Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/c3017098-196d-391b-b553-1fd4fec33fa3.roa
File:                     c3017098-196d-391b-b553-1fd4fec33fa3.roa (raw, json)
Hash identifier:          cIkRSoZUIoX1Lva/EP1Nx0EI7pm29CtIL+SviafF0eo=
Subject key identifier:   BF:08:91:51:F2:DA:AF:27:96:10:2B:A7:98:8C:13:B2:AD:F0:CF:9A
Certificate issuer:       /CN=c01f194a-0755-4fc9-a962-43638b10731e
Certificate serial:       010D0C9F4328583D4112D8526B03227856708560
Authority key identifier: 28:3A:6E:A2:1F:D4:4D:8D:1B:BF:A9:96:E1:83:14:1F:DB:BE:DE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/c3017098-196d-391b-b553-1fd4fec33fa3.roa
Signing time:             Tue 01 Mar 2022 05:00:00 +0000
ROA not before:           Tue 01 Mar 2022 05:00:00 +0000
ROA not after:            Sat 01 Apr 2023 04:00:00 +0000
asID:                     7018
IP address blocks:        207.228.10.0/24 maxlen: 24
                          207.228.4.0/24 maxlen: 24
                          207.228.11.0/24 maxlen: 24
                          207.228.12.0/24 maxlen: 24
                          207.228.14.0/24 maxlen: 24
                          207.228.15.0/24 maxlen: 24
                          207.228.16.0/24 maxlen: 24
                          207.228.17.0/24 maxlen: 24
                          207.228.18.0/23 maxlen: 23
                          207.228.20.0/23 maxlen: 23
                          207.228.22.0/23 maxlen: 23
                          207.228.24.0/24 maxlen: 24
                          207.228.25.0/24 maxlen: 24
                          207.228.26.0/23 maxlen: 23
                          207.228.28.0/23 maxlen: 23
                          207.228.30.0/24 maxlen: 24
                          207.228.32.0/23 maxlen: 23
                          207.228.34.0/24 maxlen: 24
                          207.228.36.0/24 maxlen: 24
                          207.228.38.0/24 maxlen: 24
                          207.228.39.0/24 maxlen: 24
                          207.228.40.0/23 maxlen: 23
                          207.228.43.0/24 maxlen: 24
                          207.228.44.0/22 maxlen: 22
                          207.228.48.0/21 maxlen: 21
                          207.228.56.0/24 maxlen: 24
                          207.228.57.0/24 maxlen: 24
                          207.228.58.0/23 maxlen: 23
                          207.228.60.0/22 maxlen: 22
                          207.228.8.0/23 maxlen: 23
                          207.228.0.0/24 maxlen: 24
                          207.135.196.0/22 maxlen: 22
                          207.135.200.0/21 maxlen: 21
                          207.135.193.0/24 maxlen: 24
                          207.135.194.0/23 maxlen: 23
                          207.228.1.0/24 maxlen: 24
                          207.228.2.0/23 maxlen: 23
                          207.228.6.0/24 maxlen: 24
                          207.228.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:41:12:d8:52:6b:03:22:78:56:70:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01f194a-0755-4fc9-a962-43638b10731e
        Validity
            Not Before: Mar  1 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2023 GMT
        Subject: CN=269a3d25-c387-4575-990c-002755722d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:dd:5c:71:c4:0c:e1:c6:73:0f:9c:0d:fe:
                    bb:b0:ee:05:6c:fe:3e:a0:1d:d9:bf:3b:e5:49:fc:
                    a9:ac:e0:52:16:08:14:33:9d:2a:62:11:1e:09:59:
                    44:24:c5:e2:21:57:23:09:b0:b7:0f:72:0a:27:c2:
                    a6:ce:d5:33:6b:3d:fa:5a:f6:94:5e:74:c2:f9:b5:
                    b6:c7:d6:1c:f4:c6:bb:d8:9b:ab:27:10:0c:0f:64:
                    af:0a:b2:07:25:47:79:e7:17:47:c2:e1:df:00:98:
                    c1:29:84:ee:15:5d:30:e7:cc:77:e2:e3:4a:97:52:
                    0b:f0:bf:0b:b4:68:c5:b3:9c:db:4c:79:ef:d8:63:
                    84:f8:b2:85:75:6e:b9:c1:ef:c4:3d:35:09:3c:17:
                    54:71:6e:60:ef:fb:cd:ae:6c:3b:0c:c4:11:e5:80:
                    5f:10:2d:a9:dc:7a:f8:b1:23:d1:71:e5:4d:75:a0:
                    8e:2f:df:1e:e8:bd:e3:fc:86:0a:3d:75:0b:f9:84:
                    f5:af:e2:47:a9:de:64:46:49:d1:31:a4:c3:02:88:
                    52:21:1b:fc:c8:2c:89:44:db:de:7c:74:63:97:69:
                    00:11:db:05:ca:17:93:7d:40:47:54:ab:06:1a:fe:
                    eb:6a:8e:36:fa:b0:49:74:95:61:3b:e6:49:d8:bf:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:91:51:F2:DA:AF:27:96:10:2B:A7:98:8C:13:B2:AD:F0:CF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/c3017098-196d-391b-b553-1fd4fec33fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/c01f194a-0755-4fc9-a962-43638b10731e.crl

            X509v3 Authority Key Identifier:
                keyid:28:3A:6E:A2:1F:D4:4D:8D:1B:BF:A9:96:E1:83:14:1F:DB:BE:DE:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.193.0-207.135.207.255
                  207.228.0.0-207.228.4.255
                  207.228.6.0-207.228.12.255
                  207.228.14.0-207.228.30.255
                  207.228.32.0-207.228.34.255
                  207.228.36.0/24
                  207.228.38.0-207.228.41.255
                  207.228.43.0-207.228.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:80:78:a6:d6:54:03:0a:38:1d:f1:62:e0:b2:95:32:96:
         2d:94:7f:4f:23:4c:14:aa:f5:36:47:8a:cb:8c:cc:fb:89:ae:
         21:d0:4f:17:37:0b:a5:03:f7:37:f1:28:dc:1c:22:6e:f6:d1:
         86:50:e1:61:dd:c7:18:94:00:15:36:0c:f3:32:e9:fb:b7:08:
         6e:48:35:64:33:4b:af:e3:43:27:33:09:95:d5:d8:bb:2d:53:
         9d:ac:5d:f2:65:54:48:48:09:90:ec:44:15:2a:cc:fc:16:96:
         b2:d0:c4:fb:56:2b:bb:31:5d:03:25:ae:42:c2:c6:62:e6:da:
         60:7e:3d:b3:07:9d:c4:0e:05:03:ed:02:87:82:1e:26:24:58:
         fa:ff:e2:33:9b:ee:49:87:c5:35:5a:3a:9a:3f:68:04:a4:29:
         e8:35:c8:df:6f:29:fa:8a:00:b3:7d:b7:85:52:9f:03:04:9d:
         14:90:b0:95:fa:dd:98:f0:2d:ad:d1:23:d6:46:bb:18:ba:78:
         b0:a8:ff:2f:49:b3:47:83:e4:93:09:b4:b8:ae:4f:e5:5a:81:
         c9:0b:57:28:f5:99:df:04:54:e6:5a:79:0b:8c:6b:ea:af:be:
         72:83:24:60:b6:cd:f4:69:4d:b7:cd:67:3c:01:19:a2:b3:7d:
         70:54:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:45 2023 by rpki-client on console-ams.rpki-client.org