Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4153889d-4e03-3543-aa81-a0d6f9efaddc.roa
File:                     4153889d-4e03-3543-aa81-a0d6f9efaddc.roa (raw, json)
Hash identifier:          BT/Ye4MDEmv3c3k5gC+VweRqOD17KErUCxGve6bcJz0=
Subject key identifier:   F8:F0:14:5D:F5:F4:9A:27:BF:63:5E:A4:2E:14:99:F8:8F:68:46:A9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7BECCD1B972CA6B938966C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4153889d-4e03-3543-aa81-a0d6f9efaddc.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:cc:d1:b9:72:ca:6b:93:89:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d424a307-b29d-4be3-9d92-87109c9946c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:a7:a9:11:b1:11:99:d8:81:d9:00:06:c8:
                    b5:98:5a:33:3b:00:58:b0:b8:12:c1:35:57:d5:23:
                    52:70:1b:6b:ad:29:e4:c6:86:06:8e:f3:5d:e8:10:
                    0d:b4:15:e0:6d:d1:c9:6d:3c:73:0e:f9:a3:60:80:
                    a7:38:3b:6e:a8:4a:f1:f9:eb:90:95:5a:8d:1c:4c:
                    7e:17:c2:e8:6e:0b:00:9f:8e:7e:76:6c:6c:c1:3e:
                    95:7b:1b:ef:8e:f9:b1:96:b6:80:99:66:f4:05:8e:
                    b1:8a:69:6e:60:66:8f:2b:a5:43:76:af:c3:a9:1d:
                    59:bf:e1:53:0e:bf:bd:ec:31:12:ed:70:53:cf:37:
                    a3:8d:ec:eb:d1:5d:b1:c3:e2:10:b0:86:57:8a:f1:
                    33:a5:43:47:26:54:00:a0:7e:60:fd:de:f5:b2:5e:
                    ec:c0:9e:51:4a:4a:07:af:de:b1:2d:69:8a:1e:e0:
                    2d:d6:63:87:fd:59:4a:87:e0:e4:94:95:6d:6b:dc:
                    d5:28:df:ea:00:b2:8e:d1:74:85:b8:7c:6a:52:76:
                    7b:7b:10:e6:4f:15:97:8b:7b:aa:aa:47:9f:84:af:
                    59:c3:da:36:91:a7:df:fc:b7:53:ea:52:cc:41:3b:
                    57:10:35:a7:3c:d8:b3:e9:8e:34:98:fc:60:75:dc:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:14:5D:F5:F4:9A:27:BF:63:5E:A4:2E:14:99:F8:8F:68:46:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4153889d-4e03-3543-aa81-a0d6f9efaddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:da:99:4f:7a:ee:5d:ed:60:11:9e:b9:72:df:78:7d:d3:ed:
         7d:b0:20:10:a0:ce:d1:2a:42:2f:75:89:c7:ed:a4:02:c8:fa:
         9f:0b:6a:d8:42:79:8d:e2:6d:56:ee:a2:d0:fa:5f:aa:f6:ab:
         1b:95:fe:d4:73:ba:4c:21:dc:17:50:da:f4:34:08:ec:7a:4c:
         aa:6e:21:76:a0:b2:96:03:b5:c7:d3:9d:20:0a:c2:43:ca:cc:
         6b:50:a6:9a:65:16:ca:0d:2d:bb:2f:9f:74:48:48:65:ed:4c:
         c2:0d:74:7f:85:07:cf:b6:9b:ff:bc:dd:9a:50:ec:14:00:b5:
         f5:38:84:fc:61:7f:6e:dd:8a:3c:6f:fa:ea:10:ff:6f:1c:25:
         b1:7d:9b:cc:48:0e:59:ff:e7:7d:0a:66:bb:00:fa:3e:57:1b:
         85:86:ac:25:5e:8f:0a:2a:cf:42:98:e9:93:a9:2a:b4:46:83:
         38:c3:3a:ac:9e:fc:7b:f6:55:4b:76:aa:14:7e:09:d2:7f:f1:
         96:22:2d:86:ba:16:4d:aa:c0:ee:04:35:7f:cd:85:f7:a8:9a:
         df:46:3c:ad:a0:73:ed:b9:9c:de:62:0d:f4:f0:a3:ec:a8:eb:
         c8:33:e6:9e:1f:75:14:6b:45:7c:42:06:b8:84:01:76:23:59:
         54:e0:32:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvszRuXLKa5OJZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDQyNGEzMDctYjI5ZC00YmUzLTlkOTItODcxMDljOTk0NmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgenqRGxEZnYgdkABsi1mFozOwBYsLgSwTVX
1SNScBtrrSnkxoYGjvNd6BANtBXgbdHJbTxzDvmjYICnODtuqErx+euQlVqNHEx+
F8LobgsAn45+dmxswT6VexvvjvmxlraAmWb0BY6ximluYGaPK6VDdq/DqR1Zv+FT
Dr+97DES7XBTzzejjezr0V2xw+IQsIZXivEzpUNHJlQAoH5g/d71sl7swJ5RSkoH
r96xLWmKHuAt1mOH/VlKh+DklJVta9zVKN/qALKO0XSFuHxqUnZ7exDmTxWXi3uq
qkefhK9Zw9o2kaff/LdT6lLMQTtXEDWnPNiz6Y40mPxgddzAWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjwFF319Jonv2NepC4UmfiPaEapMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDE1Mzg4OWQtNGUwMy0z
NTQzLWFhODEtYTBkNmY5ZWZhZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnamU967l3tYBGeuXLfeH3T7X2wIBCgztEqQi91icftpALI+p8LathC
eY3ibVbuotD6X6r2qxuV/tRzukwh3BdQ2vQ0COx6TKpuIXagspYDtcfTnSAKwkPK
zGtQppplFsoNLbsvn3RISGXtTMINdH+FB8+2m/+83ZpQ7BQAtfU4hPxhf27dijxv
+uoQ/28cJbF9m8xIDln/530KZrsA+j5XG4WGrCVejwoqz0KY6ZOpKrRGgzjDOqye
/Hv2VUt2qhR+CdJ/8ZYiLYa6Fk2qwO4ENX/Nhfeomt9GPK2gc+25nN5iDfTwo+yo
68gz5p4fdRRrRXxCBriEAXYjWVTgMiE=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org