Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2642718-9d1b-35d8-915b-e5e59c198b66.roa
File:                     a2642718-9d1b-35d8-915b-e5e59c198b66.roa (raw, json)
Hash identifier:          3maGqwnLMvS3ngsNwwHZ+26Z08z9ud1rZpQJyhYcT2Q=
Subject key identifier:   10:AC:5D:E6:AC:61:07:09:CE:9C:24:BC:D7:41:6A:1F:D9:AE:A1:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839B8D1E13238582B5AF0AA7680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2642718-9d1b-35d8-915b-e5e59c198b66.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.138.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:d1:e1:32:38:58:2b:5a:f0:aa:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=be66da8d-15ef-4355-9164-4a7a70c80b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:c2:3a:47:d5:04:b2:d4:43:3e:29:d2:b3:
                    6c:fa:5d:50:72:52:c9:12:f9:2c:ab:ea:24:76:67:
                    bb:47:97:93:29:fc:66:15:ae:73:cb:0e:e7:a4:97:
                    3f:ca:28:f8:db:70:23:80:d7:f6:e0:c9:a9:21:1e:
                    8c:ab:76:d2:61:1c:bb:5b:be:cd:b2:51:1b:9c:c6:
                    bf:fd:d4:b4:cf:30:08:b1:89:bb:60:25:cc:bc:03:
                    29:e0:ad:a7:7c:81:91:08:8a:93:5b:42:c0:9a:ea:
                    af:11:38:59:a9:4b:5d:53:00:ca:ce:df:a5:08:33:
                    79:08:6f:f8:b9:b9:80:04:21:a1:1e:16:36:f1:23:
                    fc:01:42:ab:f1:87:b5:67:89:f4:42:a3:2a:3c:af:
                    23:bb:14:72:15:fa:95:76:d6:3e:a7:1f:40:9c:9a:
                    a3:12:ac:98:31:6e:e4:08:ab:c3:f0:7f:ad:3a:e6:
                    8e:a5:e5:42:83:a5:59:41:36:04:a8:86:ed:fd:2e:
                    3a:b0:66:18:38:e0:8f:2d:e2:25:7d:c6:90:1d:63:
                    76:de:f7:d7:a5:54:e5:ea:2e:49:9a:61:de:42:1f:
                    3c:5d:54:35:c7:10:9d:9e:4a:b1:c9:c1:65:89:a1:
                    8f:25:e3:15:21:8d:e3:81:cb:d4:ae:ee:60:a1:83:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:5D:E6:AC:61:07:09:CE:9C:24:BC:D7:41:6A:1F:D9:AE:A1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2642718-9d1b-35d8-915b-e5e59c198b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:41:c9:95:4a:f8:08:66:58:7f:e9:59:3c:7f:31:b7:2a:84:
         06:31:e9:3f:1b:d6:35:e5:69:96:1c:c2:d3:3f:24:e3:42:a5:
         42:aa:52:01:18:30:14:5d:43:8d:19:c2:83:50:7b:00:19:30:
         93:c4:6a:91:de:8d:66:ba:ea:0f:7a:46:05:ec:86:64:9a:47:
         3d:da:7f:70:70:91:86:ba:75:28:b9:db:14:03:bc:af:d9:15:
         16:2e:ea:6d:8b:ff:12:2c:02:53:d2:c5:18:cc:81:86:5f:36:
         f0:7f:a7:1a:e0:53:4a:36:d7:8c:c3:f6:24:fc:ab:49:ff:52:
         31:28:4a:26:19:b7:96:44:1d:ac:df:0c:75:0d:51:1f:ee:20:
         49:2a:5a:fa:7b:0d:ec:2d:6a:e5:53:b2:f1:f2:10:54:82:db:
         84:f2:c1:35:1a:80:cb:b3:3f:de:30:7a:80:c0:a2:29:c9:47:
         ff:f3:fb:3a:11:6d:a6:e0:11:cb:47:cd:db:64:36:b7:ab:81:
         be:98:93:dd:b8:da:0b:33:18:e7:94:a4:94:e4:47:07:24:78:
         b8:bb:e9:2e:83:5c:3e:1a:d2:f6:ba:5d:c6:38:6c:93:f0:a5:
         58:1f:ad:be:d9:fb:ed:0c:27:54:4c:f4:e0:6b:33:62:78:78:
         e5:e4:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 29 04:12:14 2023 by rpki-client on console-ams.rpki-client.org