Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45495a68-e378-4be3-9c46-d5325d7e4471/282c9a1b-aaf9-30e9-b35a-951f0af40182.roa
File:                     282c9a1b-aaf9-30e9-b35a-951f0af40182.roa (raw, json)
Hash identifier:          NWL2Yend2JrN3U+PsR/n69LvdyfR7IZm2enTDLO53UQ=
Subject key identifier:   73:90:8A:6A:B9:67:8E:CE:A4:95:A0:87:5C:F3:1E:28:6C:50:F4:67
Certificate issuer:       /CN=45495a68-e378-4be3-9c46-d5325d7e4471
Certificate serial:       010D0C9F432858389748061EED9141CB870D9600
Authority key identifier: 6D:FB:2A:EB:62:6F:1A:64:E4:47:1D:F0:90:E8:3C:E5:F4:3B:B3:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45495a68-e378-4be3-9c46-d5325d7e4471.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45495a68-e378-4be3-9c46-d5325d7e4471/282c9a1b-aaf9-30e9-b35a-951f0af40182.roa
Signing time:             Thu 07 Jan 2021 05:00:00 +0000
ROA not before:           Thu 07 Jan 2021 05:00:00 +0000
ROA not after:            Mon 17 Apr 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        192.31.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:97:48:06:1e:ed:91:41:cb:87:0d:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45495a68-e378-4be3-9c46-d5325d7e4471
        Validity
            Not Before: Jan  7 05:00:00 2021 GMT
            Not After : Apr 17 04:00:00 2023 GMT
        Subject: CN=00f92829-e403-4bec-9575-3c337ebced3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:86:45:be:7e:c7:f2:38:6f:61:1d:61:8c:
                    91:6c:0b:d5:ec:5b:a2:27:33:d1:40:37:87:7e:bb:
                    fb:42:71:97:3f:fa:d8:d3:b6:3b:3c:c7:20:0b:5c:
                    29:71:cb:53:e6:96:e1:48:9e:4d:94:80:ad:8a:e4:
                    a6:83:ba:24:24:7a:ce:ab:50:70:41:09:f7:f3:3e:
                    d0:95:a5:2b:e3:35:64:50:c2:36:29:4c:9d:16:d5:
                    8b:5f:be:a8:ff:70:7f:00:ba:cc:c1:79:76:0e:1f:
                    42:a6:a4:82:9d:04:71:5c:da:1b:c1:c9:00:85:97:
                    ea:09:0f:69:ce:78:76:fb:f2:8b:06:53:0f:e5:8f:
                    03:62:4e:d4:8e:43:57:b9:19:a2:c2:90:fb:ae:a1:
                    b1:3c:2e:55:de:13:fe:2b:23:be:be:c9:fb:cd:d4:
                    df:4c:ae:e7:e5:12:bf:f7:5b:02:3f:91:83:11:15:
                    60:10:ee:3a:e8:95:2a:3f:c5:2d:a0:59:06:e9:11:
                    5f:48:34:d4:c7:4b:d1:61:8c:b7:bb:d2:68:39:8a:
                    26:e8:ff:23:de:e8:4a:ad:3b:a2:47:66:2b:88:6a:
                    9e:90:bc:bd:b3:8d:e2:c1:c2:97:d7:a0:93:5e:85:
                    66:20:57:d6:c1:b9:67:0b:c4:d4:fb:5f:bc:47:0a:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:8A:6A:B9:67:8E:CE:A4:95:A0:87:5C:F3:1E:28:6C:50:F4:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45495a68-e378-4be3-9c46-d5325d7e4471/282c9a1b-aaf9-30e9-b35a-951f0af40182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45495a68-e378-4be3-9c46-d5325d7e4471/45495a68-e378-4be3-9c46-d5325d7e4471.crl

            X509v3 Authority Key Identifier:
                keyid:6D:FB:2A:EB:62:6F:1A:64:E4:47:1D:F0:90:E8:3C:E5:F4:3B:B3:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45495a68-e378-4be3-9c46-d5325d7e4471.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cf:6e:da:7d:d2:6f:59:77:a3:1f:db:38:3c:82:83:78:09:
         5e:d0:94:8d:a5:f0:f6:95:96:b8:02:73:c7:03:cb:7c:94:c3:
         17:d8:d1:b5:06:d5:53:55:60:fb:c2:f6:95:3f:ce:ac:73:c3:
         c5:4b:b1:1f:9c:e8:8a:b4:6e:7b:20:33:98:62:bd:42:40:9d:
         65:e5:c3:19:fc:53:49:52:87:0a:58:19:7c:50:aa:30:f9:37:
         8e:15:9b:61:14:dc:e0:df:3f:fb:f5:e2:b3:33:4b:9c:f9:81:
         ea:d8:43:bb:43:07:2d:cd:45:a7:ae:2a:ce:a3:6b:db:6b:24:
         0d:0a:da:4b:06:2a:e1:8c:ae:40:0c:2d:d7:f3:50:ba:52:9b:
         1f:75:6d:ba:02:ee:26:d6:9a:c6:d5:8d:f0:40:a3:0a:2d:ab:
         7c:4a:6b:ef:b3:91:55:49:f4:21:16:cf:99:b1:76:79:47:51:
         a7:fe:dd:a4:8a:e0:a4:ce:68:a5:f2:a9:21:0c:4c:76:e5:14:
         33:90:ce:62:bf:77:f1:b6:8a:12:1f:4b:2c:94:cf:e2:b7:d6:
         f9:5b:5c:14:14:20:6e:12:63:47:40:31:23:48:41:d4:74:01:
         8c:32:ce:31:29:fd:93:7f:4a:1b:b4:6e:54:64:2b:92:51:ab:
         ec:84:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org