Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed9d3edc-a15b-386f-857e-5dcada7c8308.roa
File:                     ed9d3edc-a15b-386f-857e-5dcada7c8308.roa (raw, json)
Hash identifier:          DMuR8yTunjmso5uxXP/eIjxIrce8ZQzoa7iw9LVmdt8=
Subject key identifier:   E3:5D:8A:FF:7B:24:1F:AB:92:CD:C0:EB:48:01:A2:42:6F:F9:04:61
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B278E6D2047A27078C0180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed9d3edc-a15b-386f-857e-5dcada7c8308.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.221.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:78:e6:d2:04:7a:27:07:8c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=09481992-fe66-479f-9cf7-2b4dd777bd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:79:f3:1d:cb:66:66:7b:35:4c:32:ca:f7:
                    94:73:05:a2:30:c1:07:29:4e:92:6a:77:a4:f2:79:
                    ff:9f:71:1b:94:5b:96:45:3b:c9:9f:20:05:5c:b1:
                    2a:13:45:6e:19:47:a2:dc:34:c9:6c:a1:e5:0e:c8:
                    cb:cd:07:99:e4:13:ef:21:d0:ea:8d:a9:e6:17:e6:
                    34:15:1c:e1:7d:62:f0:92:65:40:49:f8:7c:00:03:
                    43:42:89:26:0d:80:7a:57:68:59:dd:d2:be:a3:83:
                    fd:fd:74:e5:2c:17:8b:75:45:49:3e:c7:c7:b2:ac:
                    57:32:cc:85:5f:25:7f:85:95:62:0f:1b:e5:9e:7b:
                    d2:f2:b4:23:cf:01:86:72:62:d8:58:56:4a:69:62:
                    94:e2:92:74:6e:19:15:4e:77:17:b8:18:78:08:36:
                    08:c0:16:0a:bf:93:6c:9a:01:e3:63:5a:db:f9:43:
                    af:a5:c5:c4:9b:86:12:63:60:2e:3f:89:82:be:a0:
                    ed:e6:84:4b:0d:9b:49:d9:68:57:9c:2c:9d:29:43:
                    a4:49:67:c4:34:3d:28:ae:57:dc:78:ec:d7:e3:c8:
                    93:ea:b1:a3:24:18:35:e3:5e:67:5c:b7:99:e7:bf:
                    62:5c:3b:3b:d3:4d:88:d7:f0:14:a5:34:b4:5e:54:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:8A:FF:7B:24:1F:AB:92:CD:C0:EB:48:01:A2:42:6F:F9:04:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed9d3edc-a15b-386f-857e-5dcada7c8308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:30:73:a2:95:3c:ae:82:f8:ee:4e:e3:cc:6c:59:1f:0e:a7:
         03:9a:b8:36:6d:e8:29:9d:65:e0:12:68:64:d6:3c:57:36:5a:
         a5:8d:58:63:23:b4:6d:ec:02:3f:5f:08:b6:c5:ba:af:aa:4c:
         3c:fb:b1:e5:df:a3:19:d4:47:6e:43:12:11:7b:75:fd:99:cd:
         4a:7e:a4:66:2c:3e:21:ae:36:33:10:c9:bc:c9:f1:e5:5c:c0:
         3d:8c:e9:f0:d4:01:34:3d:c7:00:bd:ab:49:02:0b:5c:61:4b:
         10:d8:04:ce:9e:de:b0:62:17:60:da:09:6a:29:0a:7f:0f:cb:
         5b:b5:06:8e:4d:02:27:a3:78:b2:ab:6a:18:bd:85:5c:a6:e2:
         5f:99:01:b5:17:04:2b:0b:87:3d:41:a2:ef:f1:d7:73:76:ee:
         e0:a1:1c:87:34:ab:a9:b2:e0:54:36:03:05:c9:89:4a:80:22:
         6d:4d:09:78:1e:1e:46:7a:f9:2c:60:02:2f:1c:4c:b5:6d:32:
         9a:53:82:f4:8a:da:4a:0f:73:74:bf:4a:e3:91:d4:47:d9:fd:
         0f:9e:5f:14:2f:13:ed:82:5d:20:d1:2e:0c:d6:f7:ab:7e:4b:
         4c:7a:1e:41:60:64:3f:53:21:d4:23:9f:65:6e:74:1b:3e:58:
         3d:ab:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:46 2023 by rpki-client on console-fra.rpki-client.org