Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/27045155-f4dc-3bd2-afc8-7632ee030673.roa
File:                     27045155-f4dc-3bd2-afc8-7632ee030673.roa (raw, json)
Hash identifier:          WEyfGXP96WJKuE7a2l/hgnRdGi6OdCM3wlYx22VReIs=
Subject key identifier:   15:37:A6:EF:5B:FF:0F:47:3B:0F:A3:B7:94:22:6A:EA:82:90:3C:14
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7B427C5305300097266DAC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/27045155-f4dc-3bd2-afc8-7632ee030673.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.39.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b4:27:c5:30:53:00:09:72:66:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=6a07b5c3-87ad-4fa6-a9e8-7f1fb410e353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:dd:d8:ac:7a:fc:09:32:c6:0d:6c:ca:cf:
                    bf:82:77:b3:09:41:2f:19:4e:79:21:9e:e3:cd:71:
                    b1:37:10:2d:32:09:95:b6:15:49:d1:c0:74:be:73:
                    67:f5:9f:36:11:44:f4:c2:96:6f:d8:38:78:35:e6:
                    a2:9f:7c:09:84:cb:bc:57:35:a6:01:45:49:cc:7a:
                    6d:bf:bb:2a:21:28:e6:c4:3b:c8:e8:ae:00:bf:ca:
                    bb:c7:07:40:27:6f:a0:b2:25:9d:c5:93:dd:11:d0:
                    52:1a:aa:8a:be:a6:11:23:0c:9c:ea:0b:96:8a:a4:
                    51:d3:1f:44:1b:b3:5d:e7:b9:55:cb:73:37:88:0c:
                    5e:ed:99:63:c3:10:bd:99:2a:72:1e:15:cf:92:10:
                    28:35:24:b0:20:53:25:4a:a3:47:f9:e7:c8:ae:d0:
                    20:0a:7c:14:f8:0a:86:93:2e:42:be:9a:1b:6d:fb:
                    2c:d9:2d:d0:99:24:52:06:44:ab:29:9e:5e:56:d3:
                    98:16:85:5c:91:99:2f:63:59:2f:ad:82:46:f4:66:
                    be:11:13:9b:be:b6:f5:99:3f:ff:fa:c3:de:37:82:
                    c0:3c:8f:fb:1e:c2:d3:63:fa:2c:3e:ba:09:5e:84:
                    05:26:a5:1f:7f:ea:98:40:4e:d5:68:22:4e:8b:f2:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:37:A6:EF:5B:FF:0F:47:3B:0F:A3:B7:94:22:6A:EA:82:90:3C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/27045155-f4dc-3bd2-afc8-7632ee030673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:07:f7:5d:69:41:f0:0c:b1:a5:62:86:2e:19:11:85:6c:
         a9:87:e7:6f:c5:82:ae:47:ff:1f:39:9f:c4:4e:95:a0:6f:7a:
         b2:de:17:59:c0:a3:a9:37:c6:59:54:12:9e:41:68:6f:c4:f2:
         bd:77:5b:00:78:8e:30:2a:9d:ad:ed:dc:10:b8:73:4e:76:6e:
         82:c5:4d:4d:fb:8b:9e:27:f5:92:d1:50:4c:d8:97:a3:8d:4f:
         78:b9:53:bc:89:43:12:9a:9f:c4:5c:a2:a4:eb:ce:d7:73:06:
         1c:02:4b:a9:77:d1:48:38:1e:df:50:81:48:67:bc:3f:8a:2a:
         7e:80:db:74:e7:92:70:b1:a2:52:fa:aa:5b:0a:af:46:b2:c8:
         57:93:3f:e9:d9:85:a7:e6:a8:2a:39:70:a2:28:0b:b0:b3:9d:
         93:4c:45:da:a3:6a:24:aa:a6:8f:e7:00:05:cc:c8:e9:66:0b:
         db:d8:49:c2:ed:9c:6e:37:e0:60:df:9f:45:38:fa:a3:24:42:
         a2:6f:65:56:5d:6c:38:bb:2b:59:23:49:2e:4d:f5:5f:e2:57:
         d0:36:c3:dc:79:e0:9d:c8:34:ff:b3:45:7c:ed:5d:89:0a:2a:
         21:9a:0c:0c:85:c9:b4:a2:b6:56:9f:04:51:b4:1f:a6:91:3d:
         83:6f:55:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntCfFMFMACXJm2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmEwN2I1YzMtODdhZC00ZmE2LWE5ZTgtN2YxZmI0MTBlMzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZTd2Kx6/Akyxg1sys+/gnezCUEvGU55IZ7j
zXGxNxAtMgmVthVJ0cB0vnNn9Z82EUT0wpZv2Dh4Neain3wJhMu8VzWmAUVJzHpt
v7sqISjmxDvI6K4Av8q7xwdAJ2+gsiWdxZPdEdBSGqqKvqYRIwyc6guWiqRR0x9E
G7Nd57lVy3M3iAxe7ZljwxC9mSpyHhXPkhAoNSSwIFMlSqNH+efIrtAgCnwU+AqG
ky5Cvpobbfss2S3QmSRSBkSrKZ5eVtOYFoVckZkvY1kvrYJG9Ga+ERObvrb1mT//
+sPeN4LAPI/7HsLTY/osProJXoQFJqUff+qYQE7VaCJOi/KvwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBU3pu9b/w9HOw+jt5QiauqCkDwUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjcwNDUxNTUtZjRkYy0z
YmQyLWFmYzgtNzYzMmVlMDMwNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcInMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3VB/ddaUHwDLGlYoYuGRGFbKmH52/Fgq5H/x85n8ROlaBverLeF1nA
o6k3xllUEp5BaG/E8r13WwB4jjAqna3t3BC4c052boLFTU37i54n9ZLRUEzYl6ON
T3i5U7yJQxKan8RcoqTrztdzBhwCS6l30Ug4Ht9QgUhnvD+KKn6A23TnknCxolL6
qlsKr0ayyFeTP+nZhafmqCo5cKIoC7CznZNMRdqjaiSqpo/nAAXMyOlmC9vYScLt
nG434GDfn0U4+qMkQqJvZVZdbDi7K1kjSS5N9V/iV9A2w9x54J3INP+zRXztXYkK
KiGaDAyFybSitlafBFG0H6aRPYNvVWg=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org