Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/f4b185ab-498f-33eb-bcf4-60aa8c228acd.roa
File:                     f4b185ab-498f-33eb-bcf4-60aa8c228acd.roa (raw, json)
Hash identifier:          X+QdBsg3UoriFJ5TaTXhrXFvC66ZS9dyxutnNqmnMy4=
Subject key identifier:   1D:43:5E:F8:83:14:8C:41:34:A6:2E:72:7D:5E:7A:23:47:31:01:A5
Certificate issuer:       /CN=8eaae964-4641-4ed7-82e7-85ca167b427b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17126CEC84E
Authority key identifier: FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/f4b185ab-498f-33eb-bcf4-60aa8c228acd.roa
Signing time:             Sun 29 Mar 2020 15:00:18 +0000
ROA not before:           Tue 24 Mar 2020 04:00:00 +0000
ROA not after:            Sat 02 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.192.12.0/24 maxlen: 24
                          199.192.13.0/24 maxlen: 24
                          199.192.14.0/24 maxlen: 24
                          199.192.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:26:ce:c8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaae964-4641-4ed7-82e7-85ca167b427b
        Validity
            Not Before: Mar 24 04:00:00 2020 GMT
            Not After : Jul  2 04:00:00 2022 GMT
        Subject: CN=28e9efac-e220-43bb-bd94-f27366962581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:ed:55:07:1f:8d:80:86:e6:9f:25:68:6b:
                    71:c2:e1:e2:2d:9e:26:6f:f1:2b:dc:70:6e:b0:95:
                    2b:00:3d:26:b6:98:c4:e2:06:d8:6e:0e:43:da:09:
                    a7:09:31:61:a2:13:85:52:5b:03:27:89:af:c0:39:
                    fa:f0:85:de:f3:fc:9d:5d:f1:87:b6:f5:31:a2:3a:
                    04:a0:3d:c9:ae:b6:47:28:a1:30:c6:d2:14:d8:74:
                    f0:ff:e9:a4:14:00:fd:cc:7d:13:0d:11:ef:17:20:
                    5b:2b:17:b7:2b:96:d2:6a:80:76:17:36:9a:be:40:
                    a5:e8:05:65:64:fa:f3:60:80:6a:78:ae:f1:62:04:
                    f4:0b:8e:8b:24:bc:7a:c0:2f:2d:e2:af:1d:17:ae:
                    ab:9d:3d:54:1f:bd:b7:ab:08:6a:c9:cb:6d:23:4a:
                    59:09:0b:2b:a1:a3:58:83:2f:c3:ac:8e:b7:c4:88:
                    3b:34:1b:67:c4:f1:6a:03:a2:21:8b:d7:26:8d:5f:
                    b4:71:96:f3:21:7e:e1:d4:1b:73:4c:60:a6:df:4e:
                    fb:4a:09:08:ed:8e:af:86:7e:a5:9d:ff:65:28:a4:
                    dc:ae:97:6d:ca:48:30:a8:92:bf:20:11:e8:12:e3:
                    82:7d:c6:7d:b1:21:ce:86:a3:ff:fb:f1:64:a2:51:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:5E:F8:83:14:8C:41:34:A6:2E:72:7D:5E:7A:23:47:31:01:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/f4b185ab-498f-33eb-bcf4-60aa8c228acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/8eaae964-4641-4ed7-82e7-85ca167b427b.crl

            X509v3 Authority Key Identifier:
                keyid:FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:92:d4:e3:0e:8c:36:18:58:52:9e:ef:a0:22:2d:98:12:a9:
         e7:d0:be:bf:ef:08:a6:0f:2d:9f:22:39:f8:e3:2e:2b:9a:41:
         ad:9f:bc:63:9d:24:f2:08:fc:70:25:ea:26:6a:49:a4:ca:6a:
         28:81:5c:d2:a8:ba:6c:e7:c4:8c:27:b7:0f:54:7e:73:d9:1b:
         b0:17:39:03:bd:a5:36:03:a3:3a:9c:3b:34:25:43:88:0c:7a:
         99:ea:36:29:08:9b:4e:6d:98:1f:61:35:a8:f5:59:fb:b7:9e:
         21:0a:4e:ef:23:c1:54:6d:53:43:43:91:7c:14:50:e1:4f:b7:
         31:67:b8:ca:d8:f3:34:9f:69:e3:1f:c4:c5:aa:a5:20:18:fa:
         3c:db:0e:41:26:ca:20:fc:eb:1b:0c:6d:0e:45:22:2d:04:14:
         82:c4:4c:bb:f8:a8:99:79:d6:4d:43:c5:56:6a:44:e4:b6:52:
         3b:dc:5e:1a:67:78:ec:37:ce:68:80:4e:76:38:28:1f:29:73:
         c0:d6:de:d1:ce:6b:80:78:d5:83:a5:df:d8:da:67:d7:30:bf:
         32:b6:86:78:d1:be:4a:38:21:05:5c:36:cc:bb:34:b4:dc:09:
         d1:5f:e5:1f:f2:ad:1a:8f:8b:14:3f:c2:bc:cd:50:57:c5:04:
         04:30:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:31 2023 by rpki-client on console-fra.rpki-client.org