Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/36682488-d879-31af-bef4-f96e76b7fc7a.roa
File:                     36682488-d879-31af-bef4-f96e76b7fc7a.roa (raw, json)
Hash identifier:          VSrdfMpDSu5Zii2U1iA2B6KRPm3+vgt0L07qn8UU69s=
Subject key identifier:   B3:BC:FD:64:E5:75:EC:91:CE:4A:7F:4D:C3:5C:38:DF:9D:72:8B:11
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583D75971977AACF10245A940B9C
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/36682488-d879-31af-bef4-f96e76b7fc7a.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Wed 04 May 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        103.49.152.0/24 maxlen: 24
                          103.4.250.0/24 maxlen: 24
                          103.251.25.0/24 maxlen: 24
                          103.251.26.0/24 maxlen: 24
                          103.251.27.0/24 maxlen: 24
                          116.206.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:75:97:19:77:aa:cf:10:24:5a:94:0b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : May  4 04:00:00 2022 GMT
        Subject: CN=90bd612f-61f4-4d30-bd19-1b3eca664654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:1e:8c:8e:36:be:9e:ec:44:85:53:f8:85:
                    ba:83:be:9e:2b:fd:c5:e4:fc:3a:4b:72:f2:a4:fc:
                    f1:4d:93:13:7c:95:0c:ff:23:b7:bb:55:93:91:23:
                    42:b0:5c:93:31:92:d8:12:7b:fc:1c:92:79:45:e8:
                    9d:16:aa:39:f3:d7:31:fe:c6:20:18:ce:15:23:d5:
                    33:3e:51:dd:a7:bc:d4:4a:0c:02:6d:70:6f:5d:a5:
                    de:97:19:04:5c:bb:f3:23:ce:b7:33:08:48:3b:b9:
                    c7:9c:a9:8d:14:71:54:e1:90:bc:8c:22:6f:71:04:
                    cc:32:b4:5d:4f:eb:68:2d:8f:d9:4b:18:7e:59:02:
                    99:da:c2:7c:c9:25:05:fb:51:8d:34:94:43:3a:7e:
                    da:38:9c:fa:02:61:01:31:73:81:03:98:06:de:9b:
                    2e:1e:aa:96:3f:dc:22:f5:4c:55:6f:c5:e1:65:56:
                    b3:95:0d:9d:2f:f5:fa:f4:1c:fa:d5:b9:24:00:69:
                    0d:65:17:8a:26:76:90:00:b5:96:2e:a4:1a:62:ea:
                    18:e5:06:27:fc:a2:61:8c:fc:23:3b:6f:94:8e:a7:
                    d4:02:41:c1:55:ac:d1:39:7e:9b:26:dd:0f:68:0f:
                    74:28:07:fb:1b:d6:12:2d:66:df:91:c4:61:7d:b9:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:FD:64:E5:75:EC:91:CE:4A:7F:4D:C3:5C:38:DF:9D:72:8B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/36682488-d879-31af-bef4-f96e76b7fc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.250.0/24
                  103.49.152.0/24
                  103.251.25.0-103.251.27.255
                  116.206.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:01:a6:bf:75:db:bb:ed:a4:51:25:d2:5e:3c:bf:a9:92:25:
         17:59:23:3d:18:6b:07:91:8d:93:ef:f4:74:9d:94:f8:32:94:
         8a:93:d0:b7:91:99:2e:c8:4a:e5:ac:6d:0c:b1:a2:5a:74:8b:
         50:33:33:49:5e:3a:25:f0:77:7a:81:1d:37:23:f8:f8:66:61:
         8d:9e:79:01:26:99:14:43:69:42:5a:38:43:33:e2:0b:78:0c:
         2e:c6:89:bf:9f:09:7f:3a:f8:19:20:ca:3d:f9:63:2d:07:56:
         0c:ee:16:70:29:27:8e:84:70:67:e1:9e:a5:57:9e:28:88:68:
         5a:f9:1f:e6:3a:d4:fc:48:45:ce:50:0b:25:94:d0:bf:55:d4:
         6d:f8:7b:9f:90:a7:23:c2:ed:24:99:83:e2:5c:fa:14:80:92:
         19:ad:3c:f9:9b:8f:81:19:30:dc:64:ea:2e:3b:d5:50:c9:bd:
         f7:60:e8:6f:8e:78:21:e9:e6:b4:86:ad:f0:1a:4e:f5:15:d9:
         96:a1:8d:22:9c:d4:58:24:80:58:cc:85:78:94:2b:8b:be:ca:
         39:dd:f5:07:60:40:68:90:e9:97:a5:0c:e3:9d:69:1a:97:fe:
         e5:c6:47:b7:8b:01:01:19:76:5e:2d:c8:98:bb:fe:d2:c8:9f:
         07:10:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:31 2023 by rpki-client on console-fra.rpki-client.org