Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d016ea7e-e684-3d26-add9-87f4c17631de.roa
File:                     d016ea7e-e684-3d26-add9-87f4c17631de.roa (raw, json)
Hash identifier:          Ocw2BCG51iS0VH+oJq+z2D3HlnW9W+ajy2Gu5wZBMfo=
Subject key identifier:   DB:5B:17:4D:87:49:89:C6:1A:5B:12:70:F3:20:20:0F:54:12:AC:9C
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328576D51CC73C042CFC173A540648A
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d016ea7e-e684-3d26-add9-87f4c17631de.roa
Signing time:             Fri 31 Jul 2020 14:22:07 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        168.238.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:a5:40:64:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=e2d65f03-0a83-4a18-8c63-d4a925d191de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:66:c9:7a:c0:e5:a2:be:c8:11:0d:34:18:
                    7c:09:24:01:3b:f9:f6:42:f2:e0:6f:33:ac:77:7a:
                    1b:94:f0:39:dc:df:48:2e:dd:22:37:ec:06:ec:f4:
                    78:e3:6a:cb:60:1a:33:5c:ea:40:39:02:b5:fa:73:
                    96:ee:63:60:cc:a4:56:07:c4:97:8d:2a:05:99:ce:
                    ba:ac:c8:db:46:df:a0:0c:e4:10:cf:a3:1b:f8:4e:
                    11:23:54:27:d0:95:58:b0:e4:b1:56:16:d8:c3:94:
                    27:6f:70:cc:ed:d2:53:44:94:e8:e8:15:17:36:c1:
                    0f:c2:17:4f:89:30:3c:3c:a3:ad:d5:70:c9:1c:d2:
                    5e:ba:3f:c3:97:6a:0c:c2:b1:54:52:c2:d6:07:d5:
                    54:61:d2:fa:a1:96:ce:81:c5:20:b0:d8:51:5a:8d:
                    bf:16:c1:f6:b5:b0:02:fe:9f:8c:0c:b9:e7:e1:dc:
                    ec:42:6a:38:96:2e:b2:20:71:79:f0:f9:ff:86:e9:
                    ab:59:3c:fc:1f:b7:40:98:44:f6:fc:1a:29:5c:07:
                    86:aa:9d:8e:db:06:66:26:67:48:3f:b6:71:00:8d:
                    0b:2d:c7:dd:43:7a:70:eb:8e:ef:fa:d7:24:72:6b:
                    1c:3d:da:20:a1:e8:ee:43:62:45:67:9e:d2:c8:d0:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:17:4D:87:49:89:C6:1A:5B:12:70:F3:20:20:0F:54:12:AC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d016ea7e-e684-3d26-add9-87f4c17631de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:9e:9a:47:21:4b:ef:ba:05:14:e1:ab:3b:50:b5:08:06:
         b1:d7:a5:30:1b:b9:b1:6e:d2:fd:51:5b:88:1c:8c:86:f0:31:
         6a:4d:75:21:d8:73:8a:c6:b7:14:07:d6:1f:9c:ee:13:63:d8:
         2d:fe:b2:df:86:88:c8:0c:e6:c3:8e:fd:07:31:4a:34:b9:d1:
         a0:6e:0b:7d:7d:ee:a6:f1:45:67:b2:51:7c:11:18:ab:19:6f:
         ca:5c:7b:c6:d5:34:7d:92:a3:03:1b:be:e1:be:ce:b8:e8:bb:
         50:2e:85:c1:fb:07:09:02:f4:52:01:eb:9d:e2:c9:c2:b2:28:
         cf:83:c5:59:eb:b3:8f:26:4e:c5:7f:82:fa:7c:95:03:c4:b7:
         3f:68:fb:c2:4e:21:43:6a:30:c0:d9:15:87:75:3c:ec:bd:c6:
         e9:24:5a:e5:1f:48:00:cb:ed:14:66:50:7d:75:cd:ab:40:94:
         5d:ed:18:91:c7:29:f1:8e:8f:47:1c:27:46:0d:27:bb:ea:fd:
         33:7e:6d:be:04:50:18:99:f3:e8:cb:6b:52:64:1a:31:d3:0c:
         98:15:c0:37:b2:52:52:3f:dc:ff:c4:0b:df:f7:86:e5:4d:f3:
         7a:4a:da:a9:6f:66:2f:4e:df:ed:5e:ae:12:40:34:f1:77:51:
         0b:38:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:30 2023 by rpki-client on console-fra.rpki-client.org