Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/95944008-af91-3245-b4b3-009c29164ae8.roa
File:                     95944008-af91-3245-b4b3-009c29164ae8.roa (raw, json)
Hash identifier:          Pi9kbB/VAjz1a7nJ5iyZfUBevVYxwnKEMAqx1Ks3d3g=
Subject key identifier:   10:22:25:0D:DC:FC:AB:E3:AB:BC:F9:E1:BD:D0:4F:F9:8A:1A:20:FA
Certificate issuer:       /CN=9512e4e8-1b19-4250-996e-7d86c6963211
Certificate serial:       010D0C9F432858384F0AA6548E9D11E65BAE2C80
Authority key identifier: E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/95944008-af91-3245-b4b3-009c29164ae8.roa
Signing time:             Thu 17 Dec 2020 05:00:00 +0000
ROA not before:           Thu 17 Dec 2020 05:00:00 +0000
ROA not after:            Wed 22 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        198.204.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:0a:a6:54:8e:9d:11:e6:5b:ae:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9512e4e8-1b19-4250-996e-7d86c6963211
        Validity
            Not Before: Dec 17 05:00:00 2020 GMT
            Not After : Mar 22 04:00:00 2023 GMT
        Subject: CN=122e9495-509f-463e-84db-2547de37e946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:0a:c6:2e:21:33:58:19:e3:0f:3e:64:62:
                    ac:b2:91:ca:66:03:75:19:57:66:97:a1:3a:e8:1b:
                    05:39:92:52:83:d3:83:6e:e0:30:68:cc:5d:e3:e1:
                    59:0f:bf:ce:83:f5:30:9e:c8:58:33:c1:af:a4:44:
                    6f:52:69:8c:0f:46:67:7c:05:53:bb:07:a9:61:49:
                    3b:3b:2a:9c:01:03:72:9c:d6:38:41:20:9e:d2:88:
                    ba:1c:69:17:d7:e1:48:68:33:a0:3d:6b:ae:a4:55:
                    f7:47:6f:38:64:2a:d1:d6:81:da:7f:7b:8d:b1:8e:
                    48:98:a7:7a:98:e4:34:2c:9b:cb:1c:43:93:71:68:
                    4b:26:3d:2f:8c:56:08:55:ab:e7:42:a6:26:24:45:
                    fb:f3:18:14:c1:25:e8:0a:97:99:ae:21:83:4e:7a:
                    f0:50:b3:53:8a:83:d4:9b:d1:fa:8e:bb:de:cc:63:
                    aa:72:26:62:19:1e:cb:d6:04:bc:4a:96:18:54:ed:
                    24:f0:ec:a6:33:1e:81:4f:23:a3:0a:97:9c:6a:b8:
                    ca:17:ba:b8:f2:5a:12:25:26:88:82:a8:0f:12:99:
                    18:44:7b:d3:26:a7:fe:1c:71:3d:08:cd:f8:c0:a9:
                    4f:2a:33:ee:f6:99:9d:02:cd:f3:2f:0c:67:65:12:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:22:25:0D:DC:FC:AB:E3:AB:BC:F9:E1:BD:D0:4F:F9:8A:1A:20:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/95944008-af91-3245-b4b3-009c29164ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl

            X509v3 Authority Key Identifier:
                keyid:E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:ef:2b:be:f3:58:d6:7b:45:60:9d:07:dc:25:4b:a6:cc:
         3c:2d:62:55:47:c6:45:78:4d:b0:3e:5f:85:e8:e0:96:55:46:
         d1:8c:69:8e:25:37:10:d7:35:c6:a2:6e:d6:1b:81:91:01:d5:
         de:df:07:be:3f:3a:22:31:e7:cb:7a:db:dd:6c:0d:7b:5d:38:
         9d:99:06:89:97:e5:bc:71:30:a2:67:8f:5a:2a:c5:30:5e:c9:
         35:42:e7:2e:42:99:a9:72:4a:7d:c6:3e:97:20:ef:c7:7c:f4:
         d3:ef:0d:26:a3:9b:5e:9b:16:6b:7e:95:3c:54:bb:9d:ef:2d:
         f7:56:ec:3e:98:09:26:e8:b2:fd:e4:78:a9:bc:b8:e7:2d:3f:
         04:fc:e1:36:91:41:62:c0:dc:4e:44:e0:76:5c:92:d2:63:3e:
         e9:a3:c8:85:3d:d0:6c:9e:b7:96:fb:ae:9a:1a:82:56:93:46:
         70:a1:95:d0:c3:9d:81:3e:8f:69:e1:4e:60:ba:29:69:d1:27:
         b3:c1:99:a8:2c:22:48:3c:9f:88:b1:03:d8:c3:a2:b5:f1:ad:
         41:79:c5:e7:4f:ed:d2:ff:2c:b9:a5:88:de:6f:c5:ef:7b:0c:
         90:4c:28:17:8b:c6:69:09:17:9a:58:08:9a:fb:69:04:f8:f1:
         dc:68:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:14 2023 by rpki-client on console-ams.rpki-client.org