Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a7d6516c-bdbb-31a1-9b0e-f5279895f9bf.roa
File:                     a7d6516c-bdbb-31a1-9b0e-f5279895f9bf.roa (raw, json)
Hash identifier:          6P4AuKSKhQ9JC6YxrV/4oSWCHTqyPBK7v63XJylaA7k=
Subject key identifier:   9F:65:28:C3:31:6C:DD:1E:EE:DD:88:90:4F:FA:17:74:D7:6F:E1:EA
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842A03E65FF7060949ED2EDB570
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a7d6516c-bdbb-31a1-9b0e-f5279895f9bf.roa
Signing time:             Sat 22 Jul 2023 01:00:16 +0000
ROA not before:           Sat 22 Jul 2023 01:00:16 +0000
ROA not after:            Fri 20 Oct 2023 01:00:16 +0000
asID:                     205220
IP address blocks:        149.19.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a0:3e:65:ff:70:60:94:9e:d2:ed:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 22 01:00:16 2023 GMT
            Not After : Oct 20 01:00:16 2023 GMT
        Subject: CN=6d11a554-5fd1-47c9-9000-72aca9a4733e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7e:99:22:99:50:dd:3f:93:b1:7a:b8:22:b9:
                    ea:7d:80:ee:c6:54:60:ba:48:41:c5:1a:a8:04:1b:
                    1c:1e:ed:cb:ac:55:a3:52:6f:6f:3e:b7:de:0b:b2:
                    c3:84:fb:87:34:83:82:8e:94:9b:95:05:a2:7c:7b:
                    b1:c1:b5:be:46:20:b2:07:d7:19:4d:8d:49:44:56:
                    de:b1:2d:51:b7:f6:b9:64:de:02:da:ea:d0:48:9c:
                    e3:db:07:a3:fa:e3:20:60:e9:0d:a3:79:58:10:8b:
                    b4:b4:68:29:a0:50:52:8d:a6:3f:0b:ad:bf:75:8e:
                    d5:07:d9:90:f1:23:50:4b:7c:05:e5:ba:d2:a1:3f:
                    9e:d6:36:fe:7e:5d:fc:3e:55:32:44:51:38:3d:61:
                    bf:14:dd:c2:1a:24:34:d5:68:d1:37:af:3f:ae:f0:
                    40:10:d8:c1:2c:a6:59:3f:02:84:94:e4:e8:f0:b5:
                    b5:21:09:8a:67:b3:03:52:46:a6:f9:d0:58:57:52:
                    95:de:44:f6:ae:b6:69:36:e1:68:d7:60:5e:64:a3:
                    93:2d:2b:d6:2b:87:d2:7e:64:7c:4f:50:a7:37:0e:
                    fd:57:dc:0f:9f:75:08:21:47:11:42:13:37:70:b2:
                    5f:62:c6:ba:91:4d:e8:56:6a:84:50:11:fc:d9:8a:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:65:28:C3:31:6C:DD:1E:EE:DD:88:90:4F:FA:17:74:D7:6F:E1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a7d6516c-bdbb-31a1-9b0e-f5279895f9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:79:d3:09:31:f1:1b:7f:0a:af:71:70:34:46:ac:34:88:14:
         23:11:a2:2c:25:2b:1e:ca:96:58:7c:5f:a9:b0:5b:a0:82:d4:
         04:9c:1a:a9:43:17:d6:bc:4c:b3:ef:90:58:3c:3d:f2:37:38:
         90:c9:3c:bb:f5:b3:93:e1:4c:5d:0f:44:a1:97:ef:1e:ae:26:
         c3:65:c8:6e:2c:e6:82:34:7c:73:fd:c1:92:90:f4:b6:d1:18:
         7d:ce:72:c0:e1:e3:91:38:94:cc:43:d5:e5:05:79:d6:72:1e:
         47:d3:40:55:4e:02:d4:53:ba:b6:13:9b:27:b4:2b:03:c7:3b:
         90:ce:dc:1d:59:59:e8:17:13:75:c8:52:cd:c0:e6:71:dd:0f:
         9e:0a:08:e7:b4:75:a1:7d:eb:71:ab:94:4b:ef:ca:4b:c0:7f:
         8f:0b:77:f4:2a:cd:eb:b2:81:cd:af:83:f7:7b:a5:94:d8:03:
         60:d1:75:83:6c:08:b6:2f:99:c8:7b:15:37:b5:dd:d1:a8:0b:
         4d:ef:9d:73:1a:fc:3e:6b:74:62:59:d6:e6:39:60:24:51:10:
         5c:a8:28:4c:9e:e6:c8:a6:68:4c:54:4e:7c:fe:94:50:45:fc:
         d7:15:3c:8a:2d:8e:f3:dd:ed:27:0b:6b:f0:7c:fb:96:11:48:
         e9:e6:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:08 2024 by rpki-client on console-ams.rpki-client.org