Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/b054858d-c31d-39ac-9f29-fb3a14c19e09.roa
File:                     b054858d-c31d-39ac-9f29-fb3a14c19e09.roa (raw, json)
Hash identifier:          qV2FtxU1pw9Ue7/jWdEr/cGg3epJrPZfPEl9Te9bIO4=
Subject key identifier:   AF:47:C1:99:1B:BB:85:FE:7F:2F:19:5C:A5:23:59:57:1E:B1:38:5B
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F43285841E4477F3D885F5A62F697F280
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/b054858d-c31d-39ac-9f29-fb3a14c19e09.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sat 03 Jun 2023 23:23:19 +0000
asID:                     40183
IP address blocks:        68.68.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:7f:3d:88:5f:5a:62:f6:97:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  3 23:23:19 2023 GMT
        Subject: CN=44e80880-7db9-426f-8c5c-3e26da9b7e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:4d:40:3e:58:e1:b8:71:b8:2a:f1:ec:3b:
                    ad:34:d7:60:aa:c2:36:65:6d:d6:6a:9f:23:47:c3:
                    50:f8:a2:44:ce:6b:f6:5f:8b:15:c4:bc:64:68:c4:
                    35:ca:c8:89:7c:ae:9a:fa:4d:8f:26:45:2c:ba:59:
                    97:71:60:28:89:7d:61:39:b3:39:d4:2c:b6:2d:3a:
                    f0:96:7d:c2:f9:00:76:3e:0d:2e:90:63:64:ac:34:
                    19:6b:9e:b9:50:48:6d:f5:3b:a7:92:96:65:e4:31:
                    2d:db:b9:1d:42:58:18:ee:76:35:fc:01:13:08:59:
                    c1:8d:47:76:6a:11:35:cf:fa:bf:a1:31:36:08:cb:
                    98:e4:6d:c9:42:19:dc:52:fd:6e:15:a2:17:91:ba:
                    57:96:49:7d:63:cc:74:86:99:60:d7:b1:d7:dd:31:
                    00:44:8d:78:a0:87:57:52:0d:34:06:27:a1:9c:54:
                    47:55:59:bc:42:58:7c:61:5a:6f:1f:77:67:16:57:
                    17:f3:1e:f9:1f:6a:35:19:19:44:bb:f8:23:52:08:
                    22:d3:27:18:25:a6:d1:b3:82:c0:52:8c:20:93:76:
                    ff:36:fd:ec:10:bf:58:8d:69:cf:90:04:2c:84:ff:
                    73:b6:b3:c8:09:e6:b1:77:77:fc:5b:73:96:0b:68:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:C1:99:1B:BB:85:FE:7F:2F:19:5C:A5:23:59:57:1E:B1:38:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/b054858d-c31d-39ac-9f29-fb3a14c19e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:4b:24:2e:55:0b:97:48:fc:30:98:f5:d6:0d:ad:f9:94:
         e7:07:19:bd:c8:a3:c8:34:7c:48:26:fb:88:31:37:48:b2:91:
         df:06:c8:e3:1b:c8:9b:d4:1f:04:94:5f:75:8b:fa:a1:63:23:
         b2:59:8d:40:93:35:e9:e1:e6:1a:8a:24:9c:dd:8f:00:dd:b1:
         3f:f2:d3:9a:b4:2e:d1:4e:ce:57:01:00:cc:1a:67:92:5a:8b:
         c5:ae:74:b6:ca:2d:f5:91:87:da:14:da:34:6f:14:fb:78:4b:
         45:dd:36:6d:17:07:fa:7a:f4:62:c8:88:57:9f:9a:67:5e:9b:
         ba:5d:44:1a:10:08:14:b0:8e:13:3a:c1:78:a7:0f:aa:ad:1d:
         5d:81:8d:c7:34:3c:8e:68:7f:db:c1:dc:de:26:5d:54:4e:dd:
         f3:e7:67:48:91:72:79:3f:08:a5:ff:c0:47:2d:96:cf:9e:34:
         a2:ce:39:68:bb:a9:b6:e2:72:a8:79:35:d4:be:d4:f3:3a:42:
         60:90:57:63:b9:e3:98:03:8c:fb:eb:e0:fb:0e:95:e5:3f:3d:
         c8:fc:1f:64:34:e6:78:6d:cd:81:10:76:7b:69:fb:e7:e4:00:
         ef:78:83:43:05:69:9f:ef:66:98:c8:fa:f9:9b:65:30:03:2b:
         b6:3f:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org