Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca562e03-2459-393a-b0ba-f8ceb1ba9810.roa
File:                     ca562e03-2459-393a-b0ba-f8ceb1ba9810.roa (raw, json)
Hash identifier:          iQCm5D8zYRXWnj5/pLbAAr+6HO9q14ydD+DHeninC4Q=
Subject key identifier:   89:EC:BC:EB:B7:20:D5:44:86:BA:5E:44:79:94:D7:59:72:7F:DA:EB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7C01DE1A0A1D2953E124E00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca562e03-2459-393a-b0ba-f8ceb1ba9810.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:1d:e1:a0:a1:d2:95:3e:12:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5f752b8d-293d-48fc-9561-ddc6f8b45584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:d3:2f:0d:63:8e:14:51:f2:91:a9:fc:48:
                    c1:6e:15:9f:93:e5:3b:e2:7b:63:ec:35:71:60:05:
                    1a:68:28:f7:3d:46:7e:bc:92:a5:42:71:a0:9a:b8:
                    71:fd:8c:00:c2:e0:15:bf:67:e5:b7:33:f0:94:54:
                    f9:63:99:55:be:c8:d4:db:92:a0:10:0e:2c:55:d7:
                    c9:6f:4c:c8:38:3b:78:a1:28:dc:c9:93:94:37:d4:
                    11:48:22:48:90:fc:9a:23:c8:99:1a:04:bd:87:08:
                    64:76:7d:c5:90:51:78:17:5a:cc:77:e6:9e:89:46:
                    fd:f0:f0:1d:6a:96:43:11:8f:f8:d8:21:5b:ba:08:
                    6f:ad:f5:aa:f9:00:70:9d:0f:28:36:c3:16:8f:b3:
                    4b:ca:77:36:0e:c3:86:14:9b:d6:a4:43:0f:60:98:
                    37:26:aa:f5:3f:02:f0:33:4f:09:39:95:34:30:30:
                    ae:47:e5:51:b6:03:e1:24:e6:3c:e7:39:5a:48:88:
                    7e:19:70:ff:63:64:b6:fe:00:30:22:ac:d9:f2:42:
                    4a:88:3a:43:66:7c:ec:eb:10:d4:00:7e:b8:d4:18:
                    36:5f:bc:d9:69:9b:2f:3d:9a:54:b9:f3:3c:be:c7:
                    78:c4:3b:be:0d:76:ab:8d:60:37:ee:a4:74:3a:3e:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EC:BC:EB:B7:20:D5:44:86:BA:5E:44:79:94:D7:59:72:7F:DA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ca562e03-2459-393a-b0ba-f8ceb1ba9810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:53:16:06:46:be:db:82:b3:45:31:0a:8e:22:cc:5d:27:
         86:a2:87:27:f5:0f:33:1b:d7:5d:09:a9:90:45:0c:60:9a:9b:
         3d:a8:be:ed:be:6b:45:bf:eb:f2:f7:de:a2:8f:99:e7:87:20:
         9b:42:dd:10:a6:af:24:b5:db:ed:13:38:26:fc:19:a1:44:01:
         5f:59:86:4a:e7:18:26:1b:92:63:44:b2:7c:3a:02:3a:fc:1d:
         3a:48:de:6d:2c:f0:c8:28:e3:02:d6:63:91:4c:43:e8:4f:98:
         80:77:1a:2f:d3:1d:92:72:8a:65:89:5d:d6:1f:0e:f7:41:ef:
         6b:38:44:d4:e5:80:e3:71:56:77:38:2c:8a:90:d8:3e:35:37:
         04:03:5a:d7:2f:ad:82:b0:3e:31:1b:da:70:0c:27:c9:95:b7:
         95:b3:4d:0a:75:11:78:3d:a5:af:1e:da:13:3b:89:4d:1e:21:
         5c:2a:06:e4:25:8c:a3:1b:62:3b:7d:88:93:8a:ca:38:9d:89:
         94:57:d5:53:cb:b3:13:35:07:f2:89:35:63:7f:01:81:eb:3f:
         46:f9:4e:48:7c:10:2f:92:93:8d:f6:cf:cc:e8:e9:98:ef:e4:
         0f:54:d4:f1:2b:6a:aa:f4:76:05:72:01:42:ee:93:f5:14:26:
         6c:2e:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org