Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/61507803-32c0-313e-82b6-d87a8a34c2cb.roa
File:                     61507803-32c0-313e-82b6-d87a8a34c2cb.roa (raw, json)
Hash identifier:          02vO/ZC2fHLGUF8W+arycbgBR9bkpLVf8mWWgeIXr5M=
Subject key identifier:   CD:57:A4:1F:23:98:C3:C2:E1:5F:23:A0:BE:CC:95:44:BD:D4:CE:6E
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285838B3A6FA741095767310AA5380
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/61507803-32c0-313e-82b6-d87a8a34c2cb.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Thu 27 Apr 2023 04:00:00 +0000
asID:                     198949
IP address blocks:        169.196.220.0/22 maxlen: 22
                          169.196.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:b3:a6:fa:74:10:95:76:73:10:aa:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Apr 27 04:00:00 2023 GMT
        Subject: CN=5e6ef881-24e4-4fe1-842e-2392a4f0b597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:5f:63:9b:60:09:ba:87:e8:ce:f8:79:cc:
                    5c:a5:39:43:15:ac:34:e0:9f:7d:58:83:d5:56:bb:
                    08:c9:39:d8:b2:43:16:f8:dc:c4:91:bb:8e:ef:01:
                    04:e5:20:2b:83:43:f8:06:8c:8b:d3:d6:a3:b6:a8:
                    c4:88:59:99:1d:6f:aa:2a:ad:ba:3c:ef:c1:8d:19:
                    cc:32:5a:cf:38:0e:21:ad:30:a5:77:4e:36:09:70:
                    1d:36:ac:34:46:14:7d:a0:a2:86:4b:56:cf:0b:6e:
                    3f:8a:ac:e6:9d:25:1e:fa:6c:61:70:eb:cf:46:6f:
                    d0:43:09:c1:cf:01:ed:36:76:81:18:71:f3:50:96:
                    96:73:37:61:3c:06:3a:ec:17:f5:18:f5:5e:39:e7:
                    5f:bb:ad:22:6d:b4:6f:7d:b5:3a:d2:78:88:76:df:
                    97:14:1f:97:be:9a:a4:14:47:f4:d9:2b:60:8d:8a:
                    c2:2e:7e:21:1f:8b:94:7f:b9:e4:b0:61:75:4d:f3:
                    df:12:4e:a0:0b:0f:45:26:70:1b:17:b0:a5:7a:69:
                    b3:c3:fe:97:e4:14:e1:7a:54:69:47:e8:3f:19:55:
                    4b:2c:84:54:b7:dc:a1:66:35:85:a7:6a:f1:64:ce:
                    13:55:15:61:d5:36:c3:a5:d8:b0:05:61:42:41:76:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:57:A4:1F:23:98:C3:C2:E1:5F:23:A0:BE:CC:95:44:BD:D4:CE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/61507803-32c0-313e-82b6-d87a8a34c2cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.220.0/22
                  169.196.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:7e:8b:f2:29:65:60:bd:6b:b2:65:4f:31:8e:ea:4d:90:
         ad:de:83:c5:fc:78:23:cc:09:e3:ca:12:64:02:93:b9:e9:50:
         07:35:74:d3:1b:4c:ae:1b:fa:ab:30:62:7c:a9:45:73:79:b6:
         1e:3d:c8:c5:45:db:12:57:6d:76:89:1d:4b:c8:b1:1d:54:fa:
         b9:66:e1:53:ba:c5:c9:67:0e:ee:be:b0:78:81:18:b4:f9:90:
         ac:a6:4e:2c:a9:e6:c0:48:6e:16:1a:b3:0a:1e:07:8a:47:38:
         d3:e6:d1:4c:0c:aa:88:7d:ec:3a:24:1e:10:5a:07:90:f1:80:
         66:cd:17:25:54:1b:9d:d7:28:79:d7:16:f8:c9:96:6b:e6:2c:
         e7:84:ef:72:bf:7e:74:f5:43:bd:5a:30:ff:f2:51:18:d8:9f:
         10:a7:6a:27:60:e1:ec:00:eb:38:dd:0f:81:a1:8e:93:b4:c0:
         3d:78:89:c5:3b:c8:82:13:b7:f3:41:10:da:09:3e:63:44:7f:
         46:94:50:d0:4b:62:da:ed:ef:21:7e:82:29:74:9c:19:64:33:
         fd:61:74:de:ac:39:14:d2:b9:c0:57:05:e4:85:f6:aa:69:63:
         bd:27:f8:47:96:5f:e2:58:02:d8:06:df:1e:ef:2d:bf:d2:4a:
         a7:92:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:09 2023 by rpki-client on console-fra.rpki-client.org