Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ec9feecc-9342-33f2-8f56-ff9481e73109.roa
File:                     ec9feecc-9342-33f2-8f56-ff9481e73109.roa (raw, json)
Hash identifier:          ZTQG00jjj72ualI17c290P7uPPs3IC1zUpPjeHLWCBY=
Subject key identifier:   A7:76:3E:85:5F:9A:F4:F1:53:1B:46:17:37:E4:BB:CF:20:31:44:B0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285841E4473F6EEC5C78376298ED80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ec9feecc-9342-33f2-8f56-ff9481e73109.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 04 Jun 2023 12:32:57 +0000
asID:                     852
IP address blocks:        207.134.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:3f:6e:ec:5c:78:37:62:98:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  4 12:32:57 2023 GMT
        Subject: CN=f49dddf8-7d8e-42b7-8667-9039bc0ee2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:ac:dc:1d:96:b1:48:e8:58:c8:cb:2b:e6:
                    1d:dc:92:1c:db:2e:64:b7:4a:71:fe:d7:44:2b:9e:
                    02:a9:01:10:9f:9e:81:b0:8c:c3:ae:f0:81:af:ec:
                    e1:d4:17:d2:c4:d4:eb:f5:5c:a1:12:33:9f:87:38:
                    b5:30:a6:a4:76:fc:1f:41:ba:99:25:c6:b9:dc:d5:
                    fb:36:92:2c:3e:ea:f0:0f:6b:a8:fb:66:12:34:15:
                    e2:73:83:46:9e:61:3a:78:9c:f6:28:aa:c5:59:61:
                    23:79:d7:5b:fd:28:7e:98:35:40:d1:6e:32:31:2a:
                    c7:16:3a:e4:8f:58:71:93:b1:e1:d8:ee:24:57:ec:
                    35:ed:06:b2:e1:25:37:69:b0:fd:91:85:fe:e1:32:
                    e1:cb:4b:72:a3:41:aa:55:df:a6:3d:ad:ea:50:94:
                    6b:7f:e0:8a:9a:0f:7b:c9:d8:0b:90:0d:f4:3f:1f:
                    fa:95:92:99:c5:f0:8e:37:c1:a9:35:c3:d8:cd:c3:
                    c1:89:e0:b2:0a:1d:49:2f:d3:e6:c7:91:47:68:ec:
                    6e:d1:f4:9d:b3:d0:3a:13:37:ef:7c:77:5a:74:ec:
                    65:73:6c:63:fa:23:af:9e:45:05:08:f3:44:0d:e5:
                    0a:41:0f:7a:8e:80:52:ac:fc:50:75:99:5e:41:21:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:3E:85:5F:9A:F4:F1:53:1B:46:17:37:E4:BB:CF:20:31:44:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ec9feecc-9342-33f2-8f56-ff9481e73109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.134.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:46:f8:5e:c6:5a:d5:03:56:55:c6:0a:aa:a6:00:ed:7f:
         59:f1:85:05:f2:51:a3:e0:e7:6d:ff:dd:05:8d:e6:2a:db:fc:
         4d:ed:32:d5:40:b0:0e:86:3a:3d:6e:ab:58:6d:b9:60:30:70:
         ab:d5:db:c6:52:ec:b1:0b:98:e0:bd:9e:9a:f1:5a:78:a8:4d:
         7f:65:e0:ea:df:85:a9:1f:00:b6:82:0e:20:12:06:44:b8:f1:
         9c:4a:aa:2e:05:27:96:69:e1:2d:61:bd:e3:5f:42:a0:6e:7f:
         1e:73:fa:e4:54:92:0a:cd:6d:a9:1f:65:b3:62:f0:c8:7e:80:
         1f:05:27:2e:9c:d8:8b:6c:e7:f7:39:0c:4a:c6:83:82:40:46:
         6d:d4:43:3b:4b:d0:3b:c4:f5:02:d5:b2:ab:ec:e9:4b:9c:e9:
         d3:ae:56:8f:44:b8:a9:7c:ee:13:3b:20:0b:40:c5:dd:f2:52:
         75:1c:38:1d:ec:55:8a:3a:0d:0e:33:f0:af:49:f6:69:c3:34:
         89:a6:d6:43:d6:02:71:57:0c:f7:98:ef:66:de:41:ce:97:25:
         c9:78:fc:b2:41:44:2c:0d:a5:1b:88:c4:51:01:e9:4c:e0:d3:
         d0:d9:9f:7d:1f:af:56:a2:6a:61:2d:24:57:74:87:a9:5b:88:
         d6:7c:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:07 2023 by rpki-client on console-fra.rpki-client.org