Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/52f920eb-7725-3d48-bc6e-a04e18be71c1.roa
File:                     52f920eb-7725-3d48-bc6e-a04e18be71c1.roa (raw, json)
Hash identifier:          9tPYQdJ4Zv3kBgKRcXA2QrcrzkYjF+gwbueds/hWiMs=
Subject key identifier:   B5:F4:7C:9B:92:A9:08:4C:D5:1D:CD:A6:37:32:01:01:6F:F7:66:F6
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B3489B5AFEF9BDB1501A00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/52f920eb-7725-3d48-bc6e-a04e18be71c1.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b3:48:9b:5a:fe:f9:bd:b1:50:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f84c9fde-cf80-4ead-9d6a-6d7faf6edbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:31:1d:e7:79:83:42:76:9c:0b:d9:35:f9:4e:
                    50:d0:b3:54:3e:4c:05:e0:43:23:84:2f:ce:95:5a:
                    c3:ff:86:38:91:d2:54:9d:78:76:38:5e:a0:a8:bb:
                    75:a4:d8:8b:86:9b:c1:46:31:53:f2:16:87:10:66:
                    69:59:6f:96:f4:71:10:49:6d:88:9f:68:4f:5d:ea:
                    07:02:61:7b:2a:f1:e1:d3:90:88:d7:45:6f:e0:00:
                    65:2c:6e:f8:0a:cb:05:a2:a9:86:65:0e:ad:07:86:
                    e0:c4:0c:47:c8:4a:a9:62:21:ce:d6:9f:ef:35:40:
                    95:6a:27:b0:83:ec:40:b4:d6:a0:e8:f1:3a:c4:7b:
                    5b:20:bf:87:79:8c:91:81:00:b1:10:9f:54:28:7c:
                    bb:eb:21:74:fd:70:fe:37:4a:8e:45:b5:10:3d:92:
                    1c:8a:4b:b4:23:7a:99:27:4a:28:5d:b5:5e:76:81:
                    13:84:3e:1d:36:94:b9:06:be:16:86:5e:f0:37:a0:
                    f3:9c:64:b1:7b:d0:d4:95:71:0d:df:aa:fa:1d:4f:
                    e1:6f:45:e2:dd:91:5a:ae:50:e2:af:ab:ae:f2:33:
                    54:4b:6e:dc:90:38:2f:a0:a3:00:31:72:6d:31:79:
                    28:5f:95:fd:04:3e:6b:47:6c:06:b7:3c:98:f4:59:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:7C:9B:92:A9:08:4C:D5:1D:CD:A6:37:32:01:01:6F:F7:66:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/52f920eb-7725-3d48-bc6e-a04e18be71c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:55:96:ec:d4:03:49:08:62:d6:c1:1b:69:c9:10:55:bf:d6:
         c8:2e:46:84:36:eb:5f:0f:57:0d:17:0e:f9:88:52:a6:5e:01:
         d1:67:9e:a6:08:90:58:ed:8e:7e:bd:65:3b:a6:00:26:4a:ec:
         7c:40:1c:34:9c:cf:8b:fc:ef:5f:58:1c:37:b4:d9:26:51:a0:
         c1:4f:a6:98:98:89:45:e3:7a:33:32:3d:11:19:39:60:31:c5:
         fc:4b:95:3f:b2:c2:08:12:4e:3f:2c:ce:b8:0e:ea:7f:40:fd:
         f9:17:ee:d3:78:48:54:54:e1:e9:50:d9:dd:99:4f:6d:3f:5c:
         be:a8:2c:20:41:bf:cf:13:91:c9:2d:fa:a4:04:f4:2f:0c:c6:
         e5:c0:2a:bd:f9:8c:da:0d:7e:eb:ee:99:ad:38:b8:92:ae:91:
         7c:25:c9:de:3a:99:fa:2f:99:71:f1:d0:b6:7f:96:e2:1f:e0:
         41:64:a9:d1:6c:7d:1d:c7:64:af:81:a6:b1:31:30:86:bf:2e:
         8b:ef:0f:c9:54:44:a6:28:8e:61:c3:4c:e7:65:9a:c8:8e:a1:
         d6:cd:d4:ac:88:95:3e:16:93:68:91:59:de:29:9a:28:6b:21:
         91:24:7d:b8:d2:a6:4f:1c:a7:bd:3b:ad:a9:b4:0f:f4:80:1e:
         58:46:50:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqns0ibWv75vbFQGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Zjg0YzlmZGUtY2Y4MC00ZWFkLTlkNmEtNmQ3ZmFmNmVkYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDEd53mDQnacC9k1+U5Q0LNUPkwF4EMjhC/O
lVrD/4Y4kdJUnXh2OF6gqLt1pNiLhpvBRjFT8haHEGZpWW+W9HEQSW2In2hPXeoH
AmF7KvHh05CI10Vv4ABlLG74CssFoqmGZQ6tB4bgxAxHyEqpYiHO1p/vNUCVaiew
g+xAtNag6PE6xHtbIL+HeYyRgQCxEJ9UKHy76yF0/XD+N0qORbUQPZIciku0I3qZ
J0ooXbVedoEThD4dNpS5Br4Whl7wN6DznGSxe9DUlXEN36r6HU/hb0Xi3ZFarlDi
r6uu8jNUS27ckDgvoKMAMXJtMXkoX5X9BD5rR2wGtzyY9Fk3OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLX0fJuSqQhM1R3NpjcyAQFv92b2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvNTJmOTIwZWItNzcyNS0z
ZDQ4LWJjNmUtYTA0ZTE4YmU3MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQA94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJVluzUA0kIYtbBG2nJEFW/1sguRoQ2618PVw0XDvmIUqZeAdFnnqYI
kFjtjn69ZTumACZK7HxAHDScz4v8719YHDe02SZRoMFPppiYiUXjejMyPREZOWAx
xfxLlT+ywggSTj8szrgO6n9A/fkX7tN4SFRU4elQ2d2ZT20/XL6oLCBBv88Tkckt
+qQE9C8MxuXAKr35jNoNfuvuma04uJKukXwlyd46mfovmXHx0LZ/luIf4EFkqdFs
fR3HZK+BprExMIa/LovvD8lURKYojmHDTOdlmsiOodbN1KyIlT4Wk2iRWd4pmihr
IZEkfbjSpk8cp707ram0D/SAHlhGUJY=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org