Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b06968-59bb-36e1-b0fa-7e3c8419f704.roa
File:                     d4b06968-59bb-36e1-b0fa-7e3c8419f704.roa (raw, json)
Hash identifier:          MBDzq+6ltup9EXuSVFUF0Fen6yxzrS2mW3Q69ySBRMk=
Subject key identifier:   52:3D:FA:2A:0D:11:0D:7F:27:1D:B5:AC:45:EA:C0:A5:60:D9:4A:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BE0E5FDE10B911D55B0C20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b06968-59bb-36e1-b0fa-7e3c8419f704.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.71.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:0e:5f:de:10:b9:11:d5:5b:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=001f9094-503b-4e05-b657-eaa7bb4dd21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:b4:d6:1f:7d:e7:60:cf:c5:2e:1f:1c:80:
                    7a:2a:51:01:01:df:99:ae:9c:18:cf:a3:f6:c3:ca:
                    5f:f3:42:52:32:ed:39:17:08:94:77:ef:5a:62:4d:
                    15:c2:f0:1e:a0:9a:e5:d3:60:97:7f:e7:ab:ac:c0:
                    a4:68:bd:85:59:bc:66:9a:1c:d9:66:af:e1:7b:28:
                    cd:8f:dd:51:13:3c:0d:b2:93:98:c2:d4:9d:6f:f4:
                    c7:2b:b5:83:f2:85:88:a3:2d:74:58:16:7e:70:94:
                    31:fe:5d:77:59:b4:56:31:20:ce:5f:82:98:64:2b:
                    f8:cd:09:1c:ec:e6:6e:2d:20:e1:2d:ba:3c:82:81:
                    e5:2f:21:44:21:fd:41:a6:05:f7:25:c8:69:b9:7a:
                    f1:fa:7a:d9:5d:75:f4:99:b7:d9:24:a8:41:5a:d3:
                    55:a9:a5:ec:67:d7:ab:fd:81:bc:8a:fb:8d:b6:4c:
                    e3:e9:78:a3:77:31:5e:a9:94:49:b3:7f:05:5f:64:
                    3e:b3:1b:a5:61:13:a4:50:58:59:70:12:69:ec:dc:
                    a4:79:f0:04:13:71:54:87:5f:1e:f8:db:25:d5:5e:
                    91:cf:3f:75:2f:be:c1:fc:8b:09:02:f6:fa:d6:83:
                    15:c8:b3:66:d1:9d:64:27:f9:2c:6d:b5:ae:27:fa:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3D:FA:2A:0D:11:0D:7F:27:1D:B5:AC:45:EA:C0:A5:60:D9:4A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b06968-59bb-36e1-b0fa-7e3c8419f704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.71.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:25:67:f8:09:9e:e6:b5:a4:34:19:a4:6d:7f:71:ca:33:b2:
         11:ff:dc:d0:1a:bb:4b:c4:e8:5f:a3:86:d9:e9:da:5d:6a:bf:
         af:66:37:0d:2a:da:27:a7:c7:2e:04:76:a2:e8:2e:33:56:a7:
         37:1e:f4:55:32:bd:f8:7a:90:dc:a8:fa:c4:54:a6:9d:b3:b2:
         e7:65:88:4a:e4:1a:f8:9e:76:3f:e7:8c:cf:d3:57:21:a3:80:
         79:cd:22:e4:61:cb:bf:3e:37:d3:75:a3:c1:1f:f3:22:4b:bd:
         70:a1:d0:60:a2:1e:b8:44:2e:52:17:80:29:5b:89:4b:86:5b:
         81:ff:37:77:27:2a:52:e6:86:b3:0d:05:7e:59:71:c9:e7:32:
         35:9c:16:14:66:e4:f4:bc:87:20:65:85:0e:1d:0f:a6:52:14:
         6b:08:fa:9c:da:10:e9:b3:a1:45:9e:e8:a3:fa:9c:84:e7:7f:
         23:f2:f8:c6:0a:bb:12:3d:4c:42:12:90:b3:33:8f:e6:f6:d1:
         7e:a0:4a:7c:d7:57:3a:9f:c0:ff:28:05:66:39:a0:54:68:54:
         a5:b8:a0:a2:a1:f5:7c:2a:01:9e:1d:5d:2b:9b:a4:ef:99:a2:
         1d:57:4e:4f:e3:fd:00:b0:20:c1:ed:47:c8:dc:8f:55:1c:6e:
         23:c9:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:22 2023 by rpki-client on console-ams.rpki-client.org