Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b13116c1-15e9-3b08-bb06-3e00e041fb3e.roa
File:                     b13116c1-15e9-3b08-bb06-3e00e041fb3e.roa (raw, json)
Hash identifier:          szt4eJK2Zso5MQ8JvYiZGRvIwHggZVpnh3ruTALN+3k=
Subject key identifier:   36:C1:AA:D5:5C:09:AB:66:CB:EB:3C:07:36:9D:EA:75:27:52:E4:23
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F432858434F83C3A666459BCE479EAA00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b13116c1-15e9-3b08-bb06-3e00e041fb3e.roa
Signing time:             Fri 22 Sep 2023 19:46:33 +0000
ROA not before:           Fri 22 Sep 2023 19:46:33 +0000
ROA not after:            Thu 21 Dec 2023 20:46:33 +0000
asID:                     396971
IP address blocks:        173.242.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4f:83:c3:a6:66:45:9b:ce:47:9e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Sep 22 19:46:33 2023 GMT
            Not After : Dec 21 20:46:33 2023 GMT
        Subject: CN=1439650a-d1f5-494a-857e-95f60b7342df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:56:26:cf:03:0d:35:c4:a2:4f:28:74:55:
                    6a:ee:36:53:f2:01:09:83:dd:a3:1d:e4:b7:f0:a0:
                    90:4c:88:ab:d0:81:32:e2:0c:c6:30:a4:82:43:5e:
                    d2:1f:45:ce:47:03:25:8b:4d:65:f9:7c:bc:9e:d9:
                    d9:82:5e:ee:5d:74:da:54:a9:f8:66:3c:ca:f0:0e:
                    1c:f4:de:87:71:36:ad:b5:e7:29:a2:03:73:82:2c:
                    92:81:b9:7b:77:3e:19:69:cc:9a:2d:2d:04:1a:84:
                    2d:d0:be:c4:df:77:da:10:d4:74:c0:ae:ca:ff:9e:
                    11:5c:42:fb:83:b0:1e:c6:84:25:7f:d6:be:66:7c:
                    4b:26:16:c2:32:05:98:4e:6f:4c:34:d7:95:9f:e6:
                    e0:bc:70:33:0a:b7:1f:a8:69:54:d1:b6:a2:0a:d4:
                    9f:4d:31:87:36:ff:80:25:06:d4:3a:ce:b7:cb:46:
                    09:d4:3b:03:f0:e0:e3:75:7e:1c:64:bd:56:2b:69:
                    08:5d:9c:39:84:b7:23:d1:ff:5b:ed:36:81:14:37:
                    ad:d4:3c:d5:06:b1:ce:63:c5:b1:d4:67:3b:5c:ef:
                    31:3d:fb:46:fd:0f:aa:1a:11:28:69:2b:3b:87:a8:
                    1f:17:06:25:6c:57:0c:a2:1c:c6:bf:27:f6:2b:b3:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:AA:D5:5C:09:AB:66:CB:EB:3C:07:36:9D:EA:75:27:52:E4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b13116c1-15e9-3b08-bb06-3e00e041fb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:9f:8f:58:7d:a4:f0:22:b4:c3:de:1f:0d:7d:9a:a2:3e:
         76:89:91:09:21:23:bb:0e:94:f9:33:35:9c:ae:b2:b1:7f:48:
         38:65:e5:bf:3c:48:fa:06:a1:9a:65:c1:6c:d0:03:b4:98:86:
         ba:b5:b7:9f:58:83:0b:01:f1:23:69:33:8e:25:99:ab:ac:85:
         ff:ac:8c:cc:6c:17:16:5b:e6:c8:4c:20:25:6e:43:3d:f9:ef:
         a6:29:d1:81:e0:03:17:ba:99:05:91:e1:33:34:2d:c6:fa:a5:
         e6:34:a5:d3:38:ec:e3:69:51:24:39:78:2e:ac:70:e6:30:e5:
         72:d8:a3:26:2f:67:56:4e:ab:40:fa:13:01:a6:ef:63:83:49:
         d7:6a:08:26:02:ee:56:45:e2:8f:0e:10:57:e8:b7:92:b4:9d:
         aa:70:c5:02:82:5e:6f:bf:54:58:14:10:08:2d:80:47:ee:69:
         c5:38:b6:ad:8a:33:7e:43:9d:e4:e2:2b:67:08:00:b6:76:79:
         a8:dc:23:3a:85:36:a3:db:ec:8d:bc:ab:52:4c:70:55:ab:ce:
         10:c9:5d:cd:95:6d:8a:fd:66:a9:66:c8:3c:d5:ee:46:67:88:
         97:57:e4:8f:e2:5c:3b:86:c8:f7:d9:2c:49:61:82:1b:bc:ca:
         6b:ad:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:53 2023 by rpki-client on console.sobornost.net