Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/2738ea83-f8c1-32f5-9df6-3558dbbeaebe.roa
File:                     2738ea83-f8c1-32f5-9df6-3558dbbeaebe.roa (raw, json)
Hash identifier:          d6aH+9KcC863QfeJ0xfTiqoT4Vjo5gprrFaLZKrDN9E=
Subject key identifier:   A1:62:59:2B:68:CA:49:AB:F5:F3:EE:3E:DB:C0:2F:21:34:6D:E6:D6
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F43285837DBBFF1BF3C0818ACDFE72C40
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/2738ea83-f8c1-32f5-9df6-3558dbbeaebe.roa
Signing time:             Fri 06 Nov 2020 05:00:00 +0000
ROA not before:           Fri 06 Nov 2020 05:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        199.201.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:db:bf:f1:bf:3c:08:18:ac:df:e7:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Nov  6 05:00:00 2020 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=9448a3d6-a18c-4404-b873-3d2f49a7cbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:5a:5a:a3:ae:c0:cd:c5:c2:96:88:6b:24:
                    0a:2b:d8:8b:15:a5:08:76:f4:04:4b:b3:8f:94:5a:
                    d9:85:59:c3:4e:75:3c:b5:bb:00:b4:04:99:b3:91:
                    f8:9b:4e:ab:bc:41:fe:16:06:35:29:ea:dc:06:9d:
                    df:81:ac:e4:6c:30:f1:26:23:11:69:36:c9:bc:e8:
                    05:e5:2d:83:6b:26:c1:6e:09:6c:6e:5d:8d:c1:5f:
                    23:1b:af:85:18:2e:95:10:82:e9:9c:7c:26:e7:1a:
                    9e:21:30:ca:fd:d9:8b:30:34:06:61:00:01:93:6d:
                    5e:d6:4f:78:b2:c5:f6:18:de:7b:90:e5:72:7c:8c:
                    e2:a7:47:8c:98:dd:25:e6:b5:63:4e:b4:cd:8a:f1:
                    a0:59:ea:00:9b:34:1d:6d:7b:c7:7c:46:de:7f:a9:
                    a3:d4:81:3d:8c:d8:24:95:99:d0:0b:14:88:d1:4a:
                    31:5f:41:ea:ae:7e:d0:27:9b:04:ba:db:41:c8:3d:
                    65:84:ad:97:5c:f4:79:5b:38:42:00:2e:02:75:5c:
                    7c:2e:59:bb:74:f7:b6:a7:63:98:cf:17:f4:96:3a:
                    bb:60:81:c8:29:4b:83:5b:cb:40:13:45:c9:8a:36:
                    c1:d2:41:c4:fa:39:9b:6c:86:5f:5e:0e:7c:53:7c:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:62:59:2B:68:CA:49:AB:F5:F3:EE:3E:DB:C0:2F:21:34:6D:E6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/2738ea83-f8c1-32f5-9df6-3558dbbeaebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:43:50:f9:90:2f:ce:b2:d1:73:93:bc:8f:08:30:77:96:
         97:e3:92:bb:a9:0a:7a:39:c7:e3:1b:09:2b:46:ee:55:c0:6a:
         4f:e4:d7:af:89:40:34:bd:4a:43:98:68:38:b9:89:48:2e:1c:
         7c:12:df:91:99:f8:0e:b8:06:c5:22:e1:36:6c:b8:be:ef:a9:
         a1:fb:d7:dd:08:9b:f2:a2:12:88:97:95:e7:c3:71:a5:b2:d8:
         d8:b7:1f:62:3c:03:96:58:26:fa:ea:40:f3:bc:81:f4:6a:3a:
         ed:6a:d4:e5:41:22:80:4f:7e:48:7a:65:67:e8:75:d6:7a:27:
         1d:d8:8e:15:42:b2:e5:19:ed:00:a0:84:fa:c0:a5:7f:87:e4:
         c5:96:7d:10:09:85:23:f4:f4:9c:94:72:20:8b:18:78:1e:70:
         86:5f:31:0a:ba:28:b2:9c:4c:79:66:66:20:4b:8e:cd:95:07:
         4e:c8:55:6c:cc:c3:9c:69:ef:2e:6a:8b:bb:04:b0:9e:d1:c5:
         b3:85:c4:70:75:0a:7e:1b:ff:00:97:dc:10:d7:60:f7:22:e6:
         5f:bb:1f:f6:97:62:7b:75:a3:cc:d5:3a:fb:24:47:41:4d:ac:
         77:76:c8:37:bb:1c:ba:03:f0:f4:60:6a:ec:0b:16:dc:4d:af:
         ce:ad:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-ams.rpki-client.org