Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/942efcb4-d6be-3b46-a387-c319ee85106d.roa
File:                     942efcb4-d6be-3b46-a387-c319ee85106d.roa (raw, json)
Hash identifier:          wrQj25M4OjIrYkrStOpkeKnm8hMGFzM5DltRaahDt3c=
Subject key identifier:   BB:85:3A:D9:37:A8:12:19:A9:0D:BF:38:F4:06:24:4D:E9:63:05:A5
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7C41E8B19452B29B2053240
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/942efcb4-d6be-3b46-a387-c319ee85106d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.174.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c4:1e:8b:19:45:2b:29:b2:05:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=2e2b98a4-3f96-4176-9e1d-66212884f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:8f:87:a2:3c:02:5d:01:9d:6c:17:d6:55:
                    a9:bd:e3:2e:00:e1:e2:a7:c7:79:c9:ce:7d:ec:20:
                    2a:ba:34:a4:1e:db:a6:20:c0:a4:aa:27:5f:15:7d:
                    00:4b:21:23:b3:34:a1:0b:26:cf:a1:5d:04:32:2c:
                    3f:13:c2:14:1c:43:dc:47:e3:e2:ab:98:80:f0:d1:
                    bb:0e:1f:3d:d8:ae:6a:fb:22:fd:01:d8:6f:51:0e:
                    36:20:38:e5:12:e8:40:5f:c2:ba:5f:a0:85:1e:3b:
                    87:9a:b9:43:0b:57:de:8b:f7:4f:a4:4e:3a:00:08:
                    47:9b:5d:f6:6b:8b:78:e7:30:00:48:aa:54:22:74:
                    b0:fc:ec:33:75:a2:c1:4d:d3:4a:c2:49:e1:11:ac:
                    62:74:d8:5f:da:4b:af:3b:15:cc:67:06:3f:e5:49:
                    e2:86:f8:c2:e6:f3:d6:64:16:e1:d8:bf:02:a5:37:
                    2a:d5:23:3c:da:89:6d:e8:b5:be:f0:f5:21:b3:3c:
                    42:48:4d:32:8b:ad:c7:b4:66:5d:7c:48:7d:73:b2:
                    e3:09:d3:03:99:dd:83:c4:0a:a8:a4:10:8f:e1:ce:
                    67:18:e2:ff:87:97:43:f5:5d:8e:72:43:81:55:f9:
                    7f:93:df:19:f6:48:a6:e7:67:ae:b5:ef:f4:56:cb:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:3A:D9:37:A8:12:19:A9:0D:BF:38:F4:06:24:4D:E9:63:05:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/942efcb4-d6be-3b46-a387-c319ee85106d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:62:93:77:0f:d7:99:1c:52:52:5b:b6:8d:5e:9e:e4:ed:a2:
         fa:02:99:20:19:15:53:b8:69:71:03:b1:8a:29:5a:08:0b:c0:
         07:29:6e:7b:7e:93:5d:bf:30:07:40:fa:ab:66:72:b6:cc:43:
         f4:e1:28:ac:68:bd:85:ed:fb:46:d5:a3:a4:4d:ec:3d:1b:d2:
         93:a9:a3:fa:06:ae:cd:f8:e1:61:7b:05:1b:9a:cd:09:30:02:
         78:85:f4:f7:88:ca:9f:3b:0f:29:be:98:f6:b3:dd:b0:28:06:
         56:f0:12:f6:c9:25:86:ac:7e:58:1b:d8:89:04:b6:8d:1f:d8:
         53:6c:6d:e7:31:8b:80:f7:f4:91:1f:97:50:16:76:8d:99:3e:
         aa:fc:6f:df:15:53:6f:c9:69:23:d4:8a:c6:a4:ec:d6:be:6a:
         31:bc:60:08:78:d4:1e:0f:85:df:a2:ab:17:bd:85:8b:9e:a7:
         24:1e:80:9d:98:3e:35:de:60:2e:98:9a:d4:c4:e5:75:4a:64:
         9f:6e:56:b2:2f:83:b9:75:6d:72:fd:0c:bb:eb:77:7f:6f:3f:
         c3:03:83:fb:d6:3a:67:ba:fa:e5:3e:0e:74:b0:11:fa:75:c0:
         ce:9e:dc:78:51:61:e1:98:ee:61:24:58:cc:6d:11:2e:c4:04:
         4e:3a:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org