Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e476eac9-c839-34dd-8554-fa581fd4efc1.roa
File:                     e476eac9-c839-34dd-8554-fa581fd4efc1.roa (raw, json)
Hash identifier:          GyCVITmkFpMKcAeRpzysxRUL6qfa9nwT0VtTUebhR9M=
Subject key identifier:   C3:3D:F6:1B:F6:81:7D:FE:C9:21:69:5A:81:C1:18:9A:AF:B3:22:52
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583E7CFB5DBF7C810014AE453600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e476eac9-c839-34dd-8554-fa581fd4efc1.roa
Signing time:             Thu 08 Jul 2021 16:58:24 +0000
ROA not before:           Thu 08 Jul 2021 16:58:24 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     205272
IP address blocks:        161.69.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7c:fb:5d:bf:7c:81:00:14:ae:45:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul  8 16:58:24 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=ececcf9b-9a5d-4df2-8414-e010a88d9c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:f8:c2:f9:85:bf:74:27:5f:0a:86:cc:0d:
                    2e:aa:ee:67:f0:72:d2:f0:a9:d2:1c:f3:1b:29:f0:
                    75:da:8d:2f:3e:53:94:54:bf:0d:9e:e1:70:cc:f1:
                    67:b3:0c:86:68:07:9f:da:ab:8e:b6:aa:d6:32:5d:
                    cf:a1:bd:5d:28:81:bd:0b:46:0a:95:be:63:12:c7:
                    e6:8d:bc:f5:bc:d3:d9:41:12:62:ca:86:50:83:10:
                    33:13:ff:4a:36:0d:2f:72:16:0f:58:ae:03:1a:16:
                    ef:51:82:1e:49:23:65:00:6b:a5:50:95:c2:fa:30:
                    2b:0c:79:af:ef:e8:a0:3a:02:97:41:d5:90:03:b1:
                    35:5f:a4:53:e0:7d:e8:3a:17:28:3d:bc:b6:2e:0a:
                    ed:b2:ed:bf:ea:3c:01:25:34:b3:b1:e8:fc:f8:5f:
                    80:7c:71:27:d3:57:41:e7:d3:55:2e:33:25:b1:e6:
                    96:9a:4d:2e:2c:b4:b9:f4:08:fb:69:9b:25:1f:59:
                    b5:0d:4f:d9:d1:d4:c9:3e:04:f7:d6:c0:0b:35:33:
                    20:e4:fb:73:1e:8e:f8:33:87:5a:77:aa:30:fd:5b:
                    97:4d:ad:98:96:09:15:d2:c3:57:2a:81:32:e0:07:
                    32:7c:76:07:70:4b:30:78:85:96:06:6f:ed:4e:a1:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3D:F6:1B:F6:81:7D:FE:C9:21:69:5A:81:C1:18:9A:AF:B3:22:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e476eac9-c839-34dd-8554-fa581fd4efc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:be:27:d5:86:f1:f6:58:8b:4b:57:24:44:a1:8e:23:ac:e9:
         ab:1e:f8:78:6b:10:f2:55:d2:86:2c:3b:b9:ab:88:cf:95:71:
         a7:a7:47:ec:21:fa:bb:5c:0e:88:4d:05:52:37:81:2a:d5:43:
         c5:e6:17:ae:55:03:27:4c:dc:7e:65:08:b8:66:c5:84:ad:e3:
         96:eb:c2:56:4a:45:00:31:6d:30:f3:04:6d:f2:d6:e0:95:a4:
         fd:f4:e5:9b:30:de:d6:ac:0f:c9:d3:1d:4b:0e:ce:6f:80:e6:
         bc:6c:26:a0:59:00:2b:df:73:27:4e:5b:a7:0b:bc:8a:09:18:
         3f:63:13:7b:9f:b6:59:f1:54:14:8b:bf:8b:ac:c7:09:c8:ef:
         67:4e:c4:44:b3:41:66:3f:5c:e2:71:f6:a1:98:f9:bd:f6:a8:
         57:7d:68:2b:13:7f:4a:65:fd:f9:09:f6:bf:b8:80:24:44:87:
         25:84:66:77:69:84:cf:f5:20:70:cb:e8:16:58:51:27:57:f5:
         bd:f6:dc:67:6b:08:80:02:5f:68:59:66:7a:9b:93:5f:e7:e2:
         4f:6a:f4:1d:7c:14:f5:8b:60:37:f7:3e:09:dc:95:d5:f7:b0:
         15:92:c4:38:57:de:48:c4:79:bf:ef:18:86:aa:2d:8e:5d:33:
         1c:ed:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org