Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/7b2fe9af-f683-3a91-a909-4d3745e7380e.roa
File:                     7b2fe9af-f683-3a91-a909-4d3745e7380e.roa (raw, json)
Hash identifier:          xyj773BSjkA7Ja8+hcXiH0L4ansrdpCfKs9aO5DOwJg=
Subject key identifier:   51:E4:78:87:97:6B:41:5C:6B:29:4B:F5:1E:85:24:27:81:53:AB:BF
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583D2CEE321B13E6877B2B2C5E00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/7b2fe9af-f683-3a91-a909-4d3745e7380e.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Fri 09 Sep 2022 04:00:00 +0000
asID:                     197890
IP address blocks:        103.4.250.0/24 maxlen: 24
                          115.42.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2c:ee:32:1b:13:e6:87:7b:2b:2c:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Sep  9 04:00:00 2022 GMT
        Subject: CN=bca186c9-663b-4e7b-86d5-030cf7314bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:b5:86:78:56:b0:a7:2f:64:b2:ca:70:65:
                    42:2b:d6:be:a8:cc:6b:ef:34:5d:1c:46:20:37:3a:
                    54:5c:27:63:f7:d1:af:f0:9d:a1:b0:d6:00:90:f7:
                    31:a0:05:2c:d3:5f:9f:1e:0c:f1:34:43:47:f9:45:
                    5a:64:3a:ef:64:3b:2b:94:08:06:cf:00:fc:50:d3:
                    dd:dc:11:d9:17:32:f4:e6:2b:22:e4:2c:48:07:42:
                    ad:7f:cc:74:30:92:ad:b1:7e:98:2e:cc:30:cb:ba:
                    3f:9c:3c:a7:93:bf:d6:3c:78:ac:31:43:45:43:60:
                    a2:bc:2f:1a:be:18:11:84:e0:31:c7:fe:be:32:4c:
                    71:f0:44:3e:61:17:35:30:57:16:bd:b5:db:ed:cd:
                    0a:47:c5:25:d6:65:af:c5:58:55:36:6c:e9:cd:65:
                    56:71:ec:c3:dc:3d:c7:42:1e:79:ac:3c:41:73:c5:
                    77:eb:e2:c8:1b:3c:ce:42:99:1e:88:2b:d8:78:d8:
                    9e:03:49:30:ee:48:f9:44:77:3c:79:0f:63:26:18:
                    2f:77:3f:a4:67:b9:3a:81:5c:9a:ee:53:5f:cf:3c:
                    21:a5:87:a8:55:cd:6f:03:01:6d:85:93:ce:d2:84:
                    12:ad:41:5e:5f:93:ba:4d:51:dc:32:7f:5c:af:97:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:78:87:97:6B:41:5C:6B:29:4B:F5:1E:85:24:27:81:53:AB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/7b2fe9af-f683-3a91-a909-4d3745e7380e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.250.0/24
                  115.42.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:13:58:38:f9:84:c1:0d:81:29:c2:2c:07:63:0e:6c:18:
         ea:dc:8f:7a:f2:b1:d0:4d:77:7b:17:85:3c:a1:9c:56:80:2a:
         67:f9:f5:3b:2a:25:8b:33:f5:02:af:f6:ca:df:9c:f9:7b:13:
         d7:99:9a:4a:1c:f1:d0:f8:f6:09:b0:fc:f7:a1:1d:cf:c4:24:
         ce:7b:03:ee:71:1d:e1:4a:b5:c1:fa:0c:84:94:2d:f4:86:10:
         dc:57:22:7a:70:87:2f:3b:5f:72:54:b8:78:73:15:46:e4:d0:
         30:98:f4:ff:fb:f5:8b:39:bb:ca:dc:d0:ed:d9:8b:0d:62:e6:
         94:ca:e7:dc:0e:df:b5:2c:85:dd:8f:6a:c0:b3:18:70:7d:0f:
         63:be:1e:6e:52:7d:52:85:95:b1:88:b2:fa:63:bc:d5:1a:b0:
         01:48:5e:d4:41:b2:01:31:2d:13:22:53:6b:43:82:b4:e0:e5:
         6b:e6:58:df:8a:0e:c7:05:df:21:4a:9d:7b:0d:7b:f4:f7:9d:
         2d:4c:71:ff:ea:e0:03:92:37:8a:e8:ae:57:5e:ea:bc:78:9e:
         1f:57:74:59:5f:52:ee:8b:cf:7b:11:d2:e2:20:af:74:77:f3:
         ef:48:89:2b:cd:8f:7d:20:5f:5b:2f:57:d9:51:9d:ad:d4:8d:
         15:fb:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org