Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9884c55-ef28-37ac-a062-ab9abf3958fb.roa
File:                     f9884c55-ef28-37ac-a062-ab9abf3958fb.roa (raw, json)
Hash identifier:          Ww9CQ0ZXF+0At7WdzWvLkTkgKG1Zwn/FIDnL3IVslRk=
Subject key identifier:   27:5E:43:81:96:40:45:E3:27:A8:D2:04:52:4D:B4:36:85:05:12:51
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BD7C02EC43E94C2138E8C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9884c55-ef28-37ac-a062-ab9abf3958fb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.95.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bd:7c:02:ec:43:e9:4c:21:38:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5a5160e6-b191-44bb-ac49-e409e5a7116a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:4a:3b:b1:14:f3:c6:d9:c3:93:03:8e:71:
                    ab:e7:3d:80:bb:36:20:07:76:d4:a9:b8:cb:f5:fd:
                    59:3c:29:8a:6b:d2:47:fd:84:83:dc:d8:7d:74:74:
                    86:b6:a1:31:b6:00:16:2c:eb:6c:e3:93:ac:1a:3d:
                    97:8b:13:ac:08:be:d3:7c:db:1b:96:7f:aa:95:d3:
                    af:80:72:e1:0e:cd:a2:9f:96:1a:d3:19:ba:f0:ff:
                    5d:a0:a9:1b:7a:49:24:86:ea:67:ef:e5:53:af:5b:
                    44:d2:d2:06:7a:32:28:8a:6e:4b:91:65:0d:a8:42:
                    68:d2:c9:1a:5a:54:1d:48:78:18:85:45:d5:f9:1e:
                    5f:8d:4e:c9:52:f9:55:19:d4:b6:1a:24:4b:27:83:
                    7d:e2:19:86:05:cb:1e:70:99:56:90:5a:1d:b1:c7:
                    61:65:88:4b:33:40:5d:72:bf:69:36:ca:59:cf:74:
                    f6:9f:7d:1b:f5:0c:4e:18:bc:ee:67:bf:68:06:1e:
                    0a:14:3b:bd:35:fe:bc:88:c9:83:73:20:74:a9:e7:
                    4f:51:1b:cd:d4:1c:83:09:75:fd:0f:ea:0f:a4:8c:
                    d4:2e:af:5f:ac:43:c2:f3:54:4f:c8:00:0a:ef:c5:
                    81:0e:37:0c:2f:1a:30:e9:01:1e:48:b0:59:a2:ad:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5E:43:81:96:40:45:E3:27:A8:D2:04:52:4D:B4:36:85:05:12:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9884c55-ef28-37ac-a062-ab9abf3958fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.95.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:21:af:21:ff:f4:ff:39:37:8b:aa:bf:84:78:3c:eb:73:
         eb:78:75:2f:b6:c1:fa:5e:ef:54:b2:e8:d0:16:3a:b2:69:3f:
         77:32:88:c9:6a:13:91:f2:6b:38:07:bc:03:7c:31:9c:11:78:
         e1:4a:43:39:3f:b9:32:1a:fa:ff:00:5c:f2:d4:b6:21:20:c6:
         31:c5:2b:1d:9f:d0:af:00:47:6a:e7:ab:d8:4a:ae:eb:c4:56:
         d2:8f:bb:03:e2:1b:26:b3:01:f3:c6:26:c6:73:6f:c5:c5:7b:
         dc:48:56:c1:4f:ab:8f:39:dd:96:8e:cb:b0:81:c1:33:bc:9c:
         e9:96:b5:ca:d2:05:e0:80:9f:94:30:13:e8:20:da:d5:ca:45:
         6e:6e:dc:14:c2:f5:fb:90:0f:b1:11:63:40:96:55:be:59:c4:
         fe:ff:2c:98:16:c9:1d:76:89:10:77:f8:99:a1:0c:7f:7c:e3:
         a5:24:ca:e0:c0:1d:4e:e2:94:0d:5f:1c:ff:7c:eb:35:6b:ba:
         9e:f9:f7:4a:d2:20:a6:b0:d4:c5:39:2b:33:77:1f:f9:d9:22:
         fd:b3:24:5e:65:5e:c4:b3:9e:08:10:20:a6:ae:61:d3:95:3f:
         c8:61:dc:9a:af:5e:46:b8:d5:1e:b7:bb:1d:ee:f3:69:e4:4d:
         26:34:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org