Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e488d659-5383-375e-9a4e-f086f4b0fdde.roa
File:                     e488d659-5383-375e-9a4e-f086f4b0fdde.roa (raw, json)
Hash identifier:          HNfghyNFRpW8HnrmTRCrSCni5sUZQJXDAnlYa3s9P8A=
Subject key identifier:   1A:5C:3F:A8:74:B8:D6:E3:60:C2:A1:F5:FA:6C:83:A5:47:8C:96:1A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E65984103D4DFDC971DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e488d659-5383-375e-9a4e-f086f4b0fdde.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     396026
IP address blocks:        184.105.198.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:65:98:41:03:d4:df:dc:97:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=3c39aa25-6d3b-477f-a816-1b2e957b8f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:c5:07:11:07:6b:cf:7a:46:13:79:63:a8:
                    43:52:de:b1:17:31:35:28:bb:d7:34:3b:cd:4b:a5:
                    e8:e4:05:6b:ab:19:89:12:90:c3:01:fb:40:30:fe:
                    23:a5:c1:a5:fd:d4:38:68:6c:f9:03:2b:6e:1a:c5:
                    dc:a5:f9:55:91:ca:86:c8:fb:92:b1:26:4e:45:aa:
                    c1:b7:f1:58:ce:04:db:39:85:4c:0f:33:67:d1:39:
                    83:f4:ae:08:e3:e6:4e:7a:9a:a7:24:09:cf:5e:2e:
                    95:f7:16:ac:44:e6:fc:1a:eb:af:17:e0:ea:7c:44:
                    7a:cb:25:45:64:ed:9a:53:bf:e1:93:07:49:29:18:
                    4a:54:b8:0e:77:c1:8e:2c:28:a0:2d:4d:14:45:fa:
                    c9:8c:2f:b8:81:6f:74:76:6b:a5:0f:08:d6:51:98:
                    e2:63:ff:70:1c:d9:fb:69:f2:95:51:4f:fe:96:3b:
                    7b:b7:cc:56:a6:3b:88:b7:ca:75:75:e3:aa:08:88:
                    cc:17:37:25:28:d2:1f:d7:9d:bb:ea:de:2d:62:0e:
                    0f:d5:c7:6e:56:9a:72:66:bb:67:fb:7c:c7:d2:25:
                    47:42:46:c1:86:d9:8d:89:38:c5:dc:b8:07:5d:0e:
                    ff:32:54:18:b9:f2:3a:3b:79:48:ac:ef:60:00:a4:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:3F:A8:74:B8:D6:E3:60:C2:A1:F5:FA:6C:83:A5:47:8C:96:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e488d659-5383-375e-9a4e-f086f4b0fdde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:41:07:f5:eb:57:c0:1d:b7:62:b7:05:38:f9:93:be:b7:c2:
         60:a7:cf:7a:4f:91:fa:0c:d1:12:0b:5d:0d:f8:ad:63:21:96:
         b8:ec:d2:4e:25:03:cf:03:4a:a0:ba:2a:77:7c:53:6b:ce:42:
         60:bb:24:64:c2:98:11:18:cf:f1:25:bf:36:cd:1d:c7:41:6b:
         b9:d1:be:13:ce:f2:f8:82:60:73:42:27:87:85:d3:fe:31:10:
         62:1c:8d:4e:5e:26:5c:be:a6:bc:c4:b4:98:fc:3f:d5:57:a1:
         3e:72:65:28:3f:53:cd:a4:fe:aa:84:a8:db:2d:dc:61:83:d7:
         ad:fd:04:d4:ac:f1:d9:97:79:7a:d5:b0:59:28:09:97:f0:43:
         bd:cb:89:3a:13:dc:e1:1d:42:61:6b:19:14:e4:bc:f5:fa:d0:
         23:96:b7:3f:ae:b8:67:a0:9c:a4:a6:40:17:90:23:ad:56:6f:
         23:7b:22:6b:50:3a:d1:3c:1d:5b:e5:89:5e:59:34:d1:18:47:
         36:5a:05:65:8c:a9:d0:24:3a:2c:ad:d2:6d:f2:90:89:aa:b4:
         0d:2e:7a:9b:0b:35:69:ab:c0:fd:3e:c5:a3:4d:ab:e2:12:63:
         a7:f3:92:cc:d6:14:2d:e8:d6:bb:1a:a6:4f:1d:1e:01:0d:04:
         90:14:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:49 2023 by rpki-client on console-fra.rpki-client.org