Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/c2a2bf72-8d2b-3b4e-b002-896e33624859.roa
File:                     c2a2bf72-8d2b-3b4e-b002-896e33624859.roa (raw, json)
Hash identifier:          iuvZIUpYhof7xjhhQSB95Z30i4cXxiIIUkKifXAWLSk=
Subject key identifier:   F4:74:FD:A3:6F:E4:4C:0E:3E:2F:C3:C9:BA:5D:FB:D8:8E:FB:A3:0F
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285841AB358DE40C7A8B6083620C80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/c2a2bf72-8d2b-3b4e-b002-896e33624859.roa
Signing time:             Mon 24 Apr 2023 12:00:00 +0000
ROA not before:           Mon 24 Apr 2023 12:00:00 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     205220
IP address blocks:        103.251.27.0/24 maxlen: 24
                          45.115.61.0/24 maxlen: 24
                          103.4.248.0/24 maxlen: 24
                          103.4.249.0/24 maxlen: 24
                          103.49.152.0/24 maxlen: 24
                          103.196.11.0/24 maxlen: 24
                          103.228.86.0/24 maxlen: 24
                          103.228.87.0/24 maxlen: 24
                          137.59.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ab:35:8d:e4:0c:7a:8b:60:83:62:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Apr 24 12:00:00 2023 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=43d59575-c8e3-4300-ad08-152725b02688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:2f:29:39:f1:ad:46:5c:3b:7f:3d:e1:86:
                    b4:92:eb:fd:be:03:a3:1c:5e:e8:74:78:a3:be:e5:
                    eb:69:25:44:f6:91:c6:b9:7b:b4:0d:59:89:ab:05:
                    ce:a4:57:94:82:fe:c9:d9:75:c4:eb:0a:9f:59:93:
                    af:a1:cf:4f:1b:27:6b:a1:76:da:e6:44:8b:66:3e:
                    02:25:e4:a6:85:be:95:ce:f7:ec:79:1f:53:9f:78:
                    53:bc:7d:5b:6f:65:be:08:57:66:fa:8d:d3:10:cc:
                    2c:4d:18:57:c4:2d:58:e5:cb:f4:01:f8:02:a9:57:
                    e4:3e:fb:dd:c8:6e:62:89:44:7d:95:1b:f6:2e:ba:
                    ee:d0:a4:55:3e:4f:6a:37:06:a1:4d:4b:d0:57:26:
                    cd:2c:24:ab:7e:30:8b:99:dd:30:16:b3:6b:91:e3:
                    ca:5d:41:a1:a3:94:b8:96:bd:b8:99:d0:71:e4:bc:
                    31:b7:f1:01:c8:95:d3:8b:87:0f:df:42:99:e0:ab:
                    d8:17:38:db:66:38:79:25:05:20:44:d2:4a:c0:0c:
                    81:3e:14:2c:4b:75:f0:4d:99:c9:a1:d3:25:a5:55:
                    c8:81:87:a7:1c:24:51:5a:0b:de:d5:0f:c6:6f:b5:
                    bc:01:d5:82:6a:d8:19:94:a3:8f:81:12:60:e3:93:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:FD:A3:6F:E4:4C:0E:3E:2F:C3:C9:BA:5D:FB:D8:8E:FB:A3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/c2a2bf72-8d2b-3b4e-b002-896e33624859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.61.0/24
                  103.4.248.0/23
                  103.49.152.0/24
                  103.196.11.0/24
                  103.228.86.0/23
                  103.251.27.0/24
                  137.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0b:ec:e0:4f:14:c9:8a:82:d8:03:9a:ef:46:cb:cf:39:9f:
         3f:0b:28:f4:fa:79:bf:ce:c3:37:79:04:a0:5a:ba:1a:96:19:
         5c:0f:c7:f2:45:38:9e:d6:ff:3e:36:2b:b7:cb:df:fb:32:17:
         9e:4e:5e:d4:d6:9a:00:f6:a2:61:3f:1a:16:13:d0:d8:b6:55:
         31:f5:f5:13:66:ca:55:77:8f:ea:8f:3d:e1:78:32:c9:89:00:
         ce:f8:82:99:5e:72:45:7f:32:56:1f:86:36:42:83:10:81:33:
         b7:e5:cc:9b:2f:60:38:aa:c8:de:87:88:4a:a2:f8:6e:b4:6a:
         b4:b6:82:e5:09:7a:3b:b8:db:dc:b7:34:92:67:3d:0e:09:b9:
         d1:3d:6b:7b:40:d9:90:e8:2e:20:2a:bb:26:27:8d:0e:ae:fb:
         97:79:ed:9c:f1:fe:04:7b:84:d9:a9:d9:c0:eb:d1:a9:dd:25:
         49:8b:73:53:35:84:57:33:70:a3:88:09:28:2f:d9:64:bc:02:
         0a:97:03:a7:24:82:ae:98:38:af:64:be:85:8b:67:11:44:66:
         58:63:a1:bb:78:54:90:a5:a3:05:d3:b2:96:ea:31:8b:74:34:
         77:e7:f2:cc:02:7c:20:45:27:8d:1f:14:ae:e2:e9:55:fa:79:
         a1:6a:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org