Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/a0338963-c5b3-3bad-a542-f7e3c70b4236.roa
File:                     a0338963-c5b3-3bad-a542-f7e3c70b4236.roa (raw, json)
Hash identifier:          cHsp+7pbNJDni7904ZvAkj+zf4mujezdl5b2xsXR2Hw=
Subject key identifier:   7E:C0:1A:31:FD:D2:DB:9D:5E:8A:46:01:28:B7:07:A3:14:E2:02:8D
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F43285839114BC279F6CD774510775500
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/a0338963-c5b3-3bad-a542-f7e3c70b4236.roa
Signing time:             Wed 24 Feb 2021 05:00:00 +0000
ROA not before:           Wed 24 Feb 2021 05:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     396138
IP address blocks:        205.157.232.0/24 maxlen: 24
                          206.180.2.0/24 maxlen: 24
                          206.180.3.0/24 maxlen: 24
                          206.180.10.0/24 maxlen: 24
                          206.180.11.0/24 maxlen: 24
                          206.180.18.0/24 maxlen: 24
                          206.180.29.0/24 maxlen: 24
                          206.180.30.0/24 maxlen: 24
                          206.180.55.0/24 maxlen: 24
                          206.180.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:11:4b:c2:79:f6:cd:77:45:10:77:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Feb 24 05:00:00 2021 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=cb4e50ce-8aa7-4645-8a75-e0ebf693a96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:fe:03:d6:fa:40:ef:68:c9:c7:3d:95:84:
                    5d:6a:ab:53:83:94:c8:e7:bf:80:c6:f8:6d:a4:0c:
                    ab:a2:02:ba:4f:6b:b4:aa:e4:5c:2c:e7:08:02:c7:
                    d6:e0:5a:ca:ee:21:93:af:32:7e:fd:8e:01:55:72:
                    72:e2:20:e6:ac:42:fc:4d:6a:05:cb:de:dc:7e:45:
                    0d:7a:7d:6f:ea:40:54:3a:fa:f3:44:6a:89:f7:d0:
                    7d:89:73:4e:da:16:62:45:14:6b:1f:cd:31:50:cc:
                    8d:9f:6a:f1:8c:ac:5d:bb:f4:b0:54:96:51:a2:54:
                    31:b8:51:a1:76:d1:08:91:66:68:5d:12:8c:17:4e:
                    89:3c:b0:a2:fc:1d:03:da:43:bb:4c:7a:38:15:b2:
                    91:86:73:f2:ed:42:e2:07:cb:13:e9:69:5c:fb:35:
                    9a:53:2c:9d:87:5c:2b:48:25:b8:1a:d6:f9:e0:db:
                    bf:fd:8c:70:4a:1c:dc:38:e1:9a:0d:91:c3:42:3e:
                    53:19:c4:ca:64:db:1a:9b:ec:b3:26:46:ad:66:b9:
                    d6:66:22:47:03:25:5d:ac:1f:dc:b9:33:ab:3f:94:
                    61:48:ad:8e:f6:eb:e2:58:58:33:5c:ff:88:6c:af:
                    4d:c6:ae:96:74:c3:8b:31:3f:87:c9:1f:0e:c4:07:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:1A:31:FD:D2:DB:9D:5E:8A:46:01:28:B7:07:A3:14:E2:02:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/a0338963-c5b3-3bad-a542-f7e3c70b4236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.232.0/24
                  206.180.2.0/23
                  206.180.10.0/23
                  206.180.18.0/24
                  206.180.29.0-206.180.30.255
                  206.180.55.0-206.180.56.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:3f:c8:31:ff:b4:e7:71:c3:4d:6f:21:50:be:cb:4d:04:
         ac:74:b5:c5:df:d6:12:56:a4:c8:66:f8:aa:da:6c:4d:dc:a9:
         1d:de:03:01:a5:b8:82:3e:ff:a4:b0:13:9b:a1:32:3d:66:5f:
         c8:b3:dd:80:3d:ee:99:f5:82:09:47:1f:6b:4f:64:6f:4b:f2:
         ef:8b:5a:f9:97:1b:18:18:4b:4e:4b:97:c6:c3:a2:57:65:e9:
         50:9d:61:ea:0d:fe:25:2b:a3:91:29:35:41:f8:69:fb:04:50:
         5e:be:2e:cc:85:a5:ee:13:d9:e3:05:75:9e:e0:29:e8:74:9d:
         7c:27:8d:2a:e1:26:55:b3:df:67:7c:e5:e1:be:e3:82:e4:c9:
         b1:8d:b4:b0:cd:f2:95:0c:d7:14:44:22:c4:d3:58:b3:47:b2:
         f5:ad:9e:b3:3b:2e:a7:e4:9f:71:e7:af:ee:bc:73:df:49:1d:
         3a:11:65:fb:71:ab:d8:ff:64:ca:50:72:6a:b8:50:62:fd:e7:
         09:74:f3:5e:85:6d:ab:01:51:84:fa:96:6e:98:f5:98:ba:9a:
         20:47:d7:88:ab:bf:ba:03:7b:69:bd:fe:04:2a:dd:0e:5a:5e:
         2b:b8:b8:46:4f:09:af:0b:dc:eb:8a:a7:d2:c6:6e:84:0f:ab:
         ef:5d:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:52 2023 by rpki-client on console-fra.rpki-client.org