Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/81cf32ee-74c3-3553-a991-841db88f2d1b.roa
File:                     81cf32ee-74c3-3553-a991-841db88f2d1b.roa (raw, json)
Hash identifier:          KH3TxidyU1e+mEZjpFXT5epczkyzOvFnZ5n8JCCzgoU=
Subject key identifier:   8C:47:47:62:07:AB:C8:37:52:1C:E0:01:41:3C:60:DF:19:B7:E3:AA
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583CDECF7049ADDDFCD9FEBAF480
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/81cf32ee-74c3-3553-a991-841db88f2d1b.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Tue 08 Mar 2022 05:00:00 +0000
asID:                     1239
IP address blocks:        45.123.144.0/24 maxlen: 24
                          45.123.145.0/24 maxlen: 24
                          45.123.146.0/24 maxlen: 24
                          45.123.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:de:cf:70:49:ad:dd:fc:d9:fe:ba:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2022 GMT
        Subject: CN=7cb4853b-ea75-4d69-8002-afc99e9a20dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:1f:60:81:00:42:f6:a2:55:13:7d:1c:94:
                    c4:cd:b2:e8:a3:de:62:c1:18:6f:dc:e1:7d:bc:1d:
                    0a:62:f3:07:0d:f4:b4:e9:d8:2d:e8:85:e6:26:6f:
                    fc:c4:18:e7:a2:91:2c:1e:15:96:13:a9:0a:84:aa:
                    80:d9:cb:30:a8:97:37:ad:74:0c:b4:f0:79:04:af:
                    84:a8:25:1b:84:7b:5b:68:0c:e1:40:12:e6:94:39:
                    0d:84:64:cb:81:7c:7a:ae:8c:20:e1:86:69:43:bb:
                    54:62:29:35:c9:7d:7b:98:b5:c6:ea:76:59:5c:0c:
                    d5:7f:22:ba:2c:49:0c:2f:48:dc:b4:e5:6b:1a:c0:
                    f2:a2:06:ab:f7:2d:af:38:40:f4:77:0c:97:4d:8f:
                    54:29:b2:7c:36:13:92:64:dd:67:7d:19:89:57:5e:
                    e4:92:86:d2:f2:65:c4:45:79:0f:c8:26:cf:af:2b:
                    f2:a4:b4:ab:a2:57:85:3c:09:78:75:a1:b6:d2:77:
                    e1:01:d9:74:97:72:4b:eb:81:59:24:c0:04:ad:9a:
                    84:ea:86:7a:78:32:26:13:07:bc:3f:bc:fa:d4:a1:
                    d5:34:17:45:15:c4:50:dd:9d:b2:df:48:96:9a:1d:
                    49:04:f1:a1:54:18:ee:2b:56:b2:12:d3:45:81:0e:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:47:62:07:AB:C8:37:52:1C:E0:01:41:3C:60:DF:19:B7:E3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/81cf32ee-74c3-3553-a991-841db88f2d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:de:06:7c:6e:a9:72:45:06:b8:3a:ee:dc:54:e2:ff:fb:
         16:b4:c3:19:04:c9:63:5b:64:f2:1b:8e:43:fc:a9:58:7f:e3:
         73:31:aa:a5:43:db:a3:93:52:fb:47:81:fe:2a:0c:fe:a9:44:
         b0:3f:00:12:85:2e:af:0d:e8:d7:fe:a9:c6:df:98:d7:60:28:
         9e:f3:76:29:a0:39:c7:9d:0d:cb:58:38:25:0a:24:b7:8a:88:
         6b:14:87:34:e4:c6:48:86:02:67:e8:36:4c:6d:16:b9:35:c6:
         d9:b4:ee:dc:2f:9f:12:62:b4:be:fe:82:0e:ec:d9:21:5f:e0:
         aa:76:ec:8b:37:58:6d:a0:68:ed:05:a1:f5:4c:ae:2e:b0:39:
         49:05:9f:d0:95:bb:ce:c2:df:61:63:91:64:79:79:0c:b4:22:
         a5:70:cd:22:0f:54:d9:1a:0a:54:63:aa:49:72:3a:01:0b:11:
         39:b6:70:81:c6:d6:1f:97:67:1f:8c:a9:c4:c4:96:d9:1c:ba:
         37:1d:76:34:25:d8:80:da:6c:99:17:ef:72:04:a0:af:71:a5:
         9c:4a:55:f9:2a:0d:4f:c9:3f:32:d4:c0:36:b9:4f:ad:f5:94:
         01:ec:82:68:76:e8:e4:ce:46:43:5c:03:1e:67:7f:12:a0:a7:
         f0:4e:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org