Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/bdcdc396-5cfa-335b-98bb-909850d20d8e.roa
File:                     bdcdc396-5cfa-335b-98bb-909850d20d8e.roa (raw, json)
Hash identifier:          vd9xXuOcPwc4l7eVxhBBy4TGpZvkLBqcJwqtaviU7EU=
Subject key identifier:   22:B4:4C:D8:BC:21:5C:54:79:DA:2C:1C:0B:8C:E2:7D:C8:E2:B5:2B
Certificate issuer:       /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial:       010D0C9F4328583D2DFBB054DD42FECF45C86000
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/bdcdc396-5cfa-335b-98bb-909850d20d8e.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Sun 01 Jan 2023 05:00:00 +0000
asID:                     7018
IP address blocks:        166.48.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2d:fb:b0:54:dd:42:fe:cf:45:c8:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan  1 05:00:00 2023 GMT
        Subject: CN=6b6d0906-4a2f-47d3-8e20-72bb2d3d0f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:13:55:da:6a:7a:11:28:f9:12:71:c8:20:
                    bd:b3:68:3f:aa:6c:5c:38:d9:ff:9b:85:f8:40:62:
                    99:da:38:8e:51:6a:79:0e:3d:27:9f:52:52:49:40:
                    e4:b7:30:a2:ce:59:25:2d:cd:9c:85:a1:e1:78:5b:
                    5f:1a:71:be:39:af:f2:1e:03:e7:28:87:90:ba:9a:
                    20:86:55:3e:6d:d2:94:57:d1:72:b7:41:0c:26:66:
                    64:ec:fe:2e:b6:4d:89:ba:c1:35:35:2d:29:28:a0:
                    0e:20:e8:9d:03:47:7f:9e:dd:2f:d9:82:3b:42:1f:
                    97:c6:61:c3:fa:ff:fc:a2:19:af:88:85:43:c2:9c:
                    33:83:82:c2:a0:b5:50:ef:fd:08:0f:2f:d0:20:a6:
                    eb:0a:18:82:f7:81:3c:31:57:fc:43:0a:1d:f0:e4:
                    3a:b9:16:2d:68:18:e9:df:aa:ec:56:75:e1:2a:e8:
                    60:07:86:d9:26:23:55:2b:a6:fb:f7:44:f1:2b:07:
                    03:9d:11:4b:9b:6a:46:1f:2a:7c:0f:0f:d7:00:fd:
                    f3:91:a4:56:10:61:22:5b:6c:27:6f:72:fa:40:57:
                    75:02:8e:de:2b:52:6b:57:8b:db:83:62:69:ec:ec:
                    bb:01:b1:56:a8:40:86:73:b8:ed:98:48:a3:85:b6:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:4C:D8:BC:21:5C:54:79:DA:2C:1C:0B:8C:E2:7D:C8:E2:B5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/bdcdc396-5cfa-335b-98bb-909850d20d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl

            X509v3 Authority Key Identifier:
                keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.48.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:d6:37:10:b7:62:df:f3:75:e1:ba:ac:52:47:58:88:64:
         3a:5b:28:21:36:83:78:e8:6b:10:67:a6:d1:73:a8:3d:aa:61:
         a2:d8:00:44:cc:5f:55:03:12:3d:e3:c8:7b:09:15:99:ec:94:
         0b:f2:66:0d:8b:a2:b0:f8:33:32:82:6c:4e:6b:40:e3:dc:e4:
         db:a1:b0:a8:0f:e2:7c:93:13:07:fb:e5:12:10:e6:88:5d:60:
         3e:0f:32:e9:d6:9b:88:f6:48:0b:0d:fa:63:49:57:26:2c:05:
         0f:48:93:4c:b8:7c:e7:a1:65:e3:fe:eb:b5:f8:73:2c:3f:fa:
         92:a5:86:f9:f0:ce:85:3a:9c:b9:9f:66:3f:1e:df:8e:40:d6:
         85:85:f6:85:d4:44:fa:61:18:13:dc:21:f8:6d:a4:0f:ca:dd:
         fe:38:46:c9:6e:06:b6:1c:9b:b7:29:ab:50:c4:a9:91:8f:41:
         08:02:26:81:62:bf:71:a7:eb:89:45:a5:05:ed:db:30:44:25:
         62:60:ca:70:29:55:a5:e2:e7:6d:01:ea:04:0c:57:5f:94:67:
         64:80:c2:fd:aa:73:f6:be:76:51:73:5d:64:69:cb:3c:b3:c6:
         4a:54:94:b0:e4:41:1f:c6:2d:f8:ea:59:dd:2c:40:59:49:60:
         40:11:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:32 2023 by rpki-client on console-fra.rpki-client.org