Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/3f588a1c-f471-3cfe-b37c-0b2bad71f5e0.roa
File:                     3f588a1c-f471-3cfe-b37c-0b2bad71f5e0.roa (raw, json)
Hash identifier:          ikDqZNAE+f1F8QnIDZI17OqbyUjsoN8gvlUK+e1stQ8=
Subject key identifier:   BA:19:F6:F7:6C:DE:40:77:5A:9A:55:68:C6:8F:B2:EF:0B:40:A0:81
Certificate issuer:       /CN=59723481-42fd-4957-8eb9-3b266c71eec3
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732EA9F9EA
Authority key identifier: B9:AA:B5:CD:67:A7:46:3B:7E:AC:36:43:C2:D4:C3:35:47:08:E7:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/3f588a1c-f471-3cfe-b37c-0b2bad71f5e0.roa
Signing time:             Wed 08 Jul 2020 13:42:38 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     14155
IP address blocks:        63.245.150.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2e:a9:f9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59723481-42fd-4957-8eb9-3b266c71eec3
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=6f570007-306c-44d3-aab9-6c23e56b0bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:c2:42:50:8b:60:a7:aa:c3:5c:0e:65:ca:
                    28:93:9a:43:87:31:84:ae:b4:4e:aa:48:ec:5c:21:
                    31:c7:b5:2f:e4:22:b9:f0:af:d8:a5:03:43:bf:30:
                    b5:d3:83:d5:f7:6a:de:b4:ca:da:67:5a:57:c3:e7:
                    34:19:73:54:5d:e9:36:8d:e2:8b:df:dd:bc:12:57:
                    f1:b3:fb:a5:33:8f:46:f0:fd:85:2e:13:fb:78:d5:
                    17:2b:f8:51:27:2f:37:79:a6:55:77:cf:e3:d7:57:
                    b3:b6:e2:d3:74:80:81:92:5a:a6:a2:93:f2:47:13:
                    a0:c4:ea:f9:3d:13:af:fe:fa:8e:c4:4c:d8:ac:fc:
                    de:f4:21:58:bb:f2:ae:7c:e4:cc:0d:a4:ee:e5:10:
                    ab:b0:2d:47:c7:05:aa:5a:82:91:ec:40:ea:cb:f9:
                    d0:9c:35:79:ee:ae:f4:c2:ea:f6:e8:3e:27:6f:21:
                    e2:c5:a6:81:72:be:2c:2f:14:09:8c:6e:5b:60:a8:
                    ef:cf:a4:1e:b2:9c:d9:8a:4f:45:b0:5c:2f:a1:fd:
                    f2:dc:28:cc:1b:a0:a7:c7:8d:93:a2:a4:d1:83:0b:
                    5d:79:27:76:c3:62:90:68:d7:df:bb:82:58:2c:71:
                    fa:63:18:89:ba:bd:d4:4e:c9:e8:a0:08:b7:e6:7a:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:F6:F7:6C:DE:40:77:5A:9A:55:68:C6:8F:B2:EF:0B:40:A0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/3f588a1c-f471-3cfe-b37c-0b2bad71f5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:AA:B5:CD:67:A7:46:3B:7E:AC:36:43:C2:D4:C3:35:47:08:E7:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:33:10:13:6c:a2:b5:3e:cc:73:60:3c:59:55:cf:ee:0e:
         c7:4b:95:ca:e8:42:df:8b:05:c1:ac:1a:7c:7f:56:55:e7:f5:
         89:c3:90:0d:64:fc:ca:8b:54:8c:d1:7c:1b:0e:be:e8:04:fe:
         ac:b6:33:c5:59:61:c0:49:ab:4b:05:01:6a:13:9f:84:42:3e:
         b4:ae:69:82:45:78:fd:ad:f8:df:0c:6a:db:c1:5f:b0:78:b4:
         99:4a:91:f4:86:1c:7a:02:5d:b6:ae:1d:d7:8c:af:db:ac:bd:
         79:b5:98:ae:8b:fa:ef:9b:a9:82:54:0a:7c:a4:28:83:ab:2f:
         71:5d:85:7b:96:1d:b4:5c:7a:e9:6b:41:35:e5:85:bd:f8:cf:
         de:72:57:da:17:e4:14:75:e9:30:3f:ce:33:26:c4:ef:dc:e0:
         dc:2a:95:0e:fd:f9:71:fa:55:5a:83:4c:12:fb:d5:95:89:c6:
         f9:ef:bd:1e:42:5f:48:3a:16:22:05:7c:30:ba:0e:a3:1b:83:
         e7:e0:c4:b1:4c:49:12:d1:d5:8e:8d:5b:d7:62:84:53:e5:67:
         0f:14:90:b0:f8:6e:8e:58:49:09:00:e4:63:40:8d:eb:f8:e2:
         b0:68:d1:f2:13:82:92:65:ba:02:c0:64:f6:fa:33:71:28:37:
         fc:39:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:13 2023 by rpki-client on console-fra.rpki-client.org