Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/0642f676-a455-3da6-b13f-04be575426af.roa
File:                     0642f676-a455-3da6-b13f-04be575426af.roa (raw, json)
Hash identifier:          6XUxjF3Hwz7EPL2dKBdXlZtVU2TLR6X5aeTAfyYeguI=
Subject key identifier:   1F:80:AE:E8:C3:9C:F0:26:6D:7A:86:60:03:1A:3F:43:54:5A:65:5B
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858400032D6DAB7752AB5D9215A40
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/0642f676-a455-3da6-b13f-04be575426af.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     400536
IP address blocks:        103.70.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:00:32:d6:da:b7:75:2a:b5:d9:21:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=bd62266d-9f2e-44cb-bfe3-f3ee4bbb3fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:1f:4f:65:a4:e5:e7:05:49:6e:d4:8c:63:
                    91:da:51:85:9d:e6:d9:c4:c3:2b:be:29:33:5b:5e:
                    31:43:de:06:42:3f:7d:ae:d8:5f:18:4d:4d:35:50:
                    29:b0:dc:bf:10:42:80:87:31:e5:ff:13:39:88:d4:
                    11:9d:37:a2:24:dc:61:0c:a4:57:d8:3d:e7:81:5d:
                    0a:84:30:03:83:c2:25:97:8e:2e:d4:a4:e0:81:f8:
                    5a:05:c2:21:2f:81:df:e6:5f:54:5a:21:48:d3:03:
                    25:f4:06:73:1a:ac:92:eb:95:07:97:c2:88:88:9f:
                    bf:3a:a6:39:2e:2e:08:4e:4d:18:bd:c0:73:95:fa:
                    87:d1:79:b0:dd:b3:12:67:f2:67:ec:19:d9:6b:25:
                    d9:63:e1:fa:87:4f:12:4f:3d:ce:7d:7f:fa:92:20:
                    3a:a8:4a:8f:b8:d0:2d:0c:e9:fa:d1:f4:30:21:23:
                    0d:eb:0d:76:15:92:8e:ac:d9:54:c6:8f:80:8a:c3:
                    1b:27:e5:f0:76:63:49:c5:32:e6:01:f7:39:42:a6:
                    39:5b:81:28:be:5e:9a:6f:db:f8:8e:0c:6f:55:cb:
                    d7:d9:ff:56:e3:8c:45:18:a0:94:e5:ab:e4:9f:9b:
                    c2:d9:2c:de:ec:30:2a:86:06:05:cc:44:59:87:f2:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:80:AE:E8:C3:9C:F0:26:6D:7A:86:60:03:1A:3F:43:54:5A:65:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/0642f676-a455-3da6-b13f-04be575426af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:7e:b8:46:05:03:cf:45:66:48:42:90:21:64:12:7d:3c:
         51:e6:13:0a:e1:e1:d8:13:4c:37:17:0a:79:26:57:9b:13:3e:
         4a:ec:fb:eb:ba:dc:7c:f3:9f:68:3c:ea:52:93:c2:53:49:85:
         7e:a1:ce:1f:f0:35:5c:7a:c0:9e:43:79:59:fd:55:6c:16:56:
         71:d4:29:60:44:8e:d0:0a:e3:4b:b2:6c:0d:75:85:16:d3:1c:
         c9:ee:3d:12:e0:91:ef:d4:a2:fa:11:4c:76:29:8d:9a:23:54:
         7a:c0:cc:cd:33:67:90:ab:5c:95:da:50:92:bc:cb:50:61:ce:
         2c:ed:23:dd:1b:ea:a7:71:ec:c0:7b:b8:59:d1:75:4a:d8:96:
         40:1a:3b:58:c7:a2:3e:4a:a5:52:8c:e5:36:2d:0c:ab:30:6b:
         93:e8:3b:08:bf:cf:04:12:58:75:b0:c2:ca:e4:90:6d:3f:0e:
         d5:5d:3a:c0:2a:37:8c:00:e5:75:fa:5a:c9:59:64:a9:a4:8a:
         01:2e:2a:2f:fc:27:38:4a:eb:31:6a:6b:4d:fc:7f:68:1a:c6:
         11:1f:55:d5:2a:9d:da:39:1d:58:3a:a8:ea:4a:b4:af:ef:28:
         c5:a8:98:2a:a3:f4:c3:0d:7f:93:f3:05:fb:b6:52:bd:4d:84:
         ee:9c:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:31 2023 by rpki-client on console-fra.rpki-client.org