Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/45b736c5-4145-38f3-b891-e425086fee65.roa
File:                     45b736c5-4145-38f3-b891-e425086fee65.roa (raw, json)
Hash identifier:          m5pBKLRiitQJPcbDcbgNvodkRoM1azqVpLWAwDo47Wc=
Subject key identifier:   6C:F8:95:5D:F8:7C:8B:E1:C4:8E:DC:9C:05:92:ED:2A:BB:A0:33:30
Certificate issuer:       /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
Certificate serial:       010D0C9F43285841E44782B3E22519BA5D3DC700
Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/45b736c5-4145-38f3-b891-e425086fee65.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 04 Jun 2023 04:40:43 +0000
asID:                     398697
IP address blocks:        161.199.230.0/24 maxlen: 24
                          161.199.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:82:b3:e2:25:19:ba:5d:3d:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun  4 04:40:43 2023 GMT
        Subject: CN=ebb6d532-7815-4f4a-b9f7-9ae04998a5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:41:83:d6:bd:72:f5:2a:82:ad:2c:07:f7:e8:
                    60:b7:f5:a5:c2:b4:34:64:3e:6c:e3:30:a9:44:87:
                    41:38:17:28:b1:b2:7a:d6:aa:19:6f:51:b0:c5:d7:
                    54:c7:72:a7:ca:b2:47:33:a5:9e:ff:0b:02:c9:38:
                    e8:0e:97:1c:88:6d:de:57:bb:44:85:b1:66:e7:15:
                    b8:ef:b2:91:18:fc:a4:72:ea:77:0b:72:7f:98:cf:
                    82:6a:34:19:73:e9:66:99:4a:24:e7:34:b1:0e:65:
                    c4:7a:da:06:67:9f:62:98:9e:18:bc:6a:cc:d6:9e:
                    b9:5b:65:3d:04:65:a1:50:f1:31:ef:27:62:a5:82:
                    ab:9d:cf:68:e0:40:e6:3c:87:64:34:12:cf:88:5a:
                    24:aa:67:2b:f2:01:78:03:64:bd:6c:dc:ee:21:54:
                    8f:d4:16:55:17:ac:ed:1c:ea:9c:97:e3:c3:28:71:
                    be:bc:f9:32:ff:25:59:43:82:8a:9e:32:e2:ed:48:
                    36:57:23:b5:14:39:3c:42:8a:18:ea:6d:2c:aa:66:
                    cd:23:82:5a:6e:98:c8:46:e0:df:02:4a:b0:06:a9:
                    53:85:f7:14:50:55:de:c9:4a:f5:f1:3e:df:1c:98:
                    ce:cd:1e:08:76:96:a7:3e:21:2f:ef:1e:8e:61:54:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:95:5D:F8:7C:8B:E1:C4:8E:DC:9C:05:92:ED:2A:BB:A0:33:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/45b736c5-4145-38f3-b891-e425086fee65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl

            X509v3 Authority Key Identifier:
                keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.203.0/24
                  161.199.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:15:af:d5:12:24:e5:41:93:6a:2f:9d:f2:e4:ff:f6:87:
         d6:af:a3:fe:98:fd:83:6b:14:03:bf:c5:de:f5:5f:02:aa:a0:
         7f:4e:d8:9b:18:f8:bc:50:bf:8e:f8:21:37:a0:49:4f:e4:c4:
         ca:2b:42:1b:d2:26:39:13:01:c0:12:0c:46:ac:76:7f:50:8e:
         f7:d5:ba:d2:8d:74:a0:dd:36:6d:c0:f9:da:1e:83:df:72:ae:
         e7:9d:39:23:64:aa:2d:90:b6:dd:c6:72:08:2f:e2:ba:43:a3:
         f3:8d:f6:4d:74:b1:4b:e4:eb:f2:06:2a:67:ad:fa:81:24:4e:
         ac:ed:00:52:84:0d:36:9e:b1:51:37:70:96:e0:6a:4e:4b:f3:
         10:23:94:5d:dd:5a:dd:04:65:64:23:e2:b0:98:0d:d5:1b:26:
         c2:c5:aa:86:59:60:70:e3:4c:4c:83:d7:b2:71:a0:e9:2b:58:
         79:2e:68:6b:aa:7b:54:23:58:af:63:74:8a:c6:c1:2d:90:7d:
         11:d6:7d:56:f8:e7:55:b5:94:b5:44:7b:b9:7d:3b:7b:f0:a1:
         57:47:14:7f:e0:8c:fd:63:8c:82:21:46:92:91:3b:bf:7e:99:
         81:67:a7:a1:8f:b7:4a:23:ae:ab:00:9f:01:54:de:27:ea:35:
         e0:e1:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:28 2023 by rpki-client on console-ams.rpki-client.org