Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/9a6f7a72-93e2-38d7-a7e6-f2940d0f504f.roa
File:                     9a6f7a72-93e2-38d7-a7e6-f2940d0f504f.roa (raw, json)
Hash identifier:          qMphV2EW+V8ZoHPF877FJ2ekX3pVQOwPJfgt+1h1TAE=
Subject key identifier:   BB:BA:01:0F:32:9D:3C:B3:B0:21:8F:5C:F5:7A:C3:C0:BA:87:CD:76
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328576D51CC73C042CFC172712264F5
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/9a6f7a72-93e2-38d7-a7e6-f2940d0f504f.roa
Signing time:             Mon 01 Jun 2020 18:26:19 +0000
ROA not before:           Fri 15 May 2020 04:00:00 +0000
ROA not after:            Sun 04 Sep 2022 04:00:00 +0000
asID:                     398143
IP address blocks:        208.103.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:71:22:64:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: May 15 04:00:00 2020 GMT
            Not After : Sep  4 04:00:00 2022 GMT
        Subject: CN=a9bf358c-dcfc-4233-8c2f-924dc09f981d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:df:21:a2:c2:7b:f3:89:96:7e:2c:51:cc:
                    51:90:df:46:7c:d4:a5:ff:29:89:d4:da:8f:5b:97:
                    e2:35:12:28:ec:6d:e3:c7:16:c0:49:44:2c:55:d7:
                    3f:80:34:d4:e3:a7:1a:4e:86:9e:bb:39:02:b6:39:
                    1d:78:65:dc:4f:a3:6d:33:02:73:64:16:7f:7f:b6:
                    f5:1c:f0:d7:c4:f6:96:35:ab:f9:64:1a:95:c3:43:
                    64:08:80:fa:0b:db:72:0d:8d:fe:31:82:83:4d:1d:
                    30:44:52:44:44:8a:d6:6e:c6:ef:87:ae:96:3c:41:
                    bc:b5:86:14:76:b2:85:c1:46:d5:b6:43:79:3a:05:
                    b0:42:7c:ca:f2:b6:48:ac:85:1d:76:5a:f4:6f:49:
                    52:db:32:d5:79:bc:29:d4:81:5c:a7:83:a3:de:60:
                    2d:52:18:1b:77:9d:54:96:4a:aa:7e:c3:68:b8:1a:
                    96:72:45:47:ed:4d:52:53:a0:e3:de:d0:7d:b5:ac:
                    32:49:81:5d:c5:93:3d:56:85:3c:ca:00:b5:1c:75:
                    e6:28:af:99:b5:bd:1a:b4:94:b0:17:60:4a:f1:93:
                    55:00:ab:1b:2e:f2:be:9d:1a:0c:99:91:71:49:c3:
                    86:e2:36:bf:18:10:e9:7b:0f:2c:2e:a2:08:cb:06:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BA:01:0F:32:9D:3C:B3:B0:21:8F:5C:F5:7A:C3:C0:BA:87:CD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/9a6f7a72-93e2-38d7-a7e6-f2940d0f504f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:65:d0:89:2b:9b:ec:12:1c:e1:9a:ab:e6:cd:88:fd:34:
         c4:44:09:27:7e:d3:ec:6e:a3:7b:07:eb:3b:30:60:70:e9:dd:
         ee:ad:b4:92:86:0a:eb:e8:e7:71:b5:ad:26:27:c8:bb:89:69:
         cb:01:82:38:ac:6c:e2:ae:d2:ae:27:9e:98:da:df:80:78:4b:
         9c:fe:b1:a6:ca:21:1d:b8:66:0b:c6:9d:5c:e7:ea:01:85:ec:
         38:b8:78:dc:e4:22:3b:8f:74:5e:5d:27:10:79:14:ee:64:f6:
         50:0e:69:55:91:9f:78:b7:90:97:55:6a:62:c2:7a:3d:15:f7:
         58:40:ef:f9:2d:30:ee:2d:d6:42:38:24:46:5a:52:fd:bc:fc:
         35:cb:11:8b:d3:f0:26:78:31:17:1e:8f:8c:38:11:07:73:6f:
         f0:99:99:81:a8:21:a0:31:fd:fe:69:53:43:20:72:29:86:93:
         25:5f:f8:49:53:16:84:ee:5f:0e:a7:49:ee:09:41:16:18:f7:
         27:34:f4:8c:f6:fd:17:9a:aa:b2:72:f3:d4:fc:16:da:d7:29:
         0a:1f:c9:23:7f:93:6f:35:79:68:89:57:43:48:5d:72:2e:70:
         89:e3:9f:bd:bd:bb:93:31:31:26:5c:78:53:b4:dd:4d:27:7c:
         d7:9c:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-ams.rpki-client.org