Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4f5bfc5-ef8d-3ca1-9685-4a2253179c8a.roa
File:                     b4f5bfc5-ef8d-3ca1-9685-4a2253179c8a.roa (raw, json)
Hash identifier:          u91BXMxB8xDr7hq8yuhQzKVKceFCeb86TwxcEfUQwVE=
Subject key identifier:   F8:E1:D6:0F:71:A2:D8:E4:09:F9:2F:9F:FA:16:50:2D:C8:D6:F4:B0
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7A0465B17275E5C8CB6AE5A
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4f5bfc5-ef8d-3ca1-9685-4a2253179c8a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        108.177.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:46:5b:17:27:5e:5c:8c:b6:ae:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=06d8a039-58d5-4be0-b0e1-5e1477a71b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:5b:3e:2a:a2:98:f3:d7:03:f7:bf:53:f3:
                    62:ad:fa:97:2e:7d:74:23:80:43:6e:e6:2f:d6:6d:
                    4b:70:c7:9b:1d:0a:95:4f:83:dd:c5:0b:75:6d:41:
                    7b:87:6c:db:51:8c:6d:f6:3c:0f:78:63:b7:22:38:
                    ec:36:5a:e3:d7:bb:c8:05:de:b5:e9:c5:39:ff:b9:
                    ea:57:e6:7f:13:90:4c:a4:d9:44:2f:09:de:d1:b4:
                    97:be:01:70:4d:85:80:f9:27:a1:cf:bb:5b:5b:0c:
                    60:59:2c:ed:c4:6c:73:04:87:57:a8:12:2b:43:88:
                    32:92:b9:dd:57:42:58:77:f7:f3:43:3a:51:96:f0:
                    e7:93:7e:21:ac:c3:94:a2:2e:69:ca:ea:a3:42:47:
                    e6:9b:53:46:3b:65:7d:d7:ac:9a:0b:f0:41:41:45:
                    c1:a5:85:f2:f3:8b:bb:f6:7d:7c:b2:8c:1b:5a:ce:
                    2c:ed:af:bd:ba:08:f1:dc:00:f5:9c:34:51:8e:93:
                    29:c4:49:68:48:b5:5d:8e:fb:b8:19:be:98:71:42:
                    1f:13:dd:4e:30:9c:e2:0a:db:04:89:ec:80:d8:78:
                    af:86:b5:12:ba:8b:34:98:4a:98:14:97:93:b8:1b:
                    c5:fb:f1:ef:71:c7:52:3a:ce:37:d3:f0:54:af:52:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E1:D6:0F:71:A2:D8:E4:09:F9:2F:9F:FA:16:50:2D:C8:D6:F4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4f5bfc5-ef8d-3ca1-9685-4a2253179c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:e2:3a:34:84:7e:09:96:41:3f:da:03:63:e0:ac:37:17:
         c4:80:1f:47:84:a3:84:fc:d6:4f:c6:31:a2:18:4a:81:07:54:
         a8:b3:3b:aa:46:3e:f1:be:ff:ba:5f:fe:a3:76:2a:df:45:a5:
         98:fc:bc:83:e9:39:3e:df:38:95:9b:76:a5:45:c0:4d:36:f2:
         34:60:85:44:f5:e4:ba:36:08:ad:51:f4:79:81:f1:11:34:e4:
         96:a3:91:91:58:f0:dd:2e:f4:f1:c7:b9:ed:89:c8:4f:2e:c4:
         94:7c:1c:49:26:fb:be:94:ca:21:aa:02:03:37:1b:6d:4d:94:
         db:cc:1e:4c:3f:72:af:68:d2:a1:22:72:81:05:cc:a3:ae:96:
         10:fe:87:fc:cd:47:e8:3b:1c:6c:8b:76:41:98:af:6c:5f:77:
         5f:bc:77:82:ee:28:bd:15:f9:57:32:bb:5e:f3:86:6c:3b:d3:
         83:4e:25:9c:a2:24:56:42:81:b1:b4:88:27:be:1b:21:0f:4f:
         29:2f:93:7b:b4:38:03:31:db:04:70:4d:ef:81:4a:90:a2:e2:
         e7:11:f6:1d:45:bd:fe:54:8c:e0:1b:96:d8:45:4a:20:65:da:
         24:f3:93:ea:3b:6e:eb:e9:a5:a2:e9:8b:eb:0e:e4:29:60:c7:
         98:e1:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org