Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/16a6c3df-12f0-326b-a184-df4f6b49044a.roa
File:                     16a6c3df-12f0-326b-a184-df4f6b49044a.roa (raw, json)
Hash identifier:          wQcMXLmrz7pTIivaqYNDXQfBfWXI+eU5GsQL5KczLhY=
Subject key identifier:   9A:BD:D8:0C:D5:D7:5D:8E:C4:79:49:F9:04:72:3B:0A:3B:3A:D8:40
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285841DB7C0CB70CD6D4AF2D2FB940
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/16a6c3df-12f0-326b-a184-df4f6b49044a.roa
Signing time:             Thu 11 May 2023 12:00:00 +0000
ROA not before:           Thu 11 May 2023 12:00:00 +0000
ROA not after:            Mon 12 Jun 2023 04:00:00 +0000
asID:                     43260
IP address blocks:        103.4.248.0/24 maxlen: 24
                          103.4.249.0/24 maxlen: 24
                          103.196.11.0/24 maxlen: 24
                          103.228.86.0/24 maxlen: 24
                          103.228.87.0/24 maxlen: 24
                          137.59.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:db:7c:0c:b7:0c:d6:d4:af:2d:2f:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: May 11 12:00:00 2023 GMT
            Not After : Jun 12 04:00:00 2023 GMT
        Subject: CN=a42cca7e-a9fc-417b-b842-af241f1bb706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:c3:19:bf:b0:69:7d:bf:d7:61:b4:ec:5f:
                    31:e7:59:a3:2a:55:b7:63:d9:9e:a0:59:df:4d:54:
                    c6:c3:fb:46:56:ea:50:3b:40:6f:55:93:96:3a:22:
                    2c:e1:d4:e6:6c:55:b6:38:d0:e6:ce:e4:02:d5:3c:
                    f6:3a:bf:e8:2c:fd:d6:94:d6:d2:b6:52:6d:13:21:
                    19:9b:3f:ec:9b:55:78:e4:4c:d3:12:a2:08:e2:e7:
                    a2:6d:ff:88:6e:72:03:60:83:c2:03:e5:30:6c:79:
                    8f:34:18:41:5d:b7:51:26:6d:da:7b:09:3b:0d:4b:
                    bb:23:06:54:77:08:85:cd:d7:8d:11:39:8b:e5:07:
                    5e:57:c8:ad:38:68:76:05:0d:35:8b:b7:32:b0:4f:
                    2f:98:7c:d9:8c:d0:ae:71:11:34:84:ec:fd:d6:b5:
                    4a:36:e2:67:3e:23:39:40:24:fa:22:a2:e6:71:a7:
                    4d:26:e5:2b:6e:b7:c4:12:60:74:36:d1:f3:5c:32:
                    f7:f8:62:87:3e:a6:2e:73:8b:78:02:26:99:6b:b7:
                    fd:43:e9:8e:5b:05:18:de:a5:2e:11:c7:e9:fb:48:
                    32:1c:26:10:4e:41:33:62:e6:13:5f:e6:b9:13:09:
                    85:c7:7a:cb:3e:47:a4:f1:fa:f7:0b:eb:bd:99:5e:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:D8:0C:D5:D7:5D:8E:C4:79:49:F9:04:72:3B:0A:3B:3A:D8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/16a6c3df-12f0-326b-a184-df4f6b49044a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.248.0/23
                  103.196.11.0/24
                  103.228.86.0/23
                  137.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:88:7a:c5:df:e3:33:fc:07:13:b6:77:fe:50:cf:ad:97:
         52:81:28:71:51:36:33:47:d9:03:00:4f:1f:b5:8e:13:9e:ae:
         a5:41:85:e3:b8:aa:93:9c:4f:c4:39:6b:ea:fc:01:f0:e1:93:
         4b:f7:cf:4a:a3:8d:61:f8:3e:e3:94:58:54:56:44:60:92:69:
         eb:b2:24:14:24:f5:f2:57:8c:41:63:af:b9:59:e6:97:04:05:
         b8:96:05:a4:4c:a0:0a:ee:25:54:c8:0d:c9:e9:38:2d:50:47:
         1f:4e:dd:29:19:5e:39:96:bf:1e:c5:86:1e:fa:36:09:1a:04:
         17:fe:aa:98:84:03:81:66:9c:48:51:85:a4:41:59:81:c5:25:
         7f:94:9c:17:72:98:40:ef:97:2f:8f:47:b6:3c:3f:96:2f:02:
         9e:3d:c3:fb:c1:16:fb:c1:4d:78:27:8c:31:03:dd:6b:8d:a7:
         98:4d:4b:d7:b2:b0:98:80:f7:0e:53:b7:55:42:e1:43:72:6a:
         32:00:3f:f0:29:90:82:0c:13:e6:01:7c:92:f2:eb:f7:bf:20:
         50:2a:ef:84:de:e7:61:d3:26:5e:ae:70:26:b3:4b:7d:e3:d0:
         65:7e:0d:d8:b2:f9:4c:a2:11:5c:37:d3:50:8b:4e:96:4a:e0:
         8c:24:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org