Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6503f46d-e578-3a59-abd7-99edc134f2d7.roa
File:                     6503f46d-e578-3a59-abd7-99edc134f2d7.roa (raw, json)
Hash identifier:          9h0pEm9W+dBr+CiXwb1O+CK/9oPpthFkeTd6V5Hnqj0=
Subject key identifier:   71:78:00:A9:5C:B2:DC:2C:55:76:B2:80:A6:BC:4A:56:C2:CA:41:BD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7A052E71456EC6934A0ED00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6503f46d-e578-3a59-abd7-99edc134f2d7.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        108.170.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:52:e7:14:56:ec:69:34:a0:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b8062094-6c3a-4f25-aa61-d9bb801ae912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:74:c7:12:0b:b0:63:25:80:20:4e:65:08:
                    11:b5:cd:55:64:ca:1d:69:aa:79:e9:27:19:f5:eb:
                    d7:ef:b8:0b:dd:0e:ef:31:b1:57:4f:f8:37:df:bf:
                    6d:23:a0:b8:17:c3:8d:8b:22:ea:01:9e:d6:29:f2:
                    ec:9f:c0:8f:e0:cf:ba:19:36:2b:ea:06:0b:4a:74:
                    bd:97:79:0a:28:bd:f4:3a:7c:79:dd:f5:8d:1b:17:
                    3d:f2:eb:c5:a7:79:a7:de:e7:b7:0e:ae:bc:4c:1c:
                    98:48:ec:21:c0:68:fe:58:8a:f2:3e:c1:33:fa:65:
                    ea:ed:51:68:da:96:0e:37:c4:52:ca:83:82:99:04:
                    64:eb:23:5c:66:3e:f5:3e:09:25:2c:65:fc:0c:e6:
                    65:87:4f:a4:ed:92:29:a7:fa:bf:bd:b0:6d:70:34:
                    a7:fa:d9:26:3e:c9:8b:43:ee:85:fc:c3:ca:ed:6d:
                    9c:24:f9:ff:04:1a:81:55:1d:17:be:f7:31:0c:df:
                    56:1d:bd:f1:f9:29:d7:b4:80:63:f6:6f:9e:10:6c:
                    27:cf:b3:a7:d6:e5:47:dc:6f:d8:7c:c1:41:57:08:
                    20:d7:e0:90:a5:fa:c7:46:f8:ae:67:21:83:7e:6c:
                    f5:52:b7:e2:19:2e:98:6e:7d:b7:2f:e9:51:36:79:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:00:A9:5C:B2:DC:2C:55:76:B2:80:A6:BC:4A:56:C2:CA:41:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6503f46d-e578-3a59-abd7-99edc134f2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f8:f4:c3:cf:da:4c:3e:62:31:99:11:09:31:65:ab:dc:81:
         24:3f:f8:1e:c9:c0:86:a6:d3:0c:e8:03:79:f3:b7:fa:03:39:
         9c:15:b8:8c:72:a1:36:9d:4a:15:ca:39:a3:79:1b:85:c6:eb:
         2e:f9:22:fe:8c:4b:d7:c3:04:f9:37:01:4b:b5:bf:8b:98:fb:
         ae:32:94:b1:12:72:ef:c6:dc:e9:89:9d:8f:e0:f7:30:40:ce:
         8f:11:f4:d3:0b:25:77:b2:e0:a2:eb:64:66:6f:db:db:9a:26:
         dc:06:43:f4:f8:68:3d:ed:fe:9f:c8:2e:14:09:76:f6:4e:c5:
         d7:af:08:dc:7d:ee:16:59:5e:27:3f:7a:a0:92:89:49:83:8f:
         cf:3b:02:90:b8:7c:ac:7e:03:2a:46:73:e6:f1:7e:51:a5:25:
         81:b8:cb:82:74:bd:8f:f7:7e:a6:f4:7b:d7:1d:95:fc:fa:87:
         9e:9d:e7:90:be:3f:f3:3d:8a:41:a8:e8:73:0a:5e:b5:2a:30:
         ac:f0:e7:c0:6e:2e:54:29:21:88:28:bf:64:c0:d8:cb:93:29:
         b7:a5:af:47:ed:84:94:90:fa:67:77:71:06:ef:53:d3:d8:88:
         85:c7:97:aa:e7:b6:df:9a:63:00:65:49:1d:82:c9:62:e2:5b:
         80:9e:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org