Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/bd517819-80d4-3293-95b0-4958339afb2a.roa
File:                     bd517819-80d4-3293-95b0-4958339afb2a.roa (raw, json)
Hash identifier:          YX2BPNz+Nc6aA+hhXpO9P3XsJwfxrtCmC81pDI42pRY=
Subject key identifier:   B8:4B:33:3E:75:3E:2A:50:2C:FB:C8:1C:8E:2F:D6:33:06:39:0A:15
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328583CE0963C06BDE6C68A00861380
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/bd517819-80d4-3293-95b0-4958339afb2a.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     1239
IP address blocks:        194.156.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:96:3c:06:bd:e6:c6:8a:00:86:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=3d99bbb6-c23f-49c5-9465-d026e3806399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:92:5a:28:74:0c:d3:38:a4:fa:c8:81:ce:
                    7f:17:49:18:49:a3:5a:b7:ce:1c:c2:ba:27:72:71:
                    cc:f8:92:0c:b9:34:66:0c:43:e0:a2:e5:ed:ef:50:
                    89:61:b4:cc:4c:68:2e:5c:8a:81:ec:a4:48:03:e4:
                    bc:1a:28:d8:40:05:5b:2d:9a:38:41:44:58:86:7e:
                    52:fa:16:39:c5:ce:c7:33:e6:15:49:4a:c2:31:a0:
                    38:e0:73:a7:d7:ea:e7:bd:88:1f:fd:66:da:e9:c1:
                    76:0b:9f:54:37:07:23:26:c7:89:91:1c:15:ce:3c:
                    43:ee:36:46:99:9e:dc:80:4d:57:a3:17:95:31:9d:
                    4c:39:57:06:9e:bd:7f:3f:1e:92:60:cb:ce:56:8a:
                    eb:f7:75:60:32:b5:c2:ab:bd:f4:d5:3a:d7:fa:41:
                    87:ac:9b:6a:e0:c4:8a:63:55:a4:89:eb:2c:b2:49:
                    97:7b:c1:7c:29:31:8f:e1:94:76:2c:8f:02:57:ca:
                    2e:43:28:f4:93:47:1a:ae:cc:cd:df:53:db:e6:60:
                    86:5c:bf:ac:ec:87:9d:dd:e4:00:ba:88:0f:de:ae:
                    fa:fd:cd:9e:12:00:b9:f7:18:aa:d4:da:f6:c8:8d:
                    9e:1f:70:43:43:bc:f4:9e:bf:9e:77:af:db:9d:87:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:33:3E:75:3E:2A:50:2C:FB:C8:1C:8E:2F:D6:33:06:39:0A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/bd517819-80d4-3293-95b0-4958339afb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c6:97:9d:6c:db:f8:e3:e2:27:d7:f6:33:96:eb:e5:f5:0c:
         1f:61:de:b9:eb:75:0e:6d:d8:70:c8:a9:e5:0d:c8:58:33:63:
         27:40:3f:be:23:87:b1:a2:b9:90:52:e5:d9:7d:30:0c:f1:3c:
         e8:e8:27:6a:55:1d:6a:2f:e0:fb:b4:e6:d7:fb:dd:da:d1:48:
         24:a2:01:c5:a0:aa:5e:41:aa:ec:71:3f:d7:be:53:1a:6a:a9:
         b6:ef:3e:4b:b0:70:8a:3f:13:6f:8a:0f:b0:c4:08:50:71:eb:
         1f:c4:cb:1b:70:0f:a4:50:97:94:cb:94:69:01:f9:f3:14:3e:
         01:4c:58:6a:24:11:ca:52:11:30:8a:96:84:9a:60:04:e1:02:
         e9:5b:96:e5:a2:54:89:62:dc:9c:b0:dc:16:a8:d8:15:c7:ec:
         77:66:74:b4:33:bb:68:2f:7d:72:72:2e:a3:cd:ac:67:01:54:
         65:11:26:59:52:ac:62:04:b3:44:de:ac:8d:6c:1d:8f:61:46:
         52:e2:92:65:ea:26:c9:67:1a:37:6c:a2:d1:e0:d6:b5:2f:52:
         fd:6d:a6:36:15:2e:96:24:69:ff:6e:b6:5d:fa:42:ea:ce:6e:
         56:5d:29:cf:19:91:81:49:67:09:b4:3e:88:ce:ca:64:c7:e8:
         d5:84:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:33 2023 by rpki-client on console-fra.rpki-client.org