Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a79c745d-8805-3210-a5e9-a8f858bed7cd.roa
File:                     a79c745d-8805-3210-a5e9-a8f858bed7cd.roa (raw, json)
Hash identifier:          0xkxIUtN6h3NVJkrU8i0pimMwMsmJauXxAG+SOqe/1Q=
Subject key identifier:   0A:07:B6:8D:CE:14:4B:1C:98:E7:A6:27:91:A2:51:B3:AC:74:75:FA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285841E42ACACC26FDD1BE331DF220
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a79c745d-8805-3210-a5e9-a8f858bed7cd.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Tue 06 Jun 2023 10:00:27 +0000
asID:                     16509
IP address blocks:        130.137.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:ca:cc:26:fd:d1:be:33:1d:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Jun  6 10:00:27 2023 GMT
        Subject: CN=b542e8be-637a-4a46-8a41-357651abb6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:78:66:b5:e7:ad:f0:15:09:17:3d:7e:f7:
                    da:b7:13:80:44:96:b2:6b:8c:fc:f6:b7:01:24:af:
                    f4:fe:b7:db:67:cf:0a:60:aa:b0:4b:15:bd:c6:27:
                    31:e1:7f:aa:bf:b8:a7:a2:96:92:ee:53:dc:2d:2d:
                    19:44:53:74:71:84:3f:91:cb:c9:71:98:39:ed:e8:
                    e1:5f:9d:19:ff:95:03:c7:0c:06:ca:af:0b:1d:a1:
                    e4:5f:05:13:db:56:4f:e8:92:f7:45:7b:bb:01:a0:
                    62:ae:7b:b3:f6:d1:52:1c:9f:fa:96:b0:15:e2:5d:
                    9e:1c:4b:4f:6a:e4:c8:b4:66:2e:4c:d5:fe:95:3f:
                    4b:7e:f2:f2:64:94:d2:65:44:5c:df:29:d3:c2:ec:
                    8c:b7:be:7e:84:53:1e:0a:ec:f4:33:b3:a7:ef:b8:
                    da:41:f6:5f:7a:a6:d8:fe:cd:0e:92:ad:51:18:f8:
                    d6:79:bf:d5:b3:c0:7f:c0:4a:ad:16:b4:20:20:1f:
                    c1:54:cd:58:0e:54:22:a3:2f:f9:c6:e2:f2:ac:94:
                    ce:b1:c3:e0:d4:ce:b7:a4:ca:a0:01:44:73:20:75:
                    0f:6c:36:2f:78:6a:a3:a6:3b:e1:0c:f5:6d:51:36:
                    32:e4:be:16:63:a6:0b:a8:12:10:df:7d:a8:31:f3:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:07:B6:8D:CE:14:4B:1C:98:E7:A6:27:91:A2:51:B3:AC:74:75:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a79c745d-8805-3210-a5e9-a8f858bed7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:15:98:1f:30:70:f6:d3:87:0f:c5:14:97:d9:79:6b:75:55:
         0c:3f:f2:9d:ec:bc:10:4c:7d:07:83:4b:1a:53:84:04:dc:1d:
         ce:8a:54:c3:c9:d4:7e:5c:f2:18:86:14:ac:ae:5e:9e:89:d3:
         59:db:96:a3:50:24:95:e4:3e:3a:7f:e4:f5:5c:1b:be:79:a9:
         34:86:02:05:80:d0:cb:d4:64:31:b7:ee:ad:47:1a:af:7f:8a:
         0d:80:07:42:5b:41:84:c7:1b:32:1e:31:77:f2:f4:8f:4b:cd:
         ca:16:dd:b5:b3:21:7d:cc:cb:eb:84:10:96:60:96:14:c0:52:
         d7:a1:2b:cb:9a:3b:80:2f:0a:c7:a1:c8:a6:a3:3c:73:40:dd:
         61:6f:2d:a4:08:14:e7:92:77:c1:b2:2f:37:62:c9:3f:f5:06:
         40:3d:33:0e:ff:3a:94:09:c8:77:c9:df:e3:a9:37:55:1b:f8:
         ba:69:59:83:63:b9:44:82:b0:83:b9:13:e7:de:6c:24:45:83:
         e8:29:79:60:7c:6a:de:74:ec:a0:b0:dd:f7:e2:53:9c:ed:4f:
         38:8f:77:21:75:ff:a2:aa:6b:41:50:b0:dd:53:0b:27:be:75:
         b9:dc:2a:a3:e4:f8:8f:f5:82:99:14:e1:9d:3c:79:45:f8:00:
         61:fa:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:45 2023 by rpki-client on console-ams.rpki-client.org