Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/6df25c31-abcc-3b90-9d88-5aaed303d85a.roa
File:                     6df25c31-abcc-3b90-9d88-5aaed303d85a.roa (raw, json)
Hash identifier:          hZL0K2WRsqdnH/QT99y16UdeRsC2dCcvtbcSYJibgRA=
Subject key identifier:   8F:0B:9A:E1:74:6E:F7:B0:C4:22:55:0F:5C:3C:45:AF:35:34:5C:86
Certificate issuer:       /CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
Certificate serial:       010D0C9F432858375332028F14C7326C7E8EAE80
Authority key identifier: FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/6df25c31-abcc-3b90-9d88-5aaed303d85a.roa
Signing time:             Fri 18 Sep 2020 04:00:00 +0000
ROA not before:           Fri 18 Sep 2020 04:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     396982
IP address blocks:        149.77.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:53:32:02:8f:14:c7:32:6c:7e:8e:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
        Validity
            Not Before: Sep 18 04:00:00 2020 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=c084deaa-c5ae-456a-9684-a75ee97bd937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:18:3f:bf:ca:67:b3:36:87:49:da:26:97:
                    30:3c:98:97:ca:6c:03:3a:e8:23:ef:90:8a:4a:98:
                    52:38:63:1e:b1:02:ef:9c:71:a1:55:6d:23:80:81:
                    b8:08:0d:b4:3e:2f:17:e0:4e:98:07:ba:00:b6:ac:
                    3f:8e:4b:2c:f1:d0:9c:82:4d:ff:72:c3:a4:6f:8a:
                    e9:5d:79:cd:7d:af:93:ae:c9:a1:47:a7:f9:d8:1f:
                    81:9e:57:c3:89:64:8c:34:14:96:43:bb:58:c0:c0:
                    df:e0:32:95:a1:a7:57:94:d4:2e:93:37:6a:9a:fb:
                    55:8b:f9:fb:02:2d:fb:d8:83:24:c0:4f:e8:6d:69:
                    e4:5d:c9:68:30:23:89:b7:f9:96:8d:ac:80:c4:8e:
                    60:94:2b:86:7a:e9:48:cf:1e:2b:17:43:58:69:56:
                    11:59:6a:54:06:f1:8b:6e:03:80:a3:a2:cc:b4:b7:
                    51:4d:e2:6d:bb:ff:fd:fc:10:de:5f:a5:a0:95:9d:
                    72:63:0f:21:22:c1:7c:65:0f:3c:4b:52:47:7b:e1:
                    7a:06:f9:dc:bb:98:65:73:0e:56:24:df:b4:a0:69:
                    b3:ab:87:15:a3:38:86:87:a2:d6:a1:be:76:d7:a5:
                    1e:3b:88:51:db:5e:8d:d0:e0:81:38:ab:d7:99:41:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0B:9A:E1:74:6E:F7:B0:C4:22:55:0F:5C:3C:45:AF:35:34:5C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/6df25c31-abcc-3b90-9d88-5aaed303d85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.crl

            X509v3 Authority Key Identifier:
                keyid:FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.77.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:b5:6e:99:15:aa:fd:d8:d9:95:e6:53:fb:fb:c8:b0:77:
         89:87:91:85:ab:f7:f9:63:79:17:7a:9c:c3:f7:3a:0e:24:d2:
         6a:6b:73:0f:53:6e:f6:2d:f0:61:50:0a:b4:81:69:b9:39:e8:
         ef:0b:2b:cf:b0:f5:e4:51:88:f2:11:85:76:34:80:ab:cb:94:
         9d:54:b3:8e:ac:e6:23:d7:f7:7d:6e:fb:78:90:01:2b:df:b4:
         69:8a:5b:ed:a3:dd:4b:f5:88:37:2e:33:fa:b6:56:2a:47:88:
         fc:10:57:b9:7b:7b:3b:06:6a:4d:3c:21:61:82:fb:35:e3:c2:
         0f:45:7e:76:e5:f7:73:ae:b9:ca:4a:79:bd:00:a8:c0:62:22:
         cb:01:76:0b:1e:b7:27:e0:bb:f7:ea:3e:12:d2:43:3c:07:f7:
         9b:3c:db:39:7d:7d:3c:08:b9:83:56:9a:76:62:1c:0c:2e:bc:
         68:bc:03:da:ce:ee:86:c9:c0:2b:a7:3b:9c:b7:ba:9a:5b:1d:
         e0:d9:50:b8:12:42:54:fd:69:25:e9:28:2e:f7:d2:dd:ca:a7:
         39:c9:82:60:07:2d:45:47:cb:96:58:15:8e:99:b3:2a:57:30:
         02:e0:65:2f:2b:a6:dc:67:e9:04:be:bd:e8:c3:ef:b9:6c:7b:
         e6:64:e2:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDdTMgKPFMcybH6OroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgzNzdiYTAtZDkyZC00OTY5LWE2NjYtODRjZTRlNjdl
YjI0MB4XDTIwMDkxODA0MDAwMFoXDTIyMDkxODA0MDAwMFowLzEtMCsGA1UEAxMk
YzA4NGRlYWEtYzVhZS00NTZhLTk2ODQtYTc1ZWU5N2JkOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjQYP7/KZ7M2h0naJpcwPJiXymwDOugj75CK
SphSOGMesQLvnHGhVW0jgIG4CA20Pi8X4E6YB7oAtqw/jkss8dCcgk3/csOkb4rp
XXnNfa+TrsmhR6f52B+BnlfDiWSMNBSWQ7tYwMDf4DKVoadXlNQukzdqmvtVi/n7
Ai372IMkwE/obWnkXcloMCOJt/mWjayAxI5glCuGeulIzx4rF0NYaVYRWWpUBvGL
bgOAo6LMtLdRTeJtu//9/BDeX6WglZ1yYw8hIsF8ZQ88S1JHe+F6Bvncu5hlcw5W
JN+0oGmzq4cVoziGh6LWob5216UeO4hR216N0OCBOKvXmUEbmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8LmuF0bvewxCJVD1w8Ra81NFyGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODM3
N2JhMC1kOTJkLTQ5NjktYTY2Ni04NGNlNGU2N2ViMjQvNmRmMjVjMzEtYWJjYy0z
YjkwLTlkODgtNWFhZWQzMDNkODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgzNzdiYTAtZDkyZC00OTY5LWE2
NjYtODRjZTRlNjdlYjI0L2Y4Mzc3YmEwLWQ5MmQtNDk2OS1hNjY2LTg0Y2U0ZTY3
ZWIyNC5jcmwwHwYDVR0jBBgwFoAU/l/AgFh0Db63SqhgLdNx6IUj0RgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODM3N2JhMC1kOTJkLTQ5NjktYTY2Ni04NGNl
NGU2N2ViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlU15MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5rtW6ZFar92NmV5lP7+8iwd4mHkYWr9/ljeRd6nMP3Og4k0mprcw9T
bvYt8GFQCrSBabk56O8LK8+w9eRRiPIRhXY0gKvLlJ1Us46s5iPX931u+3iQASvf
tGmKW+2j3Uv1iDcuM/q2VipHiPwQV7l7ezsGak08IWGC+zXjwg9Ffnbl93OuucpK
eb0AqMBiIssBdgsetyfgu/fqPhLSQzwH95s82zl9fTwIuYNWmnZiHAwuvGi8A9rO
7obJwCunO5y3uppbHeDZULgSQlT9aSXpKC730t3KpznJgmAHLUVHy5ZYFY6ZsypX
MALgZS8rptxn6QS+vejD77lse+Zk4kI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:30 2023 by rpki-client on console-fra.rpki-client.org