Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0bd6faaa-6c3a-3954-a957-f52ba1b477b1.roa
File:                     0bd6faaa-6c3a-3954-a957-f52ba1b477b1.roa (raw, json)
Hash identifier:          y0cmGDcF9cggdW2CCcbIip1W7XQNVRS0eOt5ZAzQXpI=
Subject key identifier:   FE:F6:62:C1:86:D6:D4:E9:A5:97:DB:7E:61:87:3C:59:AE:EC:51:62
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1740DBDE193
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0bd6faaa-6c3a-3954-a957-f52ba1b477b1.roa
Signing time:             Mon 10 Aug 2020 04:00:00 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     55286
IP address blocks:        172.245.188.0/24 maxlen: 24
                          172.245.200.0/21 maxlen: 24
                          172.245.198.0/24 maxlen: 24
                          172.245.192.0/24 maxlen: 24
                          172.245.175.0/24 maxlen: 24
                          172.245.172.0/24 maxlen: 24
                          172.245.166.0/24 maxlen: 24
                          172.245.165.0/24 maxlen: 24
                          172.245.164.0/24 maxlen: 24
                          172.245.160.0/24 maxlen: 24
                          172.245.48.0/23 maxlen: 24
                          172.245.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:0d:bd:e1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=fcb8c257-c7bd-4f3b-94d3-b53918855a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f5:24:07:d8:02:2b:98:6b:22:2d:c1:9a:89:
                    5d:f5:4f:55:e5:43:ca:1e:7b:cb:3e:3c:5e:de:f2:
                    51:c3:1c:93:db:9f:b8:29:de:31:5c:8e:99:54:7f:
                    0f:6e:2b:64:c9:12:3e:0e:06:19:bd:f6:e5:cd:3a:
                    bb:59:14:eb:a8:72:4a:07:3f:c8:20:e4:5e:56:91:
                    ad:53:43:48:b5:10:12:37:f5:a9:9e:95:9b:f8:79:
                    af:b2:4d:4c:58:fa:32:b6:ef:ef:30:62:5d:89:94:
                    ba:ee:40:8c:b3:fe:11:5d:13:41:4a:4c:2b:95:2e:
                    48:e2:61:ce:cb:f7:a4:97:6a:cd:a8:33:31:9d:ae:
                    d7:eb:5d:97:30:b0:db:80:05:20:f8:8d:6c:74:18:
                    96:81:37:c6:1d:05:15:15:8f:85:8c:a8:9c:81:eb:
                    0e:c9:87:b4:58:8b:db:f2:b6:08:1e:d9:1c:11:30:
                    91:90:e2:41:b9:9b:8b:67:fc:85:7a:f7:11:33:06:
                    70:66:28:b6:87:cd:01:bb:51:60:42:54:81:02:af:
                    d8:af:4b:c5:8b:28:06:62:4d:31:e9:64:8a:e7:f4:
                    b4:c9:ee:68:5a:ea:03:1a:56:2b:15:1f:66:f5:f8:
                    82:5f:fe:1e:ed:8f:5b:9c:79:4e:67:e3:31:a5:fb:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F6:62:C1:86:D6:D4:E9:A5:97:DB:7E:61:87:3C:59:AE:EC:51:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0bd6faaa-6c3a-3954-a957-f52ba1b477b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.0.0/22
                  172.245.48.0/23
                  172.245.160.0/24
                  172.245.164.0-172.245.166.255
                  172.245.172.0/24
                  172.245.175.0/24
                  172.245.188.0/24
                  172.245.192.0/24
                  172.245.198.0/24
                  172.245.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:5e:33:8a:48:00:f5:a7:b0:5b:37:cc:04:25:89:cb:60:
         83:c9:4e:c0:6f:33:a0:65:73:42:df:a4:d6:6c:3f:5d:4a:c7:
         85:5f:90:17:41:91:6d:ed:1c:d2:b7:7e:08:8b:0a:08:06:56:
         68:cd:60:fe:1c:19:ad:59:f1:c8:68:81:72:06:54:7b:95:4c:
         08:2a:a7:5d:09:16:42:e9:b4:f8:12:f9:f0:7c:93:89:f1:dc:
         92:72:1b:5e:29:d6:96:92:e4:79:f3:e6:a4:15:bd:6c:51:88:
         ff:1b:7b:f1:8d:57:3b:e0:d0:db:4f:5d:fd:6d:2b:cb:dc:b5:
         55:20:97:3b:86:07:db:2f:df:1b:e6:6c:84:0f:4c:e7:42:ad:
         15:a3:18:a2:df:17:e4:fe:21:7b:7a:e3:9d:c8:ff:36:ed:65:
         9c:40:0b:d8:dc:b9:49:5a:52:4e:11:9e:5d:8a:a9:5c:20:61:
         b6:2a:fe:b2:e1:45:96:e8:6a:3f:2a:86:2b:90:59:61:77:cb:
         88:1c:b7:10:61:c0:7b:22:0b:b0:19:ec:2e:38:fc:98:e9:35:
         8d:5a:ca:37:2b:e6:12:ab:a4:d5:d3:d4:d8:71:2e:89:f8:80:
         5d:b7:bf:8b:58:19:ab:01:6c:36:ac:96:cb:55:e5:02:8f:c7:
         45:43:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:17 2023 by rpki-client on console-ams.rpki-client.org