Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/479ca5c1-3d9c-355a-acd0-d9e24eabce02.roa
File:                     479ca5c1-3d9c-355a-acd0-d9e24eabce02.roa (raw, json)
Hash identifier:          II8Jy2gY/5B7qDvtibtDbtlbKsArmfSGxhZ/6IbouR4=
Subject key identifier:   7B:26:0E:65:8E:90:40:D4:67:51:34:92:B1:8C:B5:E3:18:C1:5C:83
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A8F38DC6AA6C5F46CD5600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/479ca5c1-3d9c-355a-acd0-d9e24eabce02.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.235.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:f3:8d:c6:aa:6c:5f:46:cd:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=41eb2b2c-5857-46a7-931a-334e80497f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:97:01:5f:17:41:01:23:6f:98:0e:a1:46:
                    c2:0f:23:81:1f:03:dd:29:78:18:a6:79:3d:ab:4e:
                    3b:82:26:63:ae:1a:e8:8d:ce:7c:2d:26:df:77:89:
                    56:a0:be:c7:85:15:0f:16:e3:b2:b4:c6:22:1f:8d:
                    39:8d:f4:71:e1:79:3f:7e:ba:98:2b:34:fd:f0:e6:
                    e8:42:5e:b8:c5:eb:4e:69:1f:2c:71:a5:8e:99:7b:
                    21:78:16:4d:39:ff:b7:30:33:e0:16:e5:ec:d4:86:
                    c3:95:0a:34:d9:8c:67:11:f0:49:27:7f:9a:01:fd:
                    58:63:ee:3e:45:71:b8:65:52:e3:65:35:de:96:f4:
                    07:18:7b:93:29:a2:2d:9c:f3:22:2e:8f:e7:f3:18:
                    3c:c6:90:bd:3b:93:b1:5b:2d:97:3e:6d:1b:9d:c5:
                    83:d2:d4:cd:11:a7:16:87:da:36:ae:f2:6d:d2:d2:
                    1f:21:f1:fc:0d:be:f2:9e:c5:14:98:6d:7a:01:31:
                    a7:1c:13:ae:bd:47:76:df:b2:bf:09:03:f2:ab:e9:
                    74:66:d1:61:0f:7c:89:29:20:80:0e:08:ad:fb:84:
                    69:f7:01:a3:34:e4:0c:94:cb:3d:ab:b2:b6:dc:d8:
                    e7:65:13:ea:60:c9:d4:62:07:7c:83:1f:72:cb:03:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:0E:65:8E:90:40:D4:67:51:34:92:B1:8C:B5:E3:18:C1:5C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/479ca5c1-3d9c-355a-acd0-d9e24eabce02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.235.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:7f:cb:9d:76:8c:d5:a2:54:74:26:37:64:2f:4d:94:4a:
         f9:39:cd:62:56:14:87:fb:a6:c7:ed:a3:7b:30:de:67:a4:dd:
         ca:d1:83:e4:21:db:71:92:81:38:2c:8f:9f:58:f7:31:59:ab:
         8a:6a:31:93:44:98:d8:09:71:7f:fe:0d:5a:6b:a2:9c:a0:52:
         65:a6:aa:01:32:9c:03:59:ee:79:22:96:b7:82:df:19:a5:93:
         ec:70:64:a0:22:30:40:b4:f8:a9:45:aa:4d:e0:a4:7d:b5:77:
         b3:b5:58:65:a1:7f:99:34:df:22:f7:6b:1d:e7:66:a1:6b:02:
         d2:05:98:8d:3a:1f:6f:50:15:b4:de:3c:ad:52:ae:d4:65:fe:
         03:0f:33:5d:71:77:00:26:61:02:f1:12:7d:50:d6:8b:29:c4:
         63:15:71:4f:fb:8b:c5:0f:30:89:9e:3b:23:c8:1a:32:21:c4:
         e4:14:08:55:a3:a1:6d:40:35:41:fa:48:5e:51:db:3c:89:b8:
         84:48:bd:d7:e3:81:94:61:a1:fe:98:5a:a6:83:e8:10:af:c2:
         1d:36:de:95:de:de:4c:3a:c7:d0:31:b1:40:a6:29:94:38:7b:
         6f:e8:06:cd:a8:34:87:55:9b:d7:1d:34:5d:bf:83:2c:90:64:
         40:92:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:41 2023 by rpki-client on console-fra.rpki-client.org