Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/03902f0f-48e2-3e15-899f-41b9340c9fe6.roa
File:                     03902f0f-48e2-3e15-899f-41b9340c9fe6.roa (raw, json)
Hash identifier:          969jheRASXJOHiieuP/QLBYZmp4+U9NKbwfRLYkg8Wg=
Subject key identifier:   B3:BA:C4:56:A2:6F:86:F3:8A:3B:D5:BD:A2:DA:E6:42:A0:62:2C:B5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D40DD76FE245C59EA2036340
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/03902f0f-48e2-3e15-899f-41b9340c9fe6.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     7861
IP address blocks:        2001:568:800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:0d:d7:6f:e2:45:c5:9e:a2:03:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=ea1dfc8f-39eb-4930-9078-2c6027fbd830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:ad:40:72:57:dc:5b:f1:ff:2f:b4:4d:b7:
                    c0:c9:e6:55:2f:b5:a8:20:25:bb:2b:b5:89:c5:6b:
                    1c:e2:24:54:99:1b:09:84:9e:66:b7:f4:86:32:1e:
                    83:35:6f:cf:c8:c6:39:72:88:c5:b3:5a:28:fe:55:
                    17:2c:7a:e1:b2:0f:3b:e2:e3:cc:a2:7d:df:71:af:
                    7f:7b:bb:30:16:e8:98:89:34:7b:01:75:5a:16:25:
                    d3:03:68:0f:4f:93:22:10:c5:98:e6:f2:eb:0f:82:
                    48:57:ee:be:4a:d6:5e:e4:86:d3:e1:14:f7:9d:25:
                    ce:92:a3:d8:ec:47:b6:97:d3:b8:b5:29:bf:39:27:
                    4b:29:a5:83:4e:0c:ef:e7:14:6e:4e:07:cd:26:37:
                    4e:b8:b3:80:c5:86:80:9c:e6:bd:7e:e5:a1:dc:2d:
                    8b:05:2c:dd:e5:06:f9:da:a9:61:58:1c:54:2c:2b:
                    80:dc:e3:3d:8b:35:82:44:3e:02:48:67:25:02:db:
                    fd:9e:79:7c:10:a9:69:1c:c6:4e:12:ea:03:9a:2b:
                    bd:8a:9d:6f:63:02:e2:4f:9c:4d:6a:fe:9d:6f:e2:
                    07:4b:d2:86:a9:6e:b1:7b:00:24:8c:66:fd:ed:b8:
                    43:a8:0e:4a:f3:79:01:83:2b:17:5d:51:50:fc:70:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:C4:56:A2:6F:86:F3:8A:3B:D5:BD:A2:DA:E6:42:A0:62:2C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/03902f0f-48e2-3e15-899f-41b9340c9fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:be:ad:51:03:d6:aa:1e:0a:d6:eb:55:8d:cc:bc:0a:20:4d:
         c3:d1:7c:e0:c7:e2:f7:42:b2:95:bf:02:17:41:fd:6b:59:b4:
         aa:73:d8:d7:a4:b5:8c:5b:d3:89:29:8d:c8:dd:90:2a:ab:da:
         bd:8d:6f:0c:d5:4f:e7:f6:f1:47:ed:dc:ff:08:4c:91:81:f4:
         6a:39:b4:7e:19:d0:a2:51:77:bc:59:2d:92:4c:1c:b1:f5:f4:
         39:16:b3:78:9a:61:ee:83:a4:ba:06:5a:ac:20:7f:c0:a9:fe:
         58:04:32:30:b9:5a:b2:8f:34:c3:c7:8e:ef:96:62:80:f1:68:
         7f:4d:f6:10:8f:c8:0a:3b:5f:27:6a:b2:9d:fa:0d:58:57:3a:
         f8:c0:02:f7:be:0b:e6:3b:86:c8:9a:39:b4:74:d8:df:ad:7a:
         6c:c0:a1:21:07:c2:19:e9:72:c9:04:d9:cf:61:51:3f:57:34:
         a5:2b:0c:f0:9f:f2:87:a3:dc:89:4e:e1:2d:1c:24:49:83:93:
         70:9c:f1:10:00:86:1d:c5:c8:4b:53:11:31:09:c4:22:f5:1d:
         30:31:a1:a4:af:07:8f:7e:6e:ab:67:2f:17:24:7c:66:7b:7e:
         6a:8b:c2:97:5c:68:20:f5:ba:10:73:e2:c8:bb:99:4b:86:23:
         f0:b6:4e:76
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWDfUDddv4kXFnqIDY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZWExZGZjOGYtMzllYi00OTMwLTkwNzgtMmM2MDI3ZmJkODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7itQHJX3Fvx/y+0TbfAyeZVL7WoICW7K7WJ
xWsc4iRUmRsJhJ5mt/SGMh6DNW/PyMY5cojFs1oo/lUXLHrhsg874uPMon3fca9/
e7swFuiYiTR7AXVaFiXTA2gPT5MiEMWY5vLrD4JIV+6+StZe5IbT4RT3nSXOkqPY
7Ee2l9O4tSm/OSdLKaWDTgzv5xRuTgfNJjdOuLOAxYaAnOa9fuWh3C2LBSzd5Qb5
2qlhWBxULCuA3OM9izWCRD4CSGclAtv9nnl8EKlpHMZOEuoDmiu9ip1vYwLiT5xN
av6db+IHS9KGqW6xewAkjGb97bhDqA5K83kBgysXXVFQ/HBHFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLO6xFaib4bzijvVvaLa5kKgYiy1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDM5MDJmMGYtNDhlMi0z
ZTE1LTg5OWYtNDFiOTM0MGM5ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFaAgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFb6tUQPWqh4K1utVjcy8CiBNw9F84Mfi90Kylb8CF0H9a1m0qnPY
16S1jFvTiSmNyN2QKqvavY1vDNVP5/bxR+3c/whMkYH0ajm0fhnQolF3vFktkkwc
sfX0ORazeJph7oOkugZarCB/wKn+WAQyMLlaso80w8eO75ZigPFof032EI/ICjtf
J2qynfoNWFc6+MAC974L5juGyJo5tHTY3616bMChIQfCGelyyQTZz2FRP1c0pSsM
8J/yh6PciU7hLRwkSYOTcJzxEACGHcXIS1MRMQnEIvUdMDGhpK8Hj35uq2cvFyR8
Znt+aovCl1xoIPW6EHPiyLuZS4Yj8LZOdg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org