Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d0962e6-3d38-3215-8cb0-4fe670784f8f.roa
File:                     8d0962e6-3d38-3215-8cb0-4fe670784f8f.roa (raw, json)
Hash identifier:          yWyk9URpGiYiFQgkVHQxQWooJfWa27XFpaAvVWiEahU=
Subject key identifier:   C8:DC:1B:13:C7:22:1A:3D:DD:BE:F4:58:17:CC:ED:EF:82:72:0B:C8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C543AF3BC5630698AAB600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d0962e6-3d38-3215-8cb0-4fe670784f8f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.232.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:43:af:3b:c5:63:06:98:aa:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=8baa5178-ebac-4306-8481-8086e09e6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:d1:44:c2:ee:cc:56:75:3c:99:03:e9:18:
                    d6:99:eb:f3:10:df:18:e3:b9:6f:08:c6:97:60:20:
                    16:06:0e:79:98:21:e1:0e:a9:f3:53:e4:25:b5:01:
                    fd:2f:77:76:a6:03:2b:e3:a2:30:ac:4f:de:1f:9a:
                    67:36:67:6c:4e:89:e1:53:5d:18:4c:0d:ff:64:39:
                    04:97:73:9d:1b:3d:34:b8:a3:a6:4c:01:b5:f6:b4:
                    66:8a:ae:c9:0f:4d:f2:8e:73:4d:5e:80:52:6b:73:
                    bb:2d:56:26:32:5c:15:bf:6f:2b:8f:a4:e5:15:68:
                    94:28:4e:e3:43:12:1d:a2:33:1f:f8:30:99:82:4f:
                    fb:87:15:89:c8:ba:77:bd:5c:1f:06:ad:28:b7:70:
                    df:dc:0a:ac:2b:2d:68:50:43:d1:9d:09:38:c3:b6:
                    68:bb:1c:5c:0a:1c:fa:29:47:dd:3f:08:13:7d:6a:
                    0c:27:04:84:ef:4b:29:b3:6e:fa:15:82:ac:0d:02:
                    f0:2e:74:93:02:0e:b3:b9:28:ee:34:7f:72:b5:33:
                    5a:f6:b3:36:d2:77:2b:4a:c7:bf:02:ba:95:4d:a8:
                    63:df:f8:8e:90:d6:5b:9b:88:ad:47:82:f3:12:30:
                    4f:19:0c:3b:5a:15:4e:f8:16:f3:f8:0c:69:2d:a9:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:1B:13:C7:22:1A:3D:DD:BE:F4:58:17:CC:ED:EF:82:72:0B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d0962e6-3d38-3215-8cb0-4fe670784f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4d:9b:92:18:67:46:1e:58:10:26:c2:1d:78:dc:e8:d3:b8:
         c0:f7:f7:00:4f:68:e7:68:3d:90:15:ef:ef:d7:00:6f:c3:c6:
         a9:80:96:69:9d:8c:6e:cd:9e:bb:82:55:f2:9b:88:01:2f:43:
         55:74:19:d0:e6:90:6d:50:99:93:d8:b7:61:e8:d7:6e:fc:a3:
         9b:fa:18:be:a2:45:f9:ad:ff:5c:01:ca:1e:37:1e:4f:10:9f:
         f4:0c:81:89:67:22:88:72:0c:db:97:e5:59:88:7e:bf:7c:df:
         a0:a0:fc:bc:73:17:91:72:9c:b1:f7:aa:fe:8c:19:66:1e:ea:
         de:96:cc:bd:be:41:ab:94:7f:59:db:36:01:7a:ca:a5:fe:96:
         31:fd:6b:33:91:1e:68:af:ce:04:c6:97:b5:a1:86:14:57:92:
         f2:ab:8f:20:86:3d:db:27:e1:4f:a5:fd:e2:03:6d:d0:16:68:
         17:96:e0:85:27:01:54:bb:9e:29:97:8a:38:5d:74:53:77:76:
         bc:18:98:3d:bc:c3:92:35:95:71:e9:26:2d:c9:27:28:f4:71:
         23:4d:5a:53:73:86:3a:81:70:d2:48:79:d2:53:2e:4d:c3:74:
         aa:a2:29:d8:ba:d0:53:8a:a3:77:d3:fd:9e:8e:57:db:3f:12:
         33:8c:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:20 2023 by rpki-client on console-ams.rpki-client.org