Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/22e95f41-1c77-35e3-afd6-2079aebe639c.roa
File:                     22e95f41-1c77-35e3-afd6-2079aebe639c.roa (raw, json)
Hash identifier:          Ln8zaPnHOINogajW0z4GRuB+kxTZMdf/tHcqu2H0kZU=
Subject key identifier:   93:3C:FA:57:26:FA:EA:A5:B5:4C:D4:BB:13:2A:82:09:F2:80:1E:D1
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583CF591F9FB8CAD099949CA4E00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/22e95f41-1c77-35e3-afd6-2079aebe639c.roa
Signing time:             Thu 17 Feb 2022 05:00:00 +0000
ROA not before:           Thu 17 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Mar 2022 04:00:00 +0000
asID:                     208485
IP address blocks:        103.65.228.0/24 maxlen: 24
                          103.65.229.0/24 maxlen: 24
                          103.65.230.0/24 maxlen: 24
                          103.65.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f5:91:f9:fb:8c:ad:09:99:49:ca:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb 17 05:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2022 GMT
        Subject: CN=f72075f6-fc25-4fc0-bdb7-0242c2e3b133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:a6:08:71:3d:c9:55:75:43:63:f2:eb:b4:
                    66:50:62:01:57:23:0d:ee:83:3f:74:56:5e:86:6b:
                    8b:43:e9:8f:8a:66:e6:db:51:e8:93:f2:e8:3a:0c:
                    b4:a1:69:de:a3:97:6a:7b:c4:e2:59:03:86:83:7b:
                    61:93:fd:2e:0e:58:9a:e5:c7:47:94:fb:fb:c5:28:
                    1a:bd:ff:ee:a6:f4:8c:54:bc:25:81:9c:79:56:17:
                    25:69:c4:12:f1:0a:13:b3:da:93:f2:94:53:ff:0f:
                    82:66:03:90:35:d5:00:80:81:64:29:13:0a:83:16:
                    38:0e:8b:b6:8b:d5:45:a4:63:f0:1c:04:9d:67:ab:
                    14:f4:62:d3:12:38:a9:e9:6b:f6:e3:10:d5:65:db:
                    18:e8:04:6e:b1:c6:21:a1:24:fd:04:e0:40:ec:8f:
                    31:11:59:78:3d:d9:80:d5:a5:99:9a:0b:f1:2e:89:
                    02:7f:d3:80:1b:0a:1f:81:4b:9e:8f:e1:62:55:fd:
                    d1:e1:f5:49:35:e2:ba:9e:a3:da:30:f8:67:92:f8:
                    67:77:d1:d0:92:ff:22:14:66:20:e3:78:1a:2e:ca:
                    fe:78:34:c9:f7:86:64:55:2b:ba:c0:b1:3c:c8:49:
                    82:2f:c1:cb:40:34:27:28:af:72:51:df:98:ef:3c:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:FA:57:26:FA:EA:A5:B5:4C:D4:BB:13:2A:82:09:F2:80:1E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/22e95f41-1c77-35e3-afd6-2079aebe639c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:0d:24:6a:80:9c:12:09:19:44:08:bb:2e:15:57:7e:eb:
         e0:58:5b:0f:c9:3e:fb:0e:f8:a3:7a:43:2c:93:1b:4e:b7:49:
         bd:1b:71:53:fd:4f:5b:86:33:4c:c0:05:f9:45:41:f3:3b:7f:
         5a:55:f3:5a:ec:3d:69:d9:ee:b6:26:ee:0c:d2:b2:1c:03:07:
         c8:3d:06:11:04:97:c5:15:0c:eb:51:e8:36:6c:c6:81:b7:ef:
         b4:e4:7b:ce:a4:50:c7:52:8d:e8:8d:d7:44:0a:a1:b7:0e:7d:
         94:3f:50:47:0f:ad:ae:17:20:4c:58:60:d7:bb:c2:69:94:ef:
         52:fc:24:0b:a4:36:c9:95:5f:22:db:54:9a:2f:fc:87:70:e5:
         2f:4a:40:1a:25:53:52:7e:df:85:d9:da:59:6e:04:b8:bc:92:
         dc:0e:7f:0a:c1:76:5e:72:62:5c:ef:30:fd:22:c6:60:ac:7d:
         18:0d:8a:75:45:ea:6f:9a:f4:4c:a0:12:bf:df:cf:f4:de:76:
         c9:7d:61:6f:4d:56:27:6e:27:46:0f:9c:02:38:8f:33:2f:1e:
         98:d9:aa:f8:66:07:ca:9d:2b:15:f3:d2:0d:a4:fc:24:46:5a:
         e0:ab:e2:be:26:5f:75:ea:44:f1:5f:66:b1:3a:f7:39:97:ce:
         a9:a0:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org