Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/b87d2d4c-1e00-3ca5-aa4f-d2e4c77d517c.roa
File:                     b87d2d4c-1e00-3ca5-aa4f-d2e4c77d517c.roa (raw, json)
Hash identifier:          TG02mtEhzqxgz6wipJH0I3arj3BnYIhz+WPFcPbotDY=
Subject key identifier:   94:49:81:C7:D1:5F:A8:ED:6A:03:88:97:4D:F0:FF:FE:1A:8F:5A:AC
Certificate issuer:       /CN=d8308179-dac5-4523-ac26-62164ec5c58a
Certificate serial:       010D0C9F43285838C0A5F0D8FA1A50A5FDBD1C00
Authority key identifier: AB:94:0B:E7:BE:4E:89:8B:54:EA:1B:FA:7E:8F:E5:62:85:3C:87:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/b87d2d4c-1e00-3ca5-aa4f-d2e4c77d517c.roa
Signing time:             Wed 27 Jan 2021 05:00:00 +0000
ROA not before:           Wed 27 Jan 2021 05:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     398930
IP address blocks:        23.167.112.0/24 maxlen: 24
                          2605:fd40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c0:a5:f0:d8:fa:1a:50:a5:fd:bd:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8308179-dac5-4523-ac26-62164ec5c58a
        Validity
            Not Before: Jan 27 05:00:00 2021 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=5b26794e-8756-48b5-aa3b-bd397d3352db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:af:12:2f:9d:ca:e0:b0:b5:7e:9d:7c:14:
                    49:09:b9:87:9c:73:82:0a:ef:1b:89:cb:29:5a:18:
                    1d:0a:22:e4:35:51:1f:24:ba:70:06:33:fe:20:6f:
                    dd:e2:78:38:83:01:3d:44:e1:ae:66:7c:6a:85:29:
                    55:0b:25:53:ab:3c:f6:c5:c9:06:4d:f0:44:22:4d:
                    2f:cb:03:25:21:97:c5:b8:e5:9a:5c:9b:fd:03:b2:
                    23:8d:85:29:66:b3:21:1f:e6:e4:69:d1:4e:ba:30:
                    91:e8:ed:cb:63:76:10:51:b4:40:0c:9c:1f:ec:de:
                    d4:04:fd:d8:59:4e:d4:60:cb:ff:55:1e:36:1a:7b:
                    d3:19:2d:79:8f:78:ec:dc:a8:f6:51:7d:7a:a3:46:
                    5e:a8:8e:bc:ae:99:b8:89:b6:70:8f:80:1d:a8:9d:
                    38:ec:be:fa:6d:62:23:6c:90:6e:2b:f1:d7:ba:89:
                    9a:5a:2e:d6:02:5d:85:da:52:f5:7b:1e:2d:6b:ee:
                    0c:f9:54:7c:ac:d4:4b:91:42:e8:72:b8:97:94:04:
                    43:be:a7:ff:19:9e:3f:74:de:e7:4a:b6:52:cc:66:
                    0f:aa:50:35:2e:a1:9d:b8:22:16:d4:05:59:47:29:
                    53:aa:76:80:b3:ef:f2:78:63:02:2d:94:64:26:a2:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:49:81:C7:D1:5F:A8:ED:6A:03:88:97:4D:F0:FF:FE:1A:8F:5A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/b87d2d4c-1e00-3ca5-aa4f-d2e4c77d517c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/d8308179-dac5-4523-ac26-62164ec5c58a.crl

            X509v3 Authority Key Identifier:
                keyid:AB:94:0B:E7:BE:4E:89:8B:54:EA:1B:FA:7E:8F:E5:62:85:3C:87:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.112.0/24
                IPv6:
                  2605:fd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:59:03:04:2b:cc:aa:2b:96:59:8d:1d:2b:af:b1:5c:99:26:
         88:b7:8f:1c:ca:e0:ed:73:b1:df:5e:07:b8:07:a5:9c:7f:61:
         67:04:8a:a1:94:e5:7a:20:c1:7c:d5:3a:9b:03:8b:d9:dd:01:
         9c:a1:2d:49:1f:77:33:1e:a8:e2:2b:c4:fe:ed:8a:7b:20:8e:
         dc:5e:f0:21:42:b0:9b:dc:b2:4e:86:ef:01:f7:be:91:c8:3b:
         c4:7e:3d:f1:e9:a5:5a:6d:2b:1f:dc:99:05:8b:44:38:9b:54:
         66:0f:1a:78:bd:34:85:af:35:0d:95:dd:98:44:e4:50:01:74:
         57:94:06:d1:c4:73:a5:6e:f1:05:25:db:ce:41:41:4d:df:44:
         1d:b6:4e:b9:c8:0e:14:42:40:b9:be:e1:ed:10:11:74:5f:53:
         50:39:65:30:da:e1:42:88:5a:98:74:eb:6e:fc:cc:8c:c9:ad:
         be:8e:45:08:0d:a9:8c:87:70:6e:09:2c:d9:b5:34:eb:21:63:
         d5:e4:fc:03:f1:03:c9:4c:a5:39:35:84:bf:06:53:6b:6e:b9:
         f7:91:25:dd:51:03:7f:47:a0:c8:a3:1b:06:53:17:cc:65:ab:
         94:c4:fc:70:d3:6d:6f:44:02:9b:fe:05:8b:39:ee:58:11:4a:
         ff:73:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:43 2023 by rpki-client on console-ams.rpki-client.org