Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/7b85f32e-9a51-3ffa-be66-675354062fff.roa
File:                     7b85f32e-9a51-3ffa-be66-675354062fff.roa (raw, json)
Hash identifier:          vEf0T+OqBJCH5z1jYQ6hTPBjg6+ax0tRBK8S+kDJuXA=
Subject key identifier:   74:BF:AB:C8:C9:12:DB:EF:58:9A:8E:8B:4B:BC:AB:5A:3B:8D:BB:84
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285841123D8FB1A93E54EAB87FC214
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/7b85f32e-9a51-3ffa-be66-675354062fff.roa
Signing time:             Tue 28 Feb 2023 12:00:00 +0000
ROA not before:           Tue 28 Feb 2023 12:00:00 +0000
ROA not after:            Sat 01 Apr 2023 04:00:00 +0000
asID:                     8100
IP address blocks:        103.76.255.0/24 maxlen: 24
                          103.207.46.0/24 maxlen: 24
                          103.71.62.0/24 maxlen: 24
                          103.216.0.0/24 maxlen: 24
                          103.216.2.0/24 maxlen: 24
                          103.216.3.0/24 maxlen: 24
                          116.206.148.0/24 maxlen: 24
                          103.251.27.0/24 maxlen: 24
                          103.251.26.0/24 maxlen: 24
                          103.251.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:12:3d:8f:b1:a9:3e:54:ea:b8:7f:c2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb 28 12:00:00 2023 GMT
            Not After : Apr  1 04:00:00 2023 GMT
        Subject: CN=1e149b42-1ff3-481d-bc4a-48694d689255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:0d:3b:10:12:a8:e6:39:f5:88:00:b5:83:
                    8c:92:12:e7:d5:77:12:0c:a7:26:66:13:f6:8a:4b:
                    af:59:5b:67:72:9b:62:92:0f:11:6c:be:20:6f:7a:
                    d3:4a:b9:ef:61:0d:21:33:13:0c:c4:2e:ea:5e:b5:
                    53:7e:37:97:35:97:1c:35:06:ee:cb:eb:63:97:4d:
                    de:61:af:0c:a6:71:73:ca:6e:28:88:0f:6e:ff:f2:
                    36:53:bf:2e:09:f1:a1:dd:14:97:87:fb:02:59:85:
                    d6:53:13:69:d6:2e:20:d5:f9:39:5a:a5:6f:99:4d:
                    dc:7f:1f:fa:49:f7:50:73:77:c8:18:26:79:d2:c2:
                    7b:21:05:11:fb:91:61:92:8c:be:c8:3f:59:bb:be:
                    b4:95:a5:6b:0a:d8:e7:7e:3e:09:25:ed:7b:66:15:
                    89:1a:49:68:4b:3e:33:04:00:a6:b6:0f:57:c7:13:
                    7e:2b:b0:bb:e1:39:4d:ce:f6:71:43:d1:e7:f3:04:
                    5c:b5:35:04:11:c5:03:e2:5c:34:3f:d4:a0:47:1d:
                    47:d0:21:ff:e4:99:0f:e5:2c:e2:ff:a6:52:68:bf:
                    de:31:17:e0:25:d4:18:dd:34:fc:c5:ef:1c:90:e7:
                    4a:13:44:55:b4:86:12:13:24:1d:0f:34:57:e6:78:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:AB:C8:C9:12:DB:EF:58:9A:8E:8B:4B:BC:AB:5A:3B:8D:BB:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/7b85f32e-9a51-3ffa-be66-675354062fff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.62.0/24
                  103.76.255.0/24
                  103.207.46.0/24
                  103.216.0.0/24
                  103.216.2.0/23
                  103.251.25.0-103.251.27.255
                  116.206.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:ff:37:96:1d:6d:85:26:0a:18:90:3c:f3:a8:96:a7:d9:
         ac:16:58:01:85:53:89:a3:6d:ba:62:08:06:8f:f5:92:c1:6b:
         33:43:37:52:b6:b8:06:9d:d7:7f:fd:ca:3e:f9:2f:ce:ef:b2:
         df:80:80:f9:48:51:65:2f:c1:25:a3:3e:8c:98:ac:e4:f9:08:
         7e:63:a2:5f:87:d8:46:54:3c:e5:5a:29:91:eb:17:f0:ed:d6:
         8e:ec:d0:02:29:39:d9:47:47:9e:85:42:9b:76:2f:67:36:70:
         b2:07:3c:cf:19:25:e5:5e:0f:93:5e:e9:26:b2:87:b1:fe:4e:
         e3:2a:32:61:44:90:4c:1a:36:5c:77:f5:bf:d0:18:4d:50:66:
         d0:d9:ea:f6:7d:be:98:6e:9e:94:0e:e5:c1:db:4d:0e:a1:82:
         5b:34:f8:3f:6b:ff:96:eb:fd:65:90:93:a4:c7:f2:d0:62:bf:
         6e:b6:a3:5b:6f:f2:cd:23:00:5d:b5:30:3e:62:2b:56:6c:ee:
         eb:64:ad:19:0f:3a:1f:e8:d4:dd:7f:a1:57:bf:13:a0:af:02:
         15:d5:7f:35:ae:af:b9:5b:76:6b:2e:b1:3d:7d:e4:ad:10:e1:
         86:14:eb:d4:44:98:99:f3:8a:93:af:16:16:34:15:60:09:62:
         08:8c:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org