Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4d7e875-94e6-3caa-8b1e-ee77e2258892.roa
File:                     d4d7e875-94e6-3caa-8b1e-ee77e2258892.roa (raw, json)
Hash identifier:          Fpv8U/9UpxGdQ7HA/TnCbtX+BVvK+K/i7MN5cB2rVek=
Subject key identifier:   D7:91:E8:83:C0:9A:57:89:6D:38:5F:13:BE:EA:8B:56:F8:C7:9A:91
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583825C8A54BD5B984A753A6B280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4d7e875-94e6-3caa-8b1e-ee77e2258892.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     62579
IP address blocks:        108.165.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:25:c8:a5:4b:d5:b9:84:a7:53:a6:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=9f92a922-d87d-46aa-8513-20de175ef8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:3e:af:9b:bb:bf:0f:a1:0e:ce:37:31:9d:
                    f0:0c:b2:92:c0:11:ab:c5:e1:fd:a3:b3:d9:db:1d:
                    7f:5f:85:91:b2:3b:e9:a0:ed:45:db:44:e9:69:e1:
                    b4:32:23:f7:a8:2e:fa:f6:57:64:48:2f:88:bc:6b:
                    29:83:f6:fc:d1:c8:a6:18:ce:1f:9d:82:08:aa:76:
                    25:68:65:05:86:c4:fc:6f:5f:69:7a:2e:6f:37:8c:
                    25:31:0b:ae:bd:13:ae:9b:4b:3f:ac:7a:9c:fb:37:
                    40:91:63:2e:ec:c4:e3:79:82:52:e1:ad:c5:21:9f:
                    2f:77:a3:a2:0f:0a:ae:6e:3d:dd:56:2a:4d:79:c3:
                    5b:3c:6b:65:f4:9d:9b:fb:d9:60:4d:3e:fc:ee:a1:
                    bb:4b:9f:1f:27:c4:80:7f:d5:62:86:d9:9e:c2:9c:
                    5c:86:72:8d:4e:f8:a7:86:72:09:77:15:52:d1:46:
                    9d:60:fa:22:b4:d8:0c:29:8a:46:76:72:85:a4:87:
                    6e:e6:4f:f9:b3:84:54:a7:9a:6c:61:14:61:ed:f5:
                    07:ba:15:64:a4:5a:5b:73:e3:a2:9f:be:3d:f8:99:
                    86:3e:e2:57:f3:61:5b:96:63:4a:e5:46:ab:ba:23:
                    99:42:3b:99:d7:21:d4:f0:65:4f:3a:0e:09:e8:c6:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:E8:83:C0:9A:57:89:6D:38:5F:13:BE:EA:8B:56:F8:C7:9A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4d7e875-94e6-3caa-8b1e-ee77e2258892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a2:00:30:a2:e1:e1:0f:dc:40:61:af:0a:0c:55:03:d8:cc:
         f3:8e:9b:24:db:b6:75:65:ae:c1:4d:87:87:a1:0a:1f:ff:7c:
         6f:c8:aa:8a:50:a5:96:f1:9e:ab:59:3e:33:50:99:b9:51:48:
         d5:33:22:5a:bd:7d:c2:90:e7:a4:f9:cb:bb:db:ef:e2:02:aa:
         ca:b5:05:ff:6e:84:e1:9e:4e:42:a0:ef:68:2d:3e:33:37:1a:
         e0:22:47:8d:0b:d3:a8:4b:3a:e4:98:02:46:fa:70:4f:74:8b:
         a6:91:c3:b4:8b:f5:6f:8e:86:d5:4e:12:27:64:d7:fa:8a:77:
         d1:50:c1:c4:76:1f:55:3c:75:d8:f6:18:8a:1a:20:b2:de:2f:
         dd:3d:fe:43:2f:08:00:db:ca:eb:7d:35:25:be:2a:b7:03:b7:
         f8:1d:b7:64:82:d0:08:8e:58:8c:05:8d:7b:2f:c8:59:a5:4b:
         ee:09:69:0d:3b:90:e0:74:8a:8e:5c:ef:31:5a:bc:74:c0:46:
         93:18:bd:f7:63:e7:da:07:be:2f:cd:12:eb:2f:9a:8c:07:0d:
         3e:e7:63:8d:49:5e:ef:52:77:1f:81:b6:e6:5d:ea:ca:b0:ff:
         44:06:6f:49:33:aa:2f:ae:c8:ba:f3:69:41:7a:66:c0:7e:35:
         fa:63:03:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDglyKVL1bmEp1OmsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTA0MDAwMFoXDTIzMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWY5MmE5MjItZDg3ZC00NmFhLTg1MTMtMjBkZTE3NWVmOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqw+r5u7vw+hDs43MZ3wDLKSwBGrxeH9o7PZ
2x1/X4WRsjvpoO1F20TpaeG0MiP3qC769ldkSC+IvGspg/b80cimGM4fnYIIqnYl
aGUFhsT8b19pei5vN4wlMQuuvROum0s/rHqc+zdAkWMu7MTjeYJS4a3FIZ8vd6Oi
Dwqubj3dVipNecNbPGtl9J2b+9lgTT787qG7S58fJ8SAf9VihtmewpxchnKNTvin
hnIJdxVS0UadYPoitNgMKYpGdnKFpIdu5k/5s4RUp5psYRRh7fUHuhVkpFpbc+Oi
n749+JmGPuJX82FblmNK5UaruiOZQjuZ1yHU8GVPOg4J6MZa5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeR6IPAmleJbThfE77qi1b4x5qRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDRkN2U4NzUtOTRlNi0z
Y2FhLThiMWUtZWU3N2UyMjU4ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiiADCi4eEP3EBhrwoMVQPYzPOOmyTbtnVlrsFNh4ehCh//fG/IqopQ
pZbxnqtZPjNQmblRSNUzIlq9fcKQ56T5y7vb7+ICqsq1Bf9uhOGeTkKg72gtPjM3
GuAiR40L06hLOuSYAkb6cE90i6aRw7SL9W+OhtVOEidk1/qKd9FQwcR2H1U8ddj2
GIoaILLeL909/kMvCADbyut9NSW+KrcDt/gdt2SC0AiOWIwFjXsvyFmlS+4JaQ07
kOB0io5c7zFavHTARpMYvfdj59oHvi/NEusvmowHDT7nY41JXu9Sdx+BtuZd6sqw
/0QGb0kzqi+uyLrzaUF6ZsB+NfpjA0g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:10 2023 by rpki-client on console-fra.rpki-client.org