Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64e94387-663f-35af-b46e-787ef9bfc370.roa
File:                     64e94387-663f-35af-b46e-787ef9bfc370.roa (raw, json)
Hash identifier:          DohsGIY1QajomlgLRcFCQcDNjmIRNkfUatqRXnxTHAs=
Subject key identifier:   09:BD:AC:80:31:86:1F:12:CC:CB:C2:21:70:4E:58:BC:15:27:2D:19
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AD4FC7691452AE00233A34200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64e94387-663f-35af-b46e-787ef9bfc370.roa
Signing time:             Fri 06 Aug 2021 04:00:00 +0000
ROA not before:           Fri 06 Aug 2021 04:00:00 +0000
ROA not after:            Wed 08 Nov 2023 05:00:00 +0000
asID:                     15169
IP address blocks:        142.251.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:d4:fc:76:91:45:2a:e0:02:33:a3:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  6 04:00:00 2021 GMT
            Not After : Nov  8 05:00:00 2023 GMT
        Subject: CN=2c200ed5-5052-4cd0-a749-b7d442845da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ac:d4:f5:16:b3:03:dc:59:27:ac:0f:05:3d:
                    37:be:61:05:8b:93:54:fa:06:85:61:d5:eb:fc:78:
                    f2:e6:9a:08:6f:f2:7e:c9:32:9e:c5:7e:a3:bc:b3:
                    fa:32:f5:47:2a:3c:00:15:70:2f:38:50:e7:58:da:
                    ec:19:e5:6b:09:e6:ea:40:de:a8:59:ef:59:f4:ff:
                    50:ee:0a:9d:0a:57:ed:f4:cf:51:05:73:0f:00:0f:
                    fd:40:11:e3:67:13:5f:de:f7:16:f5:41:e6:16:5a:
                    86:e6:bc:e2:bc:a3:97:7e:f0:8d:23:02:3a:df:09:
                    ad:09:ff:ed:67:34:79:8f:c4:7f:bb:ef:b1:a6:6c:
                    9e:a0:4c:32:80:5e:e5:d3:2e:64:14:30:e9:db:90:
                    70:b8:5a:2f:05:06:4f:dc:32:4b:76:cc:cf:ff:c0:
                    e3:50:f9:6d:b9:91:21:5d:6d:26:f0:71:ec:40:c9:
                    df:60:61:b5:f8:5f:51:66:b2:bb:90:e5:cc:6d:a9:
                    ff:de:c0:30:25:fb:4e:51:bf:a4:ec:24:68:4f:82:
                    f8:38:0f:c5:ac:03:8c:0a:56:9e:5a:62:1b:02:3a:
                    3b:c1:64:39:84:ca:e6:a9:a0:d4:1d:03:7e:15:71:
                    b0:25:1b:6f:ff:dd:f8:8d:06:bc:d4:f1:0e:28:b3:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:AC:80:31:86:1F:12:CC:CB:C2:21:70:4E:58:BC:15:27:2D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64e94387-663f-35af-b46e-787ef9bfc370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:26:00:ed:b1:fc:7c:43:37:0a:78:61:12:8d:8a:1f:c6:e6:
         53:8b:ed:89:95:6a:85:3a:df:c1:57:89:a5:8c:77:8b:3d:8f:
         d6:10:13:98:25:59:23:50:57:cd:26:87:c4:f8:65:4e:d7:9e:
         9c:48:2a:3a:63:bc:59:01:3f:f5:42:c5:53:88:58:90:5e:04:
         3b:93:ee:a2:6b:2f:a4:6b:7c:e7:41:05:73:f6:5a:e9:ca:a9:
         08:cc:5b:60:2c:0a:6c:b0:c5:e3:66:32:e6:c4:0a:b9:a6:35:
         28:39:50:6e:43:16:5d:6d:bb:27:5a:2c:c3:bc:b1:20:7a:cf:
         e5:51:d5:d7:15:27:80:69:df:31:eb:8f:be:d0:05:e4:0a:b4:
         47:41:d2:cf:ac:b5:08:07:70:47:89:10:94:41:34:a7:6d:6f:
         bb:37:ad:c2:94:42:0a:0c:7b:41:fc:70:b9:9b:82:14:0a:32:
         77:64:74:76:4a:14:00:59:47:b4:37:95:2b:d3:ca:d0:fb:0b:
         04:80:c7:79:8e:d2:fb:01:ec:cb:92:bb:ef:e9:d9:13:39:f2:
         45:46:42:7e:fc:cb:7b:70:eb:28:7d:de:a6:69:97:5d:4b:3a:
         bd:73:6e:b9:f2:57:e5:58:0b:a4:9e:66:69:5d:b9:e4:c3:64:
         8d:c0:21:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDrU/HaRRSrgAjOjQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDgwNjA0MDAwMFoXDTIzMTEwODA1MDAwMFowLzEtMCsGA1UEAxMk
MmMyMDBlZDUtNTA1Mi00Y2QwLWE3NDktYjdkNDQyODQ1ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6zU9RazA9xZJ6wPBT03vmEFi5NU+gaFYdXr
/Hjy5poIb/J+yTKexX6jvLP6MvVHKjwAFXAvOFDnWNrsGeVrCebqQN6oWe9Z9P9Q
7gqdClft9M9RBXMPAA/9QBHjZxNf3vcW9UHmFlqG5rzivKOXfvCNIwI63wmtCf/t
ZzR5j8R/u++xpmyeoEwygF7l0y5kFDDp25BwuFovBQZP3DJLdszP/8DjUPltuZEh
XW0m8HHsQMnfYGG1+F9RZrK7kOXMban/3sAwJftOUb+k7CRoT4L4OA/FrAOMClae
WmIbAjo7wWQ5hMrmqaDUHQN+FXGwJRtv/934jQa81PEOKLOvawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAm9rIAxhh8SzMvCIXBOWLwVJy0ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjRlOTQzODctNjYzZi0z
NWFmLWI0NmUtNzg3ZWY5YmZjMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEmAO2x/HxDNwp4YRKNih/G5lOL7YmVaoU638FXiaWMd4s9j9YQE5gl
WSNQV80mh8T4ZU7XnpxIKjpjvFkBP/VCxVOIWJBeBDuT7qJrL6RrfOdBBXP2WunK
qQjMW2AsCmywxeNmMubECrmmNSg5UG5DFl1tuydaLMO8sSB6z+VR1dcVJ4Bp3zHr
j77QBeQKtEdB0s+stQgHcEeJEJRBNKdtb7s3rcKUQgoMe0H8cLmbghQKMndkdHZK
FABZR7Q3lSvTytD7CwSAx3mO0vsB7MuSu+/p2RM58kVGQn78y3tw6yh93qZpl11L
Or1zbrnyV+VYC6SeZmldueTDZI3AIeY=
-----END CERTIFICATE-----
Generated at Wed Nov 8 05:14:35 2023 by rpki-client on console-fra.rpki-client.org