Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a8ac1d1e-7eef-31cd-891b-8a83af192108.roa
File:                     a8ac1d1e-7eef-31cd-891b-8a83af192108.roa (raw, json)
Hash identifier:          kZJ/05uHKiQIG0zeoAqCOER06LnIF//6NQf7n/dNwRc=
Subject key identifier:   34:D7:B4:6C:75:15:FB:EC:C1:59:9F:57:09:B0:A3:3A:F6:DD:02:E0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB02F932ADA351D8333C380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a8ac1d1e-7eef-31cd-891b-8a83af192108.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     21552
IP address blocks:        206.47.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:2f:93:2a:da:35:1d:83:33:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=7058e7b0-bdfb-4227-a27e-e1ba679f3b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:d4:1b:73:b6:70:72:32:f6:8e:a3:e5:25:
                    a2:57:62:83:ac:e3:73:d0:fe:8d:22:a0:cd:81:77:
                    99:71:6c:0e:25:bb:1d:c7:78:7e:77:03:bb:69:36:
                    a9:12:b4:0b:5f:e4:6f:a1:d4:bc:87:42:ac:d7:38:
                    67:a3:57:8b:95:2f:9a:f0:23:43:cb:c7:e2:2f:ed:
                    b3:91:c1:d1:a5:d8:2c:c1:e7:72:97:12:b2:fb:76:
                    c7:2b:66:81:77:8c:07:bf:6b:8a:3c:b6:eb:ae:5f:
                    97:5d:0b:7b:b2:37:5f:8d:c6:5b:e3:3a:05:6c:f2:
                    ad:a1:d1:a6:a8:9f:80:68:7e:c1:01:74:5a:d2:68:
                    d8:eb:73:80:24:c8:b0:e2:31:76:e9:18:23:cb:2f:
                    50:3e:e8:2e:fc:55:06:38:07:11:34:c5:b9:50:ad:
                    70:03:52:47:6d:58:ce:8c:cf:ce:24:84:5b:46:e2:
                    84:8e:94:5d:3e:61:b7:af:8d:3f:47:e6:12:49:cb:
                    64:86:bb:2a:4b:ff:1e:a6:5b:18:ad:af:75:fa:b9:
                    bd:97:1a:13:65:e6:d7:0c:2b:a5:1d:25:8c:fb:7c:
                    78:a3:53:77:e4:4e:74:5c:76:ce:db:b9:1a:b8:ad:
                    a1:59:73:89:4f:c9:9b:b8:a6:57:fb:af:1b:68:75:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D7:B4:6C:75:15:FB:EC:C1:59:9F:57:09:B0:A3:3A:F6:DD:02:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a8ac1d1e-7eef-31cd-891b-8a83af192108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:59:bd:ed:07:db:ac:5f:87:41:17:a5:67:67:b8:64:69:ac:
         bd:28:56:59:07:76:7f:e3:29:3e:53:89:69:de:e9:31:30:60:
         6c:51:6c:35:71:b4:17:ec:f5:72:0b:8a:25:66:b9:c0:dd:42:
         f3:00:04:b8:e9:f2:b4:a5:a3:1a:8e:c4:68:8d:c3:3e:e8:02:
         e9:bc:75:0a:3a:f8:b3:b8:c4:c1:30:93:4f:43:53:ff:a2:d6:
         7a:27:d1:66:07:31:05:0a:2f:9b:13:09:30:6b:a9:0f:51:42:
         b5:04:c5:59:fe:92:4e:29:c3:20:ad:9d:4a:db:4c:7b:a0:dd:
         82:bf:69:d9:65:21:53:e6:ed:c2:ce:fd:ee:3a:98:a5:54:53:
         14:af:72:11:9c:03:82:a3:1d:d2:a7:37:70:8b:49:9a:5b:07:
         e5:c1:e0:5d:a7:1b:fb:85:d8:a9:b6:4f:3e:5d:4b:89:93:68:
         41:2f:e7:7a:57:5d:87:ab:54:64:21:d8:87:ac:42:66:62:5a:
         9f:4f:d3:ac:55:97:dd:89:c9:15:47:10:b7:36:f4:3e:94:22:
         99:32:6a:90:c6:1b:96:45:2b:20:23:50:70:c5:c1:72:3f:5e:
         93:55:a2:58:8e:eb:ee:00:19:88:13:1f:06:aa:b1:cd:60:f2:
         8d:3f:97:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsC+TKto1HYMzw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
NzA1OGU3YjAtYmRmYi00MjI3LWEyN2UtZTFiYTY3OWYzYjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PvUG3O2cHIy9o6j5SWiV2KDrONz0P6NIqDN
gXeZcWwOJbsdx3h+dwO7aTapErQLX+RvodS8h0Ks1zhno1eLlS+a8CNDy8fiL+2z
kcHRpdgswedylxKy+3bHK2aBd4wHv2uKPLbrrl+XXQt7sjdfjcZb4zoFbPKtodGm
qJ+AaH7BAXRa0mjY63OAJMiw4jF26Rgjyy9QPugu/FUGOAcRNMW5UK1wA1JHbVjO
jM/OJIRbRuKEjpRdPmG3r40/R+YSSctkhrsqS/8eplsYra91+rm9lxoTZebXDCul
HSWM+3x4o1N35E50XHbO27kauK2hWXOJT8mbuKZX+68baHV8iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTXtGx1FfvswVmfVwmwozr23QLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYThhYzFkMWUtN2VlZi0z
MWNkLTg5MWItOGE4M2FmMTkyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi8uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBZve0H26xfh0EXpWdnuGRprL0oVlkHdn/jKT5TiWne6TEwYGxRbDVx
tBfs9XILiiVmucDdQvMABLjp8rSloxqOxGiNwz7oAum8dQo6+LO4xMEwk09DU/+i
1non0WYHMQUKL5sTCTBrqQ9RQrUExVn+kk4pwyCtnUrbTHug3YK/adllIVPm7cLO
/e46mKVUUxSvchGcA4KjHdKnN3CLSZpbB+XB4F2nG/uF2Km2Tz5dS4mTaEEv53pX
XYerVGQh2IesQmZiWp9P06xVl92JyRVHELc29D6UIpkyapDGG5ZFKyAjUHDFwXI/
XpNVoliO6+4AGYgTHwaqsc1g8o0/l6E=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org