Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/217fbb08-33af-3c10-9a7b-727033e82254.roa
File:                     217fbb08-33af-3c10-9a7b-727033e82254.roa (raw, json)
Hash identifier:          UuLc3YhMLgf8h455yK3X2FkEMPUthZaz51r3eKpjTAc=
Subject key identifier:   D0:2D:0F:7B:13:9D:6F:FE:4D:84:16:24:A9:9C:A3:17:62:C1:BA:C1
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F43285837FB56D158F1792D720EE3DA00
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/217fbb08-33af-3c10-9a7b-727033e82254.roa
Signing time:             Tue 17 Nov 2020 05:00:00 +0000
ROA not before:           Tue 17 Nov 2020 05:00:00 +0000
ROA not after:            Mon 20 Feb 2023 05:00:00 +0000
asID:                     398877
IP address blocks:        136.175.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:fb:56:d1:58:f1:79:2d:72:0e:e3:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Nov 17 05:00:00 2020 GMT
            Not After : Feb 20 05:00:00 2023 GMT
        Subject: CN=c78322fc-1e86-4345-a40e-dd80aaf0dfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:f1:bd:3b:2c:40:d1:45:53:db:9e:76:fc:
                    a0:18:36:cc:a4:d8:ef:26:64:c4:93:a3:d4:5d:09:
                    91:e4:be:c7:d4:e8:42:86:7a:44:6b:12:2d:fc:6f:
                    9a:f7:6b:bc:70:d3:c5:0a:e7:e8:81:74:06:15:5a:
                    02:8b:1a:85:75:2e:60:78:77:ee:f8:a2:90:71:36:
                    00:04:0d:f1:a8:4b:e6:a2:24:02:63:05:28:7f:55:
                    63:87:ca:6f:04:a6:85:d2:08:80:f2:20:3b:10:e2:
                    db:81:89:1a:e1:90:86:fb:d0:d5:ae:b6:7d:05:c6:
                    fa:bd:60:2a:8e:45:7e:cc:51:ed:75:1d:c8:8a:78:
                    25:4c:39:82:ba:25:9c:2f:fd:cd:d2:92:57:fb:5f:
                    04:d9:cf:21:4f:fb:88:e0:4f:8a:ca:7d:88:ea:1c:
                    7e:8a:e8:16:aa:00:e1:9f:5a:e7:18:9b:66:b4:e4:
                    25:18:1b:ee:4e:01:e8:0c:af:75:ae:a2:f8:51:3c:
                    6c:9c:22:b4:db:9c:89:34:34:14:1e:83:55:b8:fa:
                    be:a6:b0:95:4d:f7:9f:9f:e4:7b:52:d4:bb:b3:bd:
                    21:be:23:17:9b:d4:b6:04:68:db:b2:66:6d:52:18:
                    00:ca:3e:dc:d4:7b:6c:ea:a1:ad:5d:96:84:4d:c0:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:0F:7B:13:9D:6F:FE:4D:84:16:24:A9:9C:A3:17:62:C1:BA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/217fbb08-33af-3c10-9a7b-727033e82254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:a6:8e:3d:db:1e:80:76:52:c6:17:c3:ef:4f:2e:1d:5c:
         d9:97:1d:34:28:f9:b2:43:4f:2d:a7:47:77:56:35:83:9e:93:
         e3:46:e1:f7:d9:cc:c2:5d:73:6f:32:94:15:3e:06:5b:95:11:
         e9:f9:e5:b0:56:08:ab:d4:2e:37:14:b2:ad:eb:cf:48:9d:e0:
         6f:2d:0e:89:ff:ef:a5:ca:6c:bf:c7:1c:9f:d7:e7:7a:f7:bd:
         f9:66:1f:d3:ec:78:65:47:e0:7c:23:53:45:a2:91:f3:42:98:
         93:05:74:fb:1e:02:45:67:02:b0:bc:a5:8f:a4:a6:51:f9:b5:
         a6:eb:4d:18:17:67:3d:36:88:6d:d7:22:19:5e:bf:c9:25:55:
         e9:5c:3f:b4:78:d0:3c:f1:8d:5a:56:ba:aa:6b:9e:38:23:5f:
         1e:5c:67:47:1f:8d:40:1b:50:62:9b:6b:8f:87:e5:df:3b:01:
         5f:21:91:67:68:95:04:02:79:81:a5:a3:39:f3:67:37:2d:0e:
         af:5f:a2:67:7d:8f:06:a6:9f:be:f0:ec:86:46:3b:3d:f8:02:
         de:64:42:21:5c:61:26:e0:98:97:99:d5:87:90:29:33:1c:18:
         58:70:64:8a:99:f6:bc:97:9e:61:61:5e:1a:75:57:09:2b:75:
         ae:7c:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:08 2023 by rpki-client on console-fra.rpki-client.org