Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7241497a-40e3-3362-bd79-fb364195a72f.roa
File:                     7241497a-40e3-3362-bd79-fb364195a72f.roa (raw, json)
Hash identifier:          uYuwmOyPAdWyjUdm/lQkCKyR9YuuoiYZWwPJc/37/8g=
Subject key identifier:   99:92:BD:13:95:A5:5F:A2:C3:5C:CB:72:F0:77:B8:34:23:C3:1E:96
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D70548E65CA9047BB7CA4980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7241497a-40e3-3362-bd79-fb364195a72f.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.81.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:05:48:e6:5c:a9:04:7b:b7:ca:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=1a3b665a-fc3f-423d-a0f9-e23338a6fa3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:2e:f5:c6:9f:63:de:92:fe:59:6c:8f:f9:
                    b7:5d:aa:ac:ed:1c:a9:56:3e:08:fc:45:da:05:0c:
                    8c:f5:6c:71:d7:4c:8b:2c:28:27:50:d6:ff:76:00:
                    48:5f:c2:72:66:87:91:d8:ee:d3:03:c9:88:12:bc:
                    7e:f5:5c:4b:ae:eb:39:88:12:48:93:f7:cf:6e:7a:
                    a3:46:80:c2:5e:83:8d:18:2e:ed:64:a0:fc:68:91:
                    c1:42:a9:8d:74:72:11:fd:e7:92:9f:e3:c3:cc:94:
                    3a:ad:a9:0a:a3:8d:78:87:dd:37:57:35:bd:2a:b9:
                    6b:1a:d9:23:8e:31:a7:b5:b3:90:70:e3:eb:93:09:
                    59:4b:35:80:e4:e4:c3:88:de:ff:b7:3b:ee:f7:9b:
                    5c:7a:61:11:c3:ce:c7:14:bb:d6:bd:3d:6d:c4:75:
                    a3:cd:60:b6:b4:ff:14:43:0d:3c:78:fc:93:0a:ce:
                    a0:86:0c:ce:92:54:44:96:3c:43:9f:29:cc:b5:56:
                    02:4f:88:7c:80:c9:ba:58:de:22:5e:9c:fd:91:eb:
                    15:1a:5f:24:51:c9:cf:0d:46:be:ae:b0:2a:2b:c2:
                    10:a1:c4:18:dd:fa:ce:19:7d:a4:5d:8e:d6:e6:9f:
                    c0:25:fd:67:98:25:7f:7b:e9:48:ec:98:fe:43:07:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:BD:13:95:A5:5F:A2:C3:5C:CB:72:F0:77:B8:34:23:C3:1E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7241497a-40e3-3362-bd79-fb364195a72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.81.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:49:54:91:ac:05:15:de:b9:ec:a4:c8:16:09:13:c6:d3:05:
         9a:b5:54:d2:fb:12:b0:fc:1a:9b:99:05:3b:1c:ae:75:a5:27:
         41:da:1e:46:72:f5:77:ac:8b:db:b8:27:59:60:de:9a:8c:ec:
         91:09:b1:66:5a:56:44:f1:a0:49:aa:c7:47:a0:25:2e:d8:2c:
         88:59:e3:5f:76:47:82:4e:42:45:13:e9:c0:b5:ff:95:3c:37:
         19:8a:49:05:34:e5:e9:53:70:c0:0d:a5:b7:26:0f:16:ce:bb:
         ee:ed:e2:ed:41:55:b6:8e:c0:49:81:6c:4b:04:dd:44:33:46:
         f5:dc:13:db:c5:1d:b5:0d:3e:90:64:bf:bd:b7:3f:64:de:62:
         49:7e:cc:d6:ce:3f:9a:51:00:73:0d:32:c6:f2:22:05:1f:4e:
         1b:87:32:6e:90:63:08:aa:9c:a2:f7:5c:aa:00:93:45:f1:fe:
         9e:43:f3:44:3c:1c:6b:6b:a2:07:bc:7e:57:72:16:73:b8:9d:
         6d:f6:6e:23:e4:70:89:9b:73:92:3b:46:3e:0a:ad:e0:1b:97:
         e5:84:13:c8:c4:fe:fd:58:1e:75:13:3a:da:cc:de:77:b9:54:
         a4:a3:85:a9:58:d0:7c:a0:e0:ab:9b:06:55:5f:44:2c:44:61:
         40:6d:00:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfXBUjmXKkEe7fKSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MWEzYjY2NWEtZmMzZi00MjNkLWEwZjktZTIzMzM4YTZmYTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivYu9cafY96S/llsj/m3Xaqs7RypVj4I/EXa
BQyM9Wxx10yLLCgnUNb/dgBIX8JyZoeR2O7TA8mIErx+9VxLrus5iBJIk/fPbnqj
RoDCXoONGC7tZKD8aJHBQqmNdHIR/eeSn+PDzJQ6rakKo414h903VzW9KrlrGtkj
jjGntbOQcOPrkwlZSzWA5OTDiN7/tzvu95tcemERw87HFLvWvT1txHWjzWC2tP8U
Qw08ePyTCs6ghgzOklREljxDnynMtVYCT4h8gMm6WN4iXpz9kesVGl8kUcnPDUa+
rrAqK8IQocQY3frOGX2kXY7W5p/AJf1nmCV/e+lI7Jj+QwcwmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmSvROVpV+iw1zLcvB3uDQjwx6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzI0MTQ5N2EtNDBlMy0z
MzYyLWJkNzktZmIzNjQxOTVhNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1GEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItJVJGsBRXeueykyBYJE8bTBZq1VNL7ErD8GpuZBTscrnWlJ0HaHkZy
9Xesi9u4J1lg3pqM7JEJsWZaVkTxoEmqx0egJS7YLIhZ4192R4JOQkUT6cC1/5U8
NxmKSQU05elTcMANpbcmDxbOu+7t4u1BVbaOwEmBbEsE3UQzRvXcE9vFHbUNPpBk
v723P2TeYkl+zNbOP5pRAHMNMsbyIgUfThuHMm6QYwiqnKL3XKoAk0Xx/p5D80Q8
HGtroge8fldyFnO4nW32biPkcImbc5I7Rj4KreAbl+WEE8jE/v1YHnUTOtrM3ne5
VKSjhalY0Hyg4KubBlVfRCxEYUBtANU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:03 2023 by rpki-client on console-fra.rpki-client.org