Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8ebb969-e11c-3067-a5c8-86b66fe44841.roa
File:                     f8ebb969-e11c-3067-a5c8-86b66fe44841.roa (raw, json)
Hash identifier:          OpwfcuDrW+8FtWethIofLhkA7Nwgb4flk0S2/Tk1TY4=
Subject key identifier:   26:7F:C0:2E:92:71:1A:23:2B:F4:1D:4D:1C:1D:DC:22:D7:65:BE:ED
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C2FE61AB82C534011A782ED00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8ebb969-e11c-3067-a5c8-86b66fe44841.roa
Signing time:             Wed 08 Dec 2021 05:00:00 +0000
ROA not before:           Wed 08 Dec 2021 05:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     398576
IP address blocks:        216.66.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:2f:e6:1a:b8:2c:53:40:11:a7:82:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  8 05:00:00 2021 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=95cdd0b6-9a74-4208-ad34-080a4ea9fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:45:f0:a9:9c:55:2b:82:46:00:20:cf:6d:
                    82:4c:01:b2:92:71:aa:99:14:d7:40:d1:98:d5:d8:
                    3c:71:f9:67:25:3d:25:56:45:21:85:1f:16:a7:ac:
                    86:dc:d2:bc:4a:d3:3d:11:0e:41:2a:52:3f:97:01:
                    40:a2:9c:cf:98:4d:0d:6d:24:00:60:b4:90:7c:d9:
                    01:e1:43:c2:9e:4e:c1:73:64:11:8b:63:40:1e:2b:
                    7a:b9:c3:01:c4:55:4c:f3:12:c0:af:ef:b3:41:61:
                    87:d3:d4:55:74:78:4b:b2:fb:df:75:e4:fb:af:89:
                    84:49:a4:39:24:83:e5:bf:39:14:a1:94:03:69:bb:
                    d3:3b:41:d1:4b:2a:43:7d:4e:0b:80:ad:e4:1c:5f:
                    e8:2f:cf:e6:1d:a4:90:ef:53:28:1e:38:f0:05:9c:
                    ec:46:5a:84:ae:9c:67:ca:ff:70:df:45:89:49:d4:
                    d2:24:41:66:ac:6d:b9:45:d6:09:ef:ac:15:a5:63:
                    3a:a7:01:f0:bd:32:90:4d:fc:79:4f:74:04:9b:a1:
                    e2:b7:80:e4:4c:85:17:b2:91:40:4f:01:a5:fc:31:
                    f7:90:11:14:46:38:db:f8:50:c5:fd:b6:31:f2:e4:
                    ef:46:a7:2e:e8:bf:16:90:e4:78:64:eb:4c:39:08:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7F:C0:2E:92:71:1A:23:2B:F4:1D:4D:1C:1D:DC:22:D7:65:BE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8ebb969-e11c-3067-a5c8-86b66fe44841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:d9:dd:a4:b4:c1:33:be:ed:01:db:3c:f6:8e:ff:fb:20:
         c5:26:90:fb:5c:58:83:f8:ed:a2:36:86:2c:cc:b1:b4:2c:a6:
         fe:44:05:5d:31:ae:96:41:35:43:9c:60:f1:92:f4:18:40:ce:
         b3:e6:7f:c4:37:52:61:bd:2a:e5:8a:91:36:05:e1:48:be:81:
         7a:c5:c2:ce:f2:6b:ca:93:0d:a0:72:3b:0c:52:12:35:c1:5b:
         98:98:da:bb:fc:a5:10:a9:0e:72:f7:ec:e1:73:a2:96:11:d7:
         e8:6d:0d:37:8b:1f:e3:13:a8:3e:53:b3:44:11:37:bf:a8:58:
         3f:b0:53:e9:e2:4a:db:1a:e7:74:1c:e8:c1:a9:b9:b3:7d:39:
         d5:c0:56:bf:ed:ad:56:39:46:57:e4:f2:c7:85:3a:88:1e:e9:
         cc:93:5c:3a:f1:ce:1f:9d:1e:93:a9:32:fb:5e:82:33:da:5d:
         1e:0b:9e:92:d2:f6:73:1e:ef:43:1b:cf:0b:91:30:b0:72:79:
         a8:f8:8e:9b:f9:93:f4:fd:b0:2a:67:3d:97:ec:34:b6:33:bc:
         d6:c8:07:6c:45:6b:ca:89:c3:4c:4c:a2:b2:e5:8b:e0:56:ff:
         f5:29:8a:60:04:d1:62:25:dc:41:5f:e6:b1:11:f6:ff:8d:a0:
         31:e3:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:44 2023 by rpki-client on console-ams.rpki-client.org