Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d1b09d4-a47e-396d-a651-162795f2d3ba.roa
File:                     0d1b09d4-a47e-396d-a651-162795f2d3ba.roa (raw, json)
Hash identifier:          A43x4M8QzgtvbtUlVFv9xFPlt46NJrq1tu/cOreqPZI=
Subject key identifier:   8D:57:60:60:DC:89:8F:73:74:83:BB:4D:86:0A:BE:0B:ED:6D:B1:00
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A44D9CB7D9F35939E079C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d1b09d4-a47e-396d-a651-162795f2d3ba.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.86.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a4:4d:9c:b7:d9:f3:59:39:e0:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d94776b4-805e-4cec-85fb-ac7f60ea70d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:a4:68:49:41:98:ea:de:05:9c:9c:48:3e:
                    bf:1e:f0:f8:b1:3e:70:85:40:98:ed:7d:10:0a:23:
                    14:9c:16:fb:31:f1:33:4d:46:e4:0e:ef:31:30:54:
                    ce:f9:0b:41:f3:fd:d9:d3:1f:d7:b3:21:ad:ce:21:
                    2b:b8:be:e9:9f:85:37:a4:9a:0d:eb:de:7b:cc:88:
                    61:a6:f6:a4:de:13:f5:6a:40:1f:df:4b:76:07:a1:
                    c1:fc:4a:69:ea:e8:f2:d7:30:b1:c8:93:60:ca:16:
                    04:c3:91:ba:4f:11:59:f9:18:06:d7:4e:c1:78:aa:
                    37:a3:b2:2f:de:80:35:d8:82:f9:01:7d:b3:ee:d8:
                    67:25:3d:f2:eb:74:52:9c:8b:53:f4:d8:a6:56:31:
                    39:20:e4:dc:b5:5e:dc:ae:4b:04:19:b1:ae:e1:19:
                    2a:fd:6c:27:47:2b:6b:b3:a3:83:50:d2:5a:b2:c8:
                    65:bd:02:66:e8:00:63:5f:5d:98:99:40:40:0a:c8:
                    ad:7a:05:49:e1:7b:5b:69:78:04:71:cc:6d:c8:c5:
                    4e:04:cd:ad:04:d5:16:39:42:88:63:e0:ac:25:64:
                    1b:51:cd:d1:46:5a:38:a8:31:d1:e3:6a:66:a0:81:
                    68:9c:f5:c1:7a:ef:3a:ad:28:6a:50:26:f1:a2:3d:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:57:60:60:DC:89:8F:73:74:83:BB:4D:86:0A:BE:0B:ED:6D:B1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d1b09d4-a47e-396d-a651-162795f2d3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.86.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4f:1e:a1:fe:2a:55:bb:fb:9c:58:b4:47:e4:01:56:fc:36:
         18:22:95:83:7f:0e:15:7e:2f:1e:60:64:ae:4a:20:0d:90:bb:
         73:20:e8:aa:57:9a:99:ae:b0:59:2f:63:da:65:3e:e0:76:1b:
         be:dc:6e:51:12:f1:f0:df:23:57:eb:ec:8b:bd:5b:6b:c6:db:
         d4:5d:40:fc:6a:e6:0a:cd:7d:42:b5:ea:7a:7c:4c:da:68:2b:
         11:33:6c:9d:d0:4d:cf:4e:b4:19:bd:ee:e5:a0:03:92:49:78:
         7e:a4:8e:56:db:54:02:bf:9f:c3:b1:29:c6:da:75:cf:e8:ad:
         9c:0d:0c:5f:5a:20:04:0f:8f:d2:6e:18:7c:c3:75:27:3b:36:
         f6:fe:37:8f:29:fd:a2:fc:1a:8d:c1:a2:b5:03:9d:7c:0d:7e:
         4d:04:fe:91:7f:1d:b3:f2:47:af:ad:01:8f:d3:84:43:be:b3:
         d1:ef:6e:fb:02:2a:a5:67:a6:66:99:f1:5b:3f:0e:4e:2f:a8:
         ec:bd:3f:87:f8:85:78:cc:b1:a7:8b:30:ff:6f:f0:26:18:2b:
         77:3c:a2:1a:4f:be:e5:0d:2a:0f:0b:0b:0e:cb:61:53:5b:25:
         5b:8b:a8:b3:b5:7f:4f:7b:24:0a:4b:13:33:46:90:91:a2:23:
         d6:e4:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:40 2023 by rpki-client on console-fra.rpki-client.org