Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d378b418-6b1b-3a45-af61-fc1157875c57.roa
File:                     d378b418-6b1b-3a45-af61-fc1157875c57.roa (raw, json)
Hash identifier:          6D7bJLfeJEErM9SRJ6YGZR3T8vBWFiODbxjJvTU9oOs=
Subject key identifier:   0E:71:DE:C3:D7:23:90:A1:C9:AF:37:AF:10:6E:9E:03:45:F5:FD:EF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A59813E787A53882FEA5CF
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d378b418-6b1b-3a45-af61-fc1157875c57.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:98:13:e7:87:a5:38:82:fe:a5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=773aef56-ed4a-4408-a3e1-427257906357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:ba:50:e6:57:30:b9:6a:05:92:7c:33:e6:
                    d9:5e:90:2a:d1:85:5f:a5:09:6f:07:f6:35:a9:e9:
                    a3:73:86:39:6a:a3:59:d4:22:fe:07:0f:95:d5:a5:
                    7c:e6:0a:0b:b4:7c:ea:e6:4b:9a:4b:fb:d1:44:3c:
                    b5:f5:ed:97:16:bb:25:34:8a:d2:40:3f:92:1b:bd:
                    d7:7c:be:49:59:aa:bd:89:e4:29:20:4d:75:0d:b6:
                    44:c5:49:b8:c5:45:9f:e5:a0:92:88:eb:f1:4c:56:
                    3b:f6:32:58:d3:25:d6:81:6c:9c:10:d7:31:75:1b:
                    f7:86:e9:d9:37:e0:f1:af:41:bc:b7:d1:cb:23:e6:
                    77:bf:6c:08:d3:25:74:31:78:51:68:52:77:22:4c:
                    cb:af:ea:1c:5d:27:1d:cd:f0:43:45:2f:1a:e1:39:
                    d0:eb:f5:39:9a:cf:07:ac:6c:c0:7a:37:8c:2a:78:
                    86:53:f1:7c:1e:0b:ec:01:c5:3d:54:03:cc:d0:c2:
                    40:4b:d1:97:47:64:2c:6d:51:38:b2:30:67:25:aa:
                    fa:30:66:ce:ed:bf:63:fe:dd:69:97:26:41:07:80:
                    ea:a2:c9:8a:22:ca:f3:4c:d9:4e:c9:21:24:60:3f:
                    df:97:e6:ca:44:6f:b9:c8:a9:8d:36:7d:7e:29:ec:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:DE:C3:D7:23:90:A1:C9:AF:37:AF:10:6E:9E:03:45:F5:FD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d378b418-6b1b-3a45-af61-fc1157875c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:8a:b0:e9:e1:74:e3:4b:82:b4:2a:26:f8:53:b1:6b:c3:
         11:c0:39:50:1d:f8:06:d8:f1:93:08:17:39:fd:12:48:5f:ff:
         39:61:f6:61:81:06:1b:a1:9f:30:b1:cc:a1:92:3e:ad:26:02:
         40:1f:7d:38:34:04:a8:4d:ab:bf:72:a4:46:f0:1a:e8:d0:01:
         6f:26:2f:04:f5:e3:0c:f4:b4:5a:22:f1:bf:40:72:53:25:ad:
         29:b6:19:ff:47:52:12:11:65:86:b6:75:68:b0:10:e0:77:48:
         2a:79:4e:2e:0f:b6:66:00:2c:f7:82:5f:04:e7:59:2f:4f:af:
         0d:04:8f:d3:25:ec:ad:e6:47:e3:70:98:ba:82:c8:57:b3:57:
         43:4b:db:df:f5:fc:77:f6:b9:3b:e7:92:f7:c4:c1:e2:e5:c2:
         20:e4:31:ca:4e:bc:32:e3:aa:8b:6f:49:e3:4a:fa:87:5c:63:
         53:9d:64:46:1d:44:05:42:7e:a5:6c:fc:63:09:34:be:22:58:
         71:f8:0a:22:36:82:f3:cd:ae:30:c9:e4:0e:c2:5f:c8:dd:ab:
         5f:36:5e:0a:7f:05:ea:b9:59:1e:99:c0:7f:75:2e:1a:f7:23:
         54:b1:67:52:c6:6c:71:2d:1b:3e:33:34:cc:9c:80:e4:46:80:
         21:19:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org