Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fc0ab153-97a7-3c96-8708-0ebaa17ef2a5.roa
File:                     fc0ab153-97a7-3c96-8708-0ebaa17ef2a5.roa (raw, json)
Hash identifier:          B3pikguaZDQgN+3cnJsAbPAiRJpXlGMkUUUN4JQq0g0=
Subject key identifier:   79:04:F5:F0:67:9C:1A:0A:F5:9A:44:C1:9A:35:47:71:CF:7D:D1:6C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7C1294F0256328906073680
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fc0ab153-97a7-3c96-8708-0ebaa17ef2a5.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.168.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c1:29:4f:02:56:32:89:06:07:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d8a3cff2-8755-4d9f-aa24-2d4487bc15b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:84:f1:4b:bf:c6:19:71:60:e4:b0:6d:c1:
                    aa:6f:31:81:c2:20:d7:ea:33:33:0d:f8:f6:46:13:
                    eb:f7:df:bc:45:8d:a5:ca:40:47:5a:ab:cb:13:d9:
                    dd:e0:49:40:86:c2:19:84:2e:20:b7:ec:f6:ac:53:
                    31:1c:21:df:1d:0f:20:b2:f1:11:21:30:f2:12:3e:
                    66:66:94:52:d5:bc:72:da:48:35:c8:4f:05:1d:5e:
                    c2:5b:ad:b7:d0:74:0c:8c:29:20:be:46:d3:ba:80:
                    53:a2:c7:20:bc:78:99:3d:45:23:d8:55:23:7e:fa:
                    b5:9c:01:d2:f9:e6:f5:70:31:42:2e:72:39:81:e6:
                    8c:32:88:26:86:37:44:af:a6:b0:13:1c:0f:22:ea:
                    e5:e0:61:85:dd:a4:69:93:83:76:01:e1:e6:bb:bd:
                    c8:ac:84:fc:1e:35:d9:2b:12:cd:5b:5c:f1:9b:e9:
                    5d:f4:b2:b1:da:76:99:73:25:34:8b:3e:45:76:e6:
                    2d:7f:8a:8a:a5:a2:d6:99:c7:cc:d8:6a:db:0b:9b:
                    97:60:59:9e:57:e3:45:26:cd:c3:92:1b:aa:a0:37:
                    1c:ab:e5:3d:b0:6f:df:8d:37:98:31:db:c9:ec:d7:
                    71:ef:3f:fc:e5:fc:77:8d:44:53:38:26:ac:d6:5d:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:F5:F0:67:9C:1A:0A:F5:9A:44:C1:9A:35:47:71:CF:7D:D1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fc0ab153-97a7-3c96-8708-0ebaa17ef2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:a4:6d:26:cc:db:ba:51:ca:8d:0c:b0:e1:86:e6:2c:c4:54:
         b6:b5:9c:00:99:2c:46:82:2a:23:13:80:a0:52:4b:74:03:4f:
         ec:d3:dc:35:8b:74:e8:2e:51:88:85:c4:bf:13:5a:fd:f5:55:
         9b:56:88:73:c3:6f:6b:42:a4:5f:45:fc:4b:7e:f5:0a:5c:13:
         73:3c:22:4d:72:03:22:2e:8b:d9:4a:9b:33:6f:d5:89:a9:4a:
         cb:82:43:1e:8f:2f:11:3f:da:78:f8:33:11:8d:75:26:ef:0f:
         71:f1:17:57:8c:57:67:d9:18:0a:b2:08:fa:04:34:06:e0:d0:
         95:bf:e2:61:99:d3:84:a7:e6:f8:bb:95:04:58:f2:fd:72:2f:
         ab:3b:4b:5f:ce:d5:95:9c:8c:5a:b2:f4:aa:7e:13:36:52:51:
         61:c7:ce:5d:33:cd:87:aa:da:75:01:fb:07:91:c7:65:43:f7:
         03:90:07:67:0d:8e:66:13:b6:6f:ed:9a:1c:e2:da:ec:13:01:
         6f:58:54:f3:89:b8:ea:06:dd:ad:88:02:a3:26:56:79:5d:0c:
         a5:88:cc:01:68:a1:89:36:54:ea:f0:a7:79:2a:89:de:ef:dc:
         f2:5f:c9:40:6c:51:ec:f4:a5:78:4f:5e:29:06:3b:37:3a:8d:
         12:ad:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org