Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e1c06dd-0a2d-3a79-8704-a5de46c0d398.roa
File:                     3e1c06dd-0a2d-3a79-8704-a5de46c0d398.roa (raw, json)
Hash identifier:          YOj7WpBUL0cj5cIF+XpXlZUp5HUlkce8l3m4sSraVkg=
Subject key identifier:   89:85:64:DF:6A:C4:FE:02:45:D1:6D:A9:76:66:39:CD:39:09:10:40
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A45A68A8AF1CFD6E883100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e1c06dd-0a2d-3a79-8704-a5de46c0d398.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        130.211.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a4:5a:68:a8:af:1c:fd:6e:88:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=aef88e5f-74d6-4ae4-aa2b-cba365135cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:94:ae:75:c8:03:c1:4a:13:8b:b3:ce:32:
                    b7:cf:93:7e:06:b3:a3:57:ed:92:28:7c:c3:ce:35:
                    e1:1a:f0:17:a3:8a:6a:a4:fd:cd:fc:8b:76:e6:d0:
                    08:78:44:c0:fb:31:be:7d:aa:bc:95:26:d2:3a:14:
                    56:35:67:c3:e5:ca:1b:98:66:da:72:e3:6c:c2:1f:
                    47:26:3d:b5:58:a1:a0:b9:13:ec:5e:d9:00:2d:ad:
                    b0:dc:f3:87:6b:2b:96:92:e8:52:d1:e0:33:a7:27:
                    44:ae:72:ef:f6:ab:35:80:01:0b:c8:d3:e0:3a:3c:
                    91:30:21:ac:9e:20:86:86:c9:11:df:d8:ec:87:a9:
                    a8:00:f3:6b:88:cc:3a:a3:4a:b0:39:25:bd:be:88:
                    34:9e:c5:0d:66:8a:a6:87:7d:3d:65:c3:1a:44:c8:
                    5d:ff:50:3b:77:bd:f5:be:c4:00:eb:1f:b8:c8:87:
                    64:d3:7c:b9:13:99:0b:59:d0:a7:0a:67:c6:79:46:
                    8a:0e:ad:9e:64:9b:06:8e:6c:e1:f4:cb:86:46:8e:
                    8c:a8:25:fd:91:9a:57:7b:05:ce:ea:39:ee:76:b1:
                    d5:5f:42:ec:46:f6:51:03:f5:2c:5a:d8:d5:fa:d9:
                    9b:87:ba:16:1e:22:1a:90:ef:09:a7:69:bb:d1:9b:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:85:64:DF:6A:C4:FE:02:45:D1:6D:A9:76:66:39:CD:39:09:10:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e1c06dd-0a2d-3a79-8704-a5de46c0d398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.211.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:a6:2e:5c:51:71:b0:be:9a:5a:b6:6a:ad:7c:c6:06:42:
         b4:c2:f3:58:4c:10:2f:61:68:6c:43:7d:1d:c4:ac:f7:24:57:
         02:82:29:9b:2e:71:02:41:c5:db:0a:19:1f:a6:3c:f7:70:26:
         71:e7:20:50:61:8e:a9:57:cd:e8:5a:c5:5e:f0:c5:1c:22:ab:
         4e:f0:dc:fb:4f:0c:fa:23:48:ee:30:14:55:f1:f2:44:6c:55:
         6b:ea:64:0a:6b:86:b0:ed:be:72:a4:d6:8a:31:55:a5:c9:4f:
         dc:56:db:23:51:44:64:b9:aa:f8:50:6d:11:fc:f5:68:44:3b:
         2a:20:7f:4a:aa:e8:93:f1:bf:e2:e3:41:3b:ed:64:bd:34:11:
         20:9a:3b:22:a7:a3:d1:7b:1e:f1:e4:b8:b8:97:6c:82:23:0f:
         ba:20:ab:7c:5b:27:07:4c:96:17:dc:dd:0b:70:3e:f1:46:fd:
         d9:22:91:fc:52:77:e5:7d:3f:0a:04:bc:e9:84:13:5f:6a:5f:
         54:7e:64:62:01:0a:14:4b:68:f9:b4:20:96:03:40:cf:6f:00:
         77:03:47:8f:85:6f:88:3b:b9:94:2e:a5:2c:af:20:93:be:a4:
         98:b0:96:87:98:00:9a:7a:54:83:f1:a4:4b:86:99:02:ed:94:
         3e:bd:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:41 2023 by rpki-client on console-fra.rpki-client.org