Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e0afe08-5cfa-3542-a987-4890dfc0cbcf.roa
File:                     8e0afe08-5cfa-3542-a987-4890dfc0cbcf.roa (raw, json)
Hash identifier:          I4APu9MWhqvjI5wD1htfAfYw/oCzqFlkaCibbcOX+Ws=
Subject key identifier:   8D:CD:40:5E:BA:AC:4B:B1:1A:C7:54:9E:13:66:94:38:64:F7:CD:7B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BEFAA19186329094554A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e0afe08-5cfa-3542-a987-4890dfc0cbcf.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        107.167.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:fa:a1:91:86:32:90:94:55:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e4eafc2a-ef65-493c-99de-34993520b395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:03:98:f3:89:8c:d9:46:a6:1d:ff:90:a2:77:
                    e8:30:1b:5d:9c:0f:98:39:cc:65:20:b5:a9:66:dc:
                    28:30:72:82:90:97:cc:d2:b9:00:7a:d6:da:ae:3b:
                    0b:bc:9a:7c:6a:02:7a:78:79:cd:71:8a:ac:b1:ce:
                    61:e5:b6:c4:75:03:ec:22:47:1b:e1:e5:35:fb:8f:
                    f5:db:40:5e:97:21:62:44:16:2a:cc:fb:b2:9a:0b:
                    9a:2b:63:cd:0d:7f:1e:25:f0:40:07:8e:9d:8d:b5:
                    15:f0:a7:d0:44:ba:8e:e5:f3:2c:cb:c0:ab:c4:82:
                    d3:e8:d3:0c:09:db:50:55:49:8c:2d:45:30:10:ef:
                    87:f8:b9:2b:06:9e:ad:d0:97:bc:12:d5:38:1d:ac:
                    8e:8c:d6:26:ba:ed:dc:ff:b9:5b:1d:2d:f6:f5:03:
                    1f:9d:7c:68:8a:64:d8:1b:5e:e5:a5:93:b5:bd:92:
                    01:07:cf:13:b0:54:bf:98:60:16:19:a1:a3:e2:63:
                    26:f1:5c:86:a5:41:01:7e:d6:03:56:3e:a7:6e:48:
                    91:80:cb:21:99:66:46:5a:ec:78:f1:4f:47:53:6e:
                    cf:db:be:30:7b:27:d8:7d:80:03:1c:b2:d1:1e:6f:
                    b5:da:31:ab:89:4b:07:e0:1e:cd:fe:ef:12:6e:06:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CD:40:5E:BA:AC:4B:B1:1A:C7:54:9E:13:66:94:38:64:F7:CD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e0afe08-5cfa-3542-a987-4890dfc0cbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:5b:23:c5:ec:55:94:cf:fa:ff:2c:12:6f:3d:1b:cc:bd:
         31:69:d4:e0:65:eb:94:57:43:7f:fb:31:b1:47:ed:a7:fc:8e:
         91:3a:d7:41:7e:a6:79:6a:6b:a0:c1:9c:cf:76:12:5f:c8:dc:
         70:81:04:24:80:e7:c3:ed:12:d7:03:a8:c8:ea:1f:06:ee:e2:
         17:25:4c:38:34:fe:a7:c9:ea:ca:5e:55:61:6e:c3:d7:8c:34:
         bc:3f:f5:8d:de:d4:ed:06:9b:b8:fd:9d:55:7c:83:b5:2a:73:
         df:3f:17:6c:a1:0d:a1:d2:4c:14:d0:3e:12:83:2e:f1:fa:7a:
         56:76:02:65:8b:76:6b:74:41:46:f8:3a:df:80:85:a3:b5:65:
         bf:94:54:95:e0:c3:5d:ed:84:62:c8:7e:40:48:16:b4:9c:4a:
         da:ef:3e:95:d0:38:67:85:b4:73:f4:ef:3e:74:67:45:c7:30:
         81:b7:57:a9:ef:02:39:fd:0e:c4:ae:04:a4:8f:38:1f:c7:b9:
         8a:7d:49:86:54:1e:96:59:4b:d1:c9:24:b8:3d:7b:2c:36:9a:
         1e:d9:5f:19:cc:94:9d:66:fc:f0:2d:bc:0d:59:48:67:dd:f3:
         ca:0e:a5:cc:cc:d7:30:3d:ff:9c:5c:fc:11:dc:16:9c:55:b9:
         41:d4:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:44 2023 by rpki-client on console-fra.rpki-client.org