Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa6fa89c-6672-391f-8d85-35ec93d393ef.roa
File:                     fa6fa89c-6672-391f-8d85-35ec93d393ef.roa (raw, json)
Hash identifier:          /qJMgSwOsSugp6Od/s8wsBmBHhIpvCK2vEHuIW21fs0=
Subject key identifier:   7F:30:E3:1A:DB:76:6C:3D:6D:55:CA:64:EC:D9:58:6A:1E:E4:90:A9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583B26914EBA90DB88768FDDFB20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa6fa89c-6672-391f-8d85-35ec93d393ef.roa
Signing time:             Sat 04 Sep 2021 04:00:00 +0000
ROA not before:           Sat 04 Sep 2021 04:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     54466
IP address blocks:        66.160.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:26:91:4e:ba:90:db:88:76:8f:dd:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  4 04:00:00 2021 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=5e242eb6-c732-4c55-ba81-8b494201ecb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:75:1e:34:8b:c3:83:59:f6:ee:1c:80:51:
                    18:3d:1f:21:b4:53:79:e3:68:72:05:fe:cf:74:34:
                    2f:84:38:08:74:73:95:78:6e:2b:db:a2:bd:ee:7b:
                    ab:23:6a:6c:1f:28:ce:75:e3:d1:93:ae:b0:05:ca:
                    59:91:37:c6:26:b9:39:92:13:e4:a9:4f:57:21:5a:
                    f7:00:b0:3e:d2:43:ee:43:64:33:c6:7e:31:8f:0b:
                    8b:3c:46:33:0c:c7:51:fe:91:0a:b6:be:aa:b1:9f:
                    29:2a:f3:30:74:61:4d:39:0d:c8:e0:79:87:6a:ef:
                    e5:e5:90:43:da:cc:5f:40:04:68:12:4e:8e:27:06:
                    6f:bf:b6:ba:35:fa:68:05:ad:c8:12:4b:fd:ec:5a:
                    3c:14:da:8e:2d:57:c5:cc:69:58:ac:94:56:b3:aa:
                    7c:ec:f2:98:d3:6f:2e:cb:93:d2:c2:78:9b:92:86:
                    fc:26:37:2a:1f:35:9f:3a:ae:e3:0f:d5:19:5c:82:
                    22:5d:1f:0f:7e:3b:b1:0f:b8:7f:3c:f8:9d:0a:ce:
                    f0:a2:f2:5a:86:2f:69:34:62:65:9f:b7:e4:f3:53:
                    36:b2:92:a2:45:ee:67:ae:83:7e:35:5f:f4:ff:f1:
                    7a:a6:87:c1:0c:b1:7e:fa:ac:cd:fa:79:2d:55:4a:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:E3:1A:DB:76:6C:3D:6D:55:CA:64:EC:D9:58:6A:1E:E4:90:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa6fa89c-6672-391f-8d85-35ec93d393ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:cd:e2:3e:c5:2d:22:46:50:3e:86:b8:f5:52:69:81:1e:f7:
         b8:c4:0c:88:5e:ae:b4:ec:35:39:38:5b:8e:7c:fd:4d:be:cc:
         0d:7b:17:4d:ef:3a:05:af:1c:03:2f:4b:45:4f:ee:f4:7d:0f:
         6a:39:c0:fe:50:c9:45:63:0f:d4:36:8f:4b:66:ec:65:0f:55:
         2c:ba:74:db:31:2e:c6:32:a6:c0:74:0f:70:2f:58:99:4e:58:
         2d:2a:cf:ff:c5:99:c6:ec:13:65:c5:65:3c:0c:2e:df:0c:ae:
         d9:8a:bb:58:13:db:54:fd:73:74:5d:af:44:80:11:8e:e6:08:
         b5:13:54:54:ff:11:2f:96:73:2d:67:80:83:1d:61:63:13:26:
         e0:a5:ae:d3:de:e8:54:6a:80:ea:8c:90:51:cd:0e:c4:80:f4:
         36:93:33:d1:0e:90:c4:8d:7a:a0:e9:98:f6:69:c1:2e:46:cf:
         63:9e:21:ad:70:83:4b:7e:51:38:f8:d5:6e:13:92:8c:69:a3:
         3e:49:37:10:62:4a:68:db:21:cc:46:85:c9:b4:78:9a:6f:90:
         2a:d3:84:12:e0:28:4b:61:53:1a:7b:6c:d4:96:eb:1b:22:1d:
         bb:1f:3b:2d:77:d4:af:76:3c:5f:f0:8f:54:d1:01:17:b6:6d:
         74:22:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:50 2023 by rpki-client on console-fra.rpki-client.org