Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/64ed1b1a-64ef-3a44-b4f4-8568140be2ff.roa
File:                     64ed1b1a-64ef-3a44-b4f4-8568140be2ff.roa (raw, json)
Hash identifier:          09IEfnHa0fmG0VaRa834xqLvLPtUR322wFHgjR+qImY=
Subject key identifier:   48:06:6D:F9:EC:9A:3A:12:03:2C:1B:7E:D7:4F:BE:51:98:48:27:2D
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328583AA7C58932C89D38FA1BF5EAC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/64ed1b1a-64ef-3a44-b4f4-8568140be2ff.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.178.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:89:32:c8:9d:38:fa:1b:f5:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=79d98d4e-7275-4a08-b23f-cc11d8d16bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:ee:47:51:26:a3:25:00:05:bf:07:7a:9e:
                    09:23:24:f9:42:86:7b:42:c6:50:13:5c:36:aa:b1:
                    81:f2:0a:a2:d9:ef:c7:f4:4f:1f:2a:64:64:03:e4:
                    58:e9:e9:d5:2c:37:66:b2:a5:e0:2b:9f:5e:7f:d4:
                    9a:49:1a:1a:24:a3:22:92:6a:84:7c:99:c9:b5:d8:
                    7f:a4:bd:a8:0f:6f:c7:5a:78:7f:5d:48:22:3f:23:
                    9c:2d:30:8d:4d:e0:31:1a:37:be:a8:39:14:ec:34:
                    cc:81:ff:de:b3:a1:f8:5a:6c:63:bd:b8:95:77:0c:
                    96:a6:20:50:1e:08:d2:d8:cb:6f:b6:a1:61:71:8a:
                    3d:61:43:45:83:f2:92:d0:9b:09:05:fd:9a:e9:23:
                    a4:86:db:c4:68:25:29:d2:7e:b4:81:93:f6:fa:b3:
                    c6:8d:b0:af:5c:24:9e:32:4e:ae:80:e3:fb:ca:a2:
                    61:3a:15:30:7d:23:ca:fe:ff:0c:8c:b4:24:c2:f4:
                    94:3a:2c:9b:96:5e:63:41:7d:1f:fc:44:be:bf:e8:
                    16:5a:30:99:52:52:bb:40:85:c4:61:14:4f:fe:c9:
                    81:5d:e5:ce:74:e2:0f:78:0a:84:7e:d3:63:1f:7d:
                    c7:f3:56:a3:fb:88:b5:72:68:5c:9f:46:5e:e4:ca:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:6D:F9:EC:9A:3A:12:03:2C:1B:7E:D7:4F:BE:51:98:48:27:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/64ed1b1a-64ef-3a44-b4f4-8568140be2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:e8:60:25:1f:67:e2:d6:e0:4b:b5:d2:23:b2:9a:82:0a:
         38:c0:86:18:4d:fd:03:96:82:cc:1f:66:e6:5d:65:17:be:e5:
         68:91:fc:94:ab:ab:da:52:99:f2:ab:75:cc:e5:ad:b8:54:09:
         a2:d3:05:0b:4d:d8:0c:4c:86:89:99:bf:d4:d1:3a:07:b8:b9:
         8e:8a:f7:de:d7:13:a7:f4:18:d0:67:9b:7e:4d:fa:5b:21:11:
         6c:bf:d2:15:e4:90:98:71:b0:77:61:ac:65:f7:80:74:b5:30:
         32:86:76:0f:40:0d:f1:4e:7d:14:de:77:59:30:aa:7e:b0:93:
         88:21:21:df:df:98:87:48:be:1b:b7:e7:86:33:c4:c5:7c:cc:
         3b:c4:c1:c8:3f:a4:fc:3e:c2:32:81:c2:40:18:97:a7:4b:91:
         51:89:82:ed:24:4b:1d:12:db:9e:fc:ad:09:82:82:e2:b1:2b:
         7d:f0:d7:40:68:09:a3:89:38:cc:3c:56:0d:9c:7b:38:75:b6:
         41:68:50:83:ed:5c:97:1c:94:17:98:3b:bc:c5:6e:a8:43:30:
         48:07:50:85:46:6b:ae:15:49:3b:fc:01:6e:a7:25:b8:97:02:
         78:e2:9b:8f:da:6c:56:8a:eb:09:12:a4:75:e0:5a:66:c2:ea:
         79:e7:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:24 2023 by rpki-client on console-ams.rpki-client.org