Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07bf623a-56b0-31ea-b701-304d234a4335.roa
File:                     07bf623a-56b0-31ea-b701-304d234a4335.roa (raw, json)
Hash identifier:          5K89jBB8TV6dN9fXUc5u9Xe8sSL2FTI1cl+bYFDwzcU=
Subject key identifier:   D0:7F:52:A2:41:5B:CA:AF:DB:0E:CB:AA:32:68:AF:0F:E6:4B:29:84
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B06243D81A554A3E85F8C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07bf623a-56b0-31ea-b701-304d234a4335.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.192.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b0:62:43:d8:1a:55:4a:3e:85:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a86cfab4-1a66-4269-98bd-2a56e5652ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:58:77:f9:1a:01:34:2f:1f:70:4b:dc:62:
                    a2:98:69:49:89:e5:7f:e4:43:8a:9a:ac:3e:b3:4f:
                    8c:58:d3:af:48:3a:b0:1b:3d:79:33:3c:7d:67:8d:
                    48:7b:3a:a1:dd:ed:36:fa:af:6f:bb:4f:3a:ac:e3:
                    16:13:2c:a6:76:4e:4e:75:d8:57:42:f9:91:65:18:
                    7c:d2:03:ce:22:24:ad:dd:ac:ee:dd:b3:5e:16:f7:
                    d6:cf:41:b3:88:95:ef:97:0e:cc:bc:20:8d:cb:22:
                    2e:ab:a1:2c:56:7f:91:6d:b9:23:46:03:73:7f:72:
                    12:fd:1d:ac:6d:64:1c:08:7c:d9:9b:63:3f:ac:55:
                    dd:08:2e:c9:0e:8a:73:59:d9:0a:41:47:78:d7:2f:
                    d3:91:00:fd:24:56:42:2a:d5:be:79:ce:57:8c:ff:
                    28:53:ef:4f:3f:b4:45:54:20:13:bc:70:7f:7c:03:
                    a4:f6:30:54:b5:f9:6b:50:34:0a:27:06:79:17:14:
                    7f:3a:ac:85:7a:b8:49:fe:8e:e9:2e:3e:30:5c:5d:
                    50:63:92:3d:7d:56:92:27:b7:3b:eb:c3:ca:2f:61:
                    55:88:39:19:07:10:1d:c8:5c:ad:b1:df:3a:15:24:
                    89:5f:9a:7d:36:55:46:fe:8b:24:56:5c:3f:97:b8:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:52:A2:41:5B:CA:AF:DB:0E:CB:AA:32:68:AF:0F:E6:4B:29:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07bf623a-56b0-31ea-b701-304d234a4335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.192.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:89:09:aa:3a:42:30:23:c6:93:01:ac:36:e9:27:08:5d:57:
         92:01:80:c6:e1:ff:f4:c6:32:d6:6c:ce:cf:63:97:ab:f7:00:
         c8:ff:63:19:a9:ab:64:ef:77:3e:86:47:37:e6:9d:84:67:00:
         f5:d4:bd:40:73:8f:73:32:1c:32:df:3d:b2:ce:30:8a:ce:83:
         b5:31:20:f4:0c:46:5a:c0:e3:d0:aa:e3:4f:ec:5c:7e:12:4e:
         0a:44:8d:67:db:42:b4:31:f7:11:5f:59:66:17:47:db:28:43:
         fa:38:fb:4d:6f:65:47:85:85:1b:3c:7a:35:cd:14:3d:9b:8b:
         3a:69:cd:07:14:93:eb:19:f3:4e:6d:0b:26:d0:62:ac:63:c8:
         26:b0:f0:55:27:19:b4:8e:3f:78:cb:5a:98:21:3e:6d:3e:a9:
         ff:b3:1e:b9:4f:f8:9a:7a:81:cb:66:71:39:43:dd:55:da:6f:
         15:69:52:38:1a:d0:f0:57:74:55:ba:ea:7e:1d:ff:61:d8:45:
         1f:b2:7c:43:36:14:e5:2c:bf:61:1d:8e:47:68:9d:49:86:b8:
         11:88:02:94:42:63:cd:bf:79:3c:5d:ab:52:c4:5b:6f:18:34:
         22:2a:42:9c:95:50:29:63:d5:78:b1:a3:12:6e:f7:04:90:ab:
         71:3c:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:40 2023 by rpki-client on console-fra.rpki-client.org