Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/f161cbfe-3ebc-3737-baf2-0f43a602f803.roa
File:                     f161cbfe-3ebc-3737-baf2-0f43a602f803.roa (raw, json)
Hash identifier:          EAGqWz5A9z0FTj80rOKufjOw3/ZAWO/r0zrNjk3qlwc=
Subject key identifier:   87:8A:A0:BA:77:C7:61:61:F8:48:68:CE:8D:77:D2:71:4E:E7:3A:2A
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285841B39CDB9B38F648336FBCF790
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/f161cbfe-3ebc-3737-baf2-0f43a602f803.roa
Signing time:             Sun 23 Apr 2023 12:00:00 +0000
ROA not before:           Sun 23 Apr 2023 12:00:00 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     205220
IP address blocks:        45.115.61.0/24 maxlen: 24
                          103.4.248.0/24 maxlen: 24
                          103.4.249.0/24 maxlen: 24
                          103.49.152.0/24 maxlen: 24
                          103.228.86.0/24 maxlen: 24
                          103.228.87.0/24 maxlen: 24
                          103.251.27.0/24 maxlen: 24
                          137.59.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b3:9c:db:9b:38:f6:48:33:6f:bc:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Apr 23 12:00:00 2023 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=975eb435-5089-4c2b-b682-729dbecb88a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:f0:25:a7:2f:16:ee:5a:83:cf:38:60:90:
                    c0:1b:bd:9b:4a:89:1b:61:38:c7:46:f8:7b:b0:63:
                    6b:60:59:15:70:00:0d:4d:de:cc:95:56:e3:57:30:
                    8a:c1:1f:cd:ff:d3:d8:87:3d:34:27:3b:92:2a:0a:
                    ae:65:e3:0c:e4:09:12:81:32:c5:ac:88:42:3d:39:
                    b3:e4:a5:17:98:e7:3d:05:97:6c:05:f3:6e:5a:1d:
                    c5:11:e8:50:a1:ce:e7:1e:3e:1b:9b:37:a0:26:6c:
                    11:45:97:27:9e:d9:03:2b:07:95:b9:c2:e1:9f:2d:
                    22:5a:25:89:a8:16:97:8a:fd:ad:98:b6:14:b4:d7:
                    b5:5b:2a:d8:5f:4e:30:b1:51:cd:3c:85:58:a4:26:
                    f6:b6:af:36:13:95:07:c6:27:ff:ad:11:fd:f0:78:
                    1e:98:ce:ea:69:64:20:52:f3:d0:fe:07:e8:6e:c0:
                    41:4b:23:03:58:a4:f7:61:62:ea:c2:79:24:f8:89:
                    28:63:94:7f:c9:08:a9:d5:08:00:18:97:2f:90:6c:
                    69:f6:80:41:f2:ee:e0:68:5b:d2:e4:ef:32:fe:07:
                    54:a9:3b:30:22:df:c7:46:b8:68:ce:b0:2d:7a:f2:
                    a2:56:17:c1:b5:71:f1:c1:5f:08:39:b2:ee:6e:07:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:A0:BA:77:C7:61:61:F8:48:68:CE:8D:77:D2:71:4E:E7:3A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/f161cbfe-3ebc-3737-baf2-0f43a602f803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.61.0/24
                  103.4.248.0/23
                  103.49.152.0/24
                  103.228.86.0/23
                  103.251.27.0/24
                  137.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5b:a2:07:89:ae:cb:4d:06:6b:ea:35:fc:e6:82:bd:95:62:
         a6:b2:f2:f3:0b:d7:1d:a5:aa:96:35:8e:78:77:94:7e:58:e5:
         95:3e:2c:fd:f0:c6:06:ed:1e:ed:9b:c0:a6:62:25:10:36:46:
         e9:11:e3:a5:a3:25:1e:ca:c6:ea:78:6f:b0:ff:19:1e:5d:a4:
         cf:12:c4:e4:d0:95:6d:5d:4e:ff:04:1c:bf:8b:c3:8c:0b:b2:
         f8:46:f7:88:f2:87:e7:6b:02:a9:3b:8c:36:d9:f1:88:6f:72:
         c3:24:d6:f3:75:98:49:e6:bf:52:23:c9:7f:c2:a8:cf:55:92:
         f8:bf:48:47:c8:49:08:25:ad:0a:28:ca:d8:c2:5b:86:c3:b7:
         72:78:3c:f3:ef:46:ae:35:62:ff:df:02:90:6d:bd:44:2a:fb:
         d3:68:96:b6:53:88:31:92:e5:55:cf:2f:bf:ba:ed:ca:23:06:
         7f:69:80:9e:e8:c4:8e:68:dd:2b:6d:43:11:fd:54:54:0f:a5:
         a7:9e:75:b6:95:80:14:03:4a:d0:a5:5d:dc:f0:12:0a:be:8c:
         70:2f:95:d0:f5:56:5c:ed:50:e7:80:8e:a1:8c:b6:6a:fd:4e:
         52:e2:81:13:23:a6:04:4b:a5:62:e0:87:ae:98:80:25:08:3f:
         03:ef:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org