Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6ac0c03-75a3-30ff-9d6d-0d5b9bf540af.roa
File:                     c6ac0c03-75a3-30ff-9d6d-0d5b9bf540af.roa (raw, json)
Hash identifier:          6VrpEiTaF7lZva3nxN/lGuX+K42v1Ds2pBDsAkzTrUI=
Subject key identifier:   35:36:AE:F8:72:56:3B:24:4C:D7:47:E9:B4:CF:86:9A:CE:53:AB:3B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837EA56F7D56C157ED03FF9BBE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6ac0c03-75a3-30ff-9d6d-0d5b9bf540af.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        173.182.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ea:56:f7:d5:6c:15:7e:d0:3f:f9:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=d67630b2-1032-46bd-8bbe-57d10d7b0f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:a8:a4:50:84:fd:3d:d5:1f:9a:6c:18:ad:
                    cf:ca:31:22:ff:73:64:87:6c:da:25:2a:d2:2d:38:
                    03:36:8d:f4:17:9b:a4:3a:a7:41:98:18:7b:a3:1f:
                    8f:b2:35:53:28:51:8a:e9:7a:42:11:fc:20:0a:ed:
                    f5:20:12:11:79:68:5e:21:f1:09:cb:40:98:a5:82:
                    ea:59:0d:eb:10:d9:89:14:cb:4a:64:3d:85:58:59:
                    0d:9d:08:12:51:94:bb:ff:fb:4c:bf:01:8e:52:8a:
                    e7:33:dc:51:76:77:c0:98:8b:9e:3f:fb:ce:9b:9b:
                    45:b5:8e:22:ed:08:fe:aa:ef:cc:14:ef:43:d8:45:
                    4e:39:b0:e2:a9:ba:3e:af:54:f6:a0:0d:da:a4:6c:
                    78:f9:ac:2c:71:6a:43:03:28:e3:9f:be:53:d1:1d:
                    ab:52:d5:d1:ae:7f:e0:86:5d:35:bb:e1:a4:7c:a7:
                    e7:91:5e:60:fc:dc:53:5d:fd:59:6d:47:57:40:90:
                    49:81:bf:2e:f9:7c:33:d0:f3:96:15:5e:8c:95:8d:
                    e3:cf:02:30:bc:35:25:5b:28:bf:6a:92:0e:75:c6:
                    bc:82:bc:44:1f:23:94:bb:7a:71:72:87:d5:83:af:
                    be:b4:6f:86:2d:90:03:1d:23:cd:01:37:ab:ae:6c:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:AE:F8:72:56:3B:24:4C:D7:47:E9:B4:CF:86:9A:CE:53:AB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6ac0c03-75a3-30ff-9d6d-0d5b9bf540af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:13:80:d6:4b:99:cc:4a:2e:ce:40:a0:b4:70:b6:98:29:00:
         72:fe:f6:c1:7b:21:1d:66:c5:49:eb:e9:f2:a0:8f:15:21:b6:
         dd:7d:94:8b:a1:f6:6f:26:59:5b:42:eb:5d:f0:19:02:c2:b0:
         55:27:1d:a9:a3:c2:16:2f:af:73:7e:37:ee:79:7b:57:76:9b:
         a3:70:d3:1a:e9:47:c3:b5:f2:63:94:a9:44:3b:8a:1a:7d:c2:
         3d:d1:4b:fa:97:d6:05:c8:24:f2:76:87:76:eb:ba:b7:42:f5:
         ca:6d:79:61:a7:98:04:b4:88:d8:b8:da:d2:40:e2:ad:02:01:
         67:27:37:f2:65:cc:57:42:db:e3:67:c6:39:bb:98:1a:b3:ee:
         20:08:05:1d:29:d6:90:8e:99:cf:86:57:1e:16:d4:0d:4a:16:
         d1:d8:42:95:74:2c:1d:a2:76:61:98:df:7b:55:48:d2:79:40:
         43:9a:b7:39:94:58:54:6b:4f:f3:74:22:64:f1:25:49:3f:07:
         df:f1:78:04:3c:54:0b:5e:e4:f4:54:2b:67:e8:23:d8:44:25:
         ee:ce:a6:17:ce:0a:61:91:25:1d:f3:54:5f:c0:a0:e3:ee:fd:
         5b:33:4b:63:83:fb:5d:6a:be:cf:7f:1a:86:4a:37:15:1f:de:
         cc:f7:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:01 2023 by rpki-client on console-ams.rpki-client.org