Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/fdc6f5e5-5e71-3a37-8876-61b329e4656e.roa
File:                     fdc6f5e5-5e71-3a37-8876-61b329e4656e.roa (raw, json)
Hash identifier:          73JMf9XpqK6Ktbn/QOWIrNvwbmh+o0S+u20Yr0RLfdo=
Subject key identifier:   1F:09:87:18:EF:0A:15:A0:D5:23:E4:42:BB:86:EA:2C:38:44:65:A0
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285837A58BEE9A62672DF9A8585A00
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/fdc6f5e5-5e71-3a37-8876-61b329e4656e.roa
Signing time:             Fri 16 Oct 2020 04:00:00 +0000
ROA not before:           Fri 16 Oct 2020 04:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     398391
IP address blocks:        131.226.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:a5:8b:ee:9a:62:67:2d:f9:a8:58:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Oct 16 04:00:00 2020 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=0420bc27-5288-4b2f-a98d-c75f131bf386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:6c:6c:43:00:79:c8:6b:4a:73:3f:b4:c6:
                    6a:27:16:b3:9a:01:15:f6:48:18:93:04:35:43:73:
                    3b:4c:d9:de:b0:53:fb:e0:d0:1d:5a:a1:d0:0a:2d:
                    24:04:35:69:90:2c:59:61:b9:a3:a7:a7:ca:54:af:
                    0d:ec:74:92:59:9e:f2:20:56:1e:35:d2:a5:37:ef:
                    66:ec:da:81:fb:f3:22:f0:c3:b2:94:98:e1:4d:59:
                    6c:51:20:b2:47:04:d7:c3:54:69:42:3a:cc:ec:22:
                    af:5e:1b:9d:49:bf:d4:92:73:ef:cc:ab:bf:50:43:
                    92:a4:0f:68:18:2a:a5:b4:5d:b9:e0:e9:40:1a:6f:
                    69:1f:ff:a7:3e:9e:01:c7:a1:b9:74:f1:a6:60:0c:
                    e4:0e:45:36:f1:d6:e8:36:99:0e:ac:37:5f:71:6a:
                    9a:a2:27:f3:70:e0:2c:cd:0f:1d:dd:80:67:09:da:
                    64:5b:89:01:6a:87:24:76:7c:4c:5c:42:9f:ad:b5:
                    70:60:cd:3b:c5:2c:36:cc:ac:0d:1e:8e:95:f5:78:
                    50:e8:cc:dc:ce:ef:14:df:d5:18:59:09:5b:a5:c3:
                    2b:42:ec:e5:42:af:9a:0d:47:6f:ec:43:0d:87:e1:
                    6e:ab:56:83:9b:0e:89:2f:d2:e4:88:a6:98:86:22:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:09:87:18:EF:0A:15:A0:D5:23:E4:42:BB:86:EA:2C:38:44:65:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/fdc6f5e5-5e71-3a37-8876-61b329e4656e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0b:ed:bb:88:05:df:de:45:7e:2f:16:de:eb:af:af:6d:ee:
         9f:be:a0:cb:b6:05:c6:be:52:64:81:93:f2:e7:8b:dd:db:9d:
         94:4f:c2:4b:27:c8:5d:45:78:bb:bb:25:22:7c:02:13:35:e1:
         46:96:0a:ee:6b:ff:a8:9d:19:17:10:cf:62:1d:21:1e:3e:6e:
         63:00:54:c5:99:9f:1a:30:81:fe:23:d1:62:f8:ee:55:c7:cb:
         d6:3a:c8:01:2c:f3:b9:d0:f3:74:04:72:d6:79:d8:3d:fa:3a:
         dc:75:ab:8c:e8:bf:02:0a:8c:b0:46:b4:89:d7:b4:6a:f2:ef:
         e2:02:f2:9b:d9:47:ba:bd:d9:58:11:54:fd:69:ea:06:10:d3:
         75:dc:6a:8a:66:6b:9b:43:00:30:fb:22:70:11:1a:2d:b0:30:
         01:72:84:b0:5f:ae:2d:0f:7b:a2:1b:41:b5:3a:78:4e:9d:75:
         f9:36:81:b5:16:84:43:01:0b:9f:db:62:cc:44:f2:12:4b:08:
         b6:37:4c:f2:d9:41:0d:2a:42:f5:1b:7b:02:e3:7f:1f:26:5e:
         9f:a7:eb:b9:db:ff:3e:84:41:a2:1b:35:b6:32:a6:f6:b8:20:
         a4:81:a3:9c:11:dd:e9:13:af:08:75:86:a7:66:a1:b3:77:13:
         7b:cd:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:14 2023 by rpki-client on console-fra.rpki-client.org