Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/ba20bc7d-cd11-3a49-aa34-cc5bbdd98c4d.roa
File:                     ba20bc7d-cd11-3a49-aa34-cc5bbdd98c4d.roa (raw, json)
Hash identifier:          7IrfwVoXxd+QtirmzxWAVP0CbMjAqorN4bibKQpsCG0=
Subject key identifier:   15:7C:3D:0C:43:DB:F2:99:ED:E5:A9:89:A8:68:20:F5:5C:DB:5F:4F
Certificate issuer:       /CN=4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb
Certificate serial:       010D0C9F43285837772D1E6F18DD6EEFA606B880
Authority key identifier: 81:1A:72:AC:32:9B:AD:AE:C6:C1:42:26:EC:27:76:80:6E:E6:9D:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/ba20bc7d-cd11-3a49-aa34-cc5bbdd98c4d.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Wed 04 Jan 2023 05:00:00 +0000
asID:                     31898
IP address blocks:        69.168.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:77:2d:1e:6f:18:dd:6e:ef:a6:06:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  4 05:00:00 2023 GMT
        Subject: CN=2e0b273c-34ae-4f2a-b7e4-28de0e78d2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:0d:80:89:36:50:b2:1e:08:03:64:44:c7:
                    bf:44:d1:9d:ee:be:d6:4e:be:6a:fa:bf:34:c8:b6:
                    a5:bb:e3:02:30:cc:e0:5b:ef:0f:60:3e:7b:b7:f1:
                    b1:1a:3f:31:a2:7d:f8:27:26:3b:94:3f:87:dd:f5:
                    b7:44:43:79:bf:28:5b:e7:b7:4c:c6:d3:9b:a0:d5:
                    ab:32:5f:bb:6b:99:b8:dd:e9:ef:d2:bf:f0:a6:72:
                    e8:d9:3e:d9:61:09:c0:9c:9d:e2:c5:5a:54:44:00:
                    51:fc:94:2e:85:8a:5e:d5:a7:c4:72:c1:f1:61:aa:
                    ab:4c:cc:d7:4e:18:4a:48:84:f4:1b:3c:e6:c8:4a:
                    ae:1e:3e:00:ed:da:c6:df:3a:be:77:82:51:ce:dd:
                    16:f0:30:1b:4f:00:47:7a:a0:1b:3d:82:8d:67:27:
                    3a:51:1b:2e:0a:43:58:a7:f4:a2:a3:f2:c1:1c:4c:
                    00:49:a3:da:31:ef:a7:ff:92:ef:a0:ea:13:dc:c5:
                    76:f0:de:13:82:0c:e4:d0:99:7c:37:d8:90:b1:44:
                    5e:49:8c:38:69:b4:1d:e8:b7:75:a6:89:89:84:0c:
                    7e:03:f7:94:04:1a:07:93:27:72:83:70:f2:e4:a8:
                    a2:bd:e9:6f:1e:91:83:84:01:02:ea:4d:cf:ff:0c:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:3D:0C:43:DB:F2:99:ED:E5:A9:89:A8:68:20:F5:5C:DB:5F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/ba20bc7d-cd11-3a49-aa34-cc5bbdd98c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.crl

            X509v3 Authority Key Identifier:
                keyid:81:1A:72:AC:32:9B:AD:AE:C6:C1:42:26:EC:27:76:80:6E:E6:9D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a70f73e-7d2b-4de5-b6d6-ed289b5bdabb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:42:84:7f:a8:db:c4:5b:ca:ce:b0:93:a2:85:99:93:4b:a2:
         86:84:08:ed:6a:da:35:78:d8:a3:78:23:e0:eb:cc:a8:e8:7c:
         96:58:5d:c5:5e:10:b4:4f:9d:c0:48:70:db:ea:a7:42:09:e8:
         d3:1c:e9:64:c1:e8:67:39:55:2b:65:99:ca:0e:cf:95:e4:f1:
         1d:f5:16:80:13:09:ba:1d:2e:ff:cd:b2:5b:5b:55:f6:78:9a:
         22:4d:a4:52:7f:16:3c:45:82:80:2a:a2:20:b2:47:24:4d:99:
         2c:9d:df:7b:95:5d:0f:21:3d:5e:b8:b7:50:fa:70:ab:f6:b3:
         ef:9a:7b:1d:6e:a6:10:3f:c8:13:49:28:c8:2a:1e:d8:0b:57:
         78:8b:4c:66:e0:37:3c:83:cb:9b:86:1c:28:92:d3:36:b3:f9:
         d1:5d:e0:c2:d3:4f:52:2c:b3:e2:bc:00:69:08:5f:f7:65:e8:
         53:b1:e7:36:a9:2c:3e:e5:c2:1c:f3:dc:25:72:00:9c:10:04:
         ab:4c:75:fa:ae:23:3b:a0:51:9b:92:3f:6e:99:ec:cf:31:52:
         b2:3d:bf:1f:f0:7a:1d:7e:eb:90:81:92:f4:96:52:27:7c:76:
         3c:61:c5:87:31:71:9b:5d:f9:f1:ea:b2:7a:4c:93:29:d4:ad:
         9b:c7:3d:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDd3LR5vGN1u76YGuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE3MGY3M2UtN2QyYi00ZGU1LWI2ZDYtZWQyODliNWJk
YWJiMB4XDTIwMDkzMDA0MDAwMFoXDTIzMDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MmUwYjI3M2MtMzRhZS00ZjJhLWI3ZTQtMjhkZTBlNzhkMmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAricNgIk2ULIeCANkRMe/RNGd7r7WTr5q+r80
yLalu+MCMMzgW+8PYD57t/GxGj8xon34JyY7lD+H3fW3REN5vyhb57dMxtOboNWr
Ml+7a5m43env0r/wpnLo2T7ZYQnAnJ3ixVpURABR/JQuhYpe1afEcsHxYaqrTMzX
ThhKSIT0GzzmyEquHj4A7drG3zq+d4JRzt0W8DAbTwBHeqAbPYKNZyc6URsuCkNY
p/Sio/LBHEwASaPaMe+n/5LvoOoT3MV28N4Tggzk0Jl8N9iQsUReSYw4abQd6Ld1
pomJhAx+A/eUBBoHkydyg3Dy5KiivelvHpGDhAEC6k3P/ww4FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBV8PQxD2/KZ7eWpiahoIPVc219PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YTcw
ZjczZS03ZDJiLTRkZTUtYjZkNi1lZDI4OWI1YmRhYmIvYmEyMGJjN2QtY2QxMS0z
YTQ5LWFhMzQtY2M1YmJkZDk4YzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGE3MGY3M2UtN2QyYi00ZGU1LWI2
ZDYtZWQyODliNWJkYWJiLzRhNzBmNzNlLTdkMmItNGRlNS1iNmQ2LWVkMjg5YjVi
ZGFiYi5jcmwwHwYDVR0jBBgwFoAUgRpyrDKbra7GwUIm7Cd2gG7mnZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YTcwZjczZS03ZDJiLTRkZTUtYjZkNi1lZDI4
OWI1YmRhYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARahsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVChH+o28Rbys6wk6KFmZNLooaECO1q2jV42KN4I+DrzKjofJZYXcVe
ELRPncBIcNvqp0IJ6NMc6WTB6Gc5VStlmcoOz5Xk8R31FoATCbodLv/NsltbVfZ4
miJNpFJ/FjxFgoAqoiCyRyRNmSyd33uVXQ8hPV64t1D6cKv2s++aex1uphA/yBNJ
KMgqHtgLV3iLTGbgNzyDy5uGHCiS0zaz+dFd4MLTT1Iss+K8AGkIX/dl6FOx5zap
LD7lwhzz3CVyAJwQBKtMdfquIzugUZuSP26Z7M8xUrI9vx/weh1+65CBkvSWUid8
djxhxYcxcZtd+fHqsnpMkynUrZvHPXg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:03 2023 by rpki-client on console-ams.rpki-client.org