Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/adcb7308-53c9-3a29-a043-54d8eb71d58e.roa
File:                     adcb7308-53c9-3a29-a043-54d8eb71d58e.roa (raw, json)
Hash identifier:          ucCy1o19kOaLQve1AxQ6T5OqW3eD0jEb6h8M0czdtww=
Subject key identifier:   8A:99:76:7F:ED:18:2D:D2:7F:FF:8F:DA:25:3D:34:31:16:07:31:4B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7ADB9388AC5F348531E15C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/adcb7308-53c9-3a29-a043-54d8eb71d58e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        64.233.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:b9:38:8a:c5:f3:48:53:1e:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=522f6807-e704-48e9-8be2-f5f6255d3fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:93:a0:4a:47:f0:cb:83:44:e1:cc:52:02:
                    0d:48:4b:6b:a4:31:1e:96:42:ad:26:10:00:eb:43:
                    e7:f7:f1:08:46:9c:d0:95:47:04:52:ce:7f:4b:15:
                    44:ac:dc:13:8b:7d:94:d3:f8:ff:ff:1c:90:05:c1:
                    5e:43:b8:9b:d5:dc:0b:29:ae:7e:83:ce:74:f5:b3:
                    2c:ad:8f:4d:1d:37:8b:bf:2d:a8:b3:17:cf:66:ed:
                    2e:68:09:ad:ff:15:14:19:bc:ea:da:a7:63:51:a5:
                    ed:43:52:c9:34:23:78:71:88:2c:91:7a:9c:f8:0f:
                    32:c7:59:c8:b4:1e:d2:c9:4a:4f:d2:ac:6b:cb:f3:
                    b4:0d:42:ec:eb:5d:d2:c1:f4:00:22:31:6d:61:47:
                    c4:d6:73:4f:6d:f6:a2:cb:f8:77:59:42:27:d6:31:
                    59:d3:e3:e0:63:dd:2e:61:de:7d:ae:45:6b:af:82:
                    3e:9d:c7:1f:f8:f5:82:27:89:23:21:34:76:92:be:
                    57:1b:44:50:7e:2e:d5:d2:f0:d0:0c:e4:50:f6:29:
                    67:c9:99:0f:24:af:ac:35:29:f4:bd:24:97:f2:ca:
                    bf:2f:b8:64:07:aa:47:b2:4c:6c:87:7f:bc:e1:b1:
                    f4:0c:8a:04:19:09:f5:8b:8a:cf:67:1c:01:8a:00:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:99:76:7F:ED:18:2D:D2:7F:FF:8F:DA:25:3D:34:31:16:07:31:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/adcb7308-53c9-3a29-a043-54d8eb71d58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:14:08:36:b2:5d:28:a3:9a:07:ce:06:ec:d7:9d:2d:73:06:
         c5:2e:d7:bd:52:6a:24:27:25:c4:99:f0:80:bb:2f:12:d6:d8:
         c5:c2:18:4e:c1:48:75:1f:82:98:90:61:d9:63:74:45:3e:e8:
         71:46:3b:3d:55:4c:f2:f7:c5:30:97:2d:f1:15:66:a8:41:e9:
         0e:e2:3e:cb:9e:16:f5:1f:9b:59:15:c3:0d:14:59:47:23:38:
         da:dc:9e:4a:9a:16:19:dc:5c:b8:7b:51:92:73:90:7c:1e:22:
         f9:6a:6d:e5:4d:af:d6:25:31:e0:f0:7c:f6:37:be:4e:de:f9:
         2e:e0:7a:fe:cb:ce:64:a9:89:d8:04:08:ca:72:df:a5:83:26:
         63:48:63:3b:9a:ab:bf:df:7f:de:06:3a:05:8c:c4:8e:ab:a6:
         10:2a:4f:ef:ed:eb:72:6e:3f:09:a7:5f:25:a9:9f:da:5f:f5:
         a0:05:a7:bf:6d:86:f6:cb:8f:68:6a:df:ec:fc:10:3e:54:2f:
         ff:dc:89:65:2b:0f:96:4b:70:f8:6a:d3:07:20:1f:c0:28:0d:
         24:76:45:9f:84:b3:df:9f:77:d1:4a:06:16:4f:d1:9b:9f:e7:
         1e:f4:4f:65:48:44:44:79:05:9b:9c:95:04:49:a8:52:ea:e5:
         d4:0b:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org