Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5fb7d277-a96e-49bb-a04e-8040164fb6fb/2d5a31f6-91ff-3260-b360-92f3ac8d3b42.roa
File:                     2d5a31f6-91ff-3260-b360-92f3ac8d3b42.roa (raw, json)
Hash identifier:          z+XSllwrGEccym5aOS09/qd9N2a44hJl/EyERNzgX/0=
Subject key identifier:   23:24:C5:34:99:05:74:5D:29:C2:DF:BC:43:EB:7F:EF:32:C9:31:9C
Certificate issuer:       /CN=5fb7d277-a96e-49bb-a04e-8040164fb6fb
Certificate serial:       010D0C9F4328576D51CC73C042CFC1712BCA08BD
Authority key identifier: 97:E5:0A:45:4C:8C:9B:E5:65:52:99:E2:16:C2:66:19:49:23:98:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5fb7d277-a96e-49bb-a04e-8040164fb6fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5fb7d277-a96e-49bb-a04e-8040164fb6fb/2d5a31f6-91ff-3260-b360-92f3ac8d3b42.roa
Signing time:             Mon 30 Mar 2020 14:13:13 +0000
ROA not before:           Mon 30 Mar 2020 04:00:00 +0000
ROA not after:            Wed 30 Mar 2022 04:00:00 +0000
asID:                     6939
IP address blocks:        208.80.92.0/24 maxlen: 24
                          208.80.93.0/24 maxlen: 24
                          208.80.94.0/24 maxlen: 24
                          208.80.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:2b:ca:08:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb7d277-a96e-49bb-a04e-8040164fb6fb
        Validity
            Not Before: Mar 30 04:00:00 2020 GMT
            Not After : Mar 30 04:00:00 2022 GMT
        Subject: CN=8d0f2fff-da85-4996-8cc2-7a480eb232b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:02:32:91:6d:b7:a7:38:4c:d0:78:b0:e9:
                    6a:3f:b1:6c:c0:2f:1f:17:6a:5c:15:16:eb:a0:af:
                    f4:42:66:da:c8:ff:ac:76:1b:87:05:21:c6:71:dd:
                    20:99:29:ea:af:1c:05:99:1a:59:25:d0:fb:53:28:
                    0a:81:88:0c:0a:e8:ca:23:fc:a5:09:9e:c9:41:72:
                    9e:89:ae:77:93:e1:8f:63:2a:9a:0e:8c:0a:ae:fa:
                    79:72:40:fd:64:0c:5d:ec:35:5d:5f:86:b5:17:5b:
                    fb:48:24:b2:29:d5:4a:51:4e:57:ae:ca:fe:68:7f:
                    37:fa:d9:48:88:4f:0a:cc:a8:44:b9:e2:6d:d9:a1:
                    23:bd:02:c6:62:8a:1c:cc:39:7f:73:bc:3b:4c:85:
                    2f:61:03:6b:46:35:ea:35:e6:5e:a8:7c:cb:60:13:
                    9b:a3:10:34:87:e1:52:e2:3a:5a:e9:b0:9b:f3:78:
                    fb:2e:53:c3:96:22:74:ef:4d:75:95:64:d7:28:88:
                    56:19:f6:0f:71:b4:61:27:1b:69:14:c8:8a:6d:40:
                    da:7c:4a:cd:46:29:68:f5:0e:33:fd:ed:a6:ef:3b:
                    c7:86:dd:39:c7:09:66:e3:25:cf:cc:23:df:a6:db:
                    08:9a:d0:d5:ce:1f:e0:84:32:45:69:20:e8:f8:de:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:C5:34:99:05:74:5D:29:C2:DF:BC:43:EB:7F:EF:32:C9:31:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5fb7d277-a96e-49bb-a04e-8040164fb6fb/2d5a31f6-91ff-3260-b360-92f3ac8d3b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5fb7d277-a96e-49bb-a04e-8040164fb6fb/5fb7d277-a96e-49bb-a04e-8040164fb6fb.crl

            X509v3 Authority Key Identifier:
                keyid:97:E5:0A:45:4C:8C:9B:E5:65:52:99:E2:16:C2:66:19:49:23:98:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5fb7d277-a96e-49bb-a04e-8040164fb6fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:7a:8e:5e:c1:ec:52:da:1e:00:d3:fd:84:7a:4a:fe:71:79:
         96:3a:a0:27:83:f7:f2:00:bb:cf:4d:a6:22:50:5a:3e:46:64:
         08:76:53:ee:5e:e5:b4:17:43:3e:32:26:37:10:d9:28:5d:b0:
         8f:8c:3c:ef:08:dd:c8:c3:05:e5:26:7d:9c:ef:a4:4b:6f:5e:
         0a:df:8f:9b:0e:98:be:13:96:6f:7d:5e:b0:48:58:a0:51:22:
         40:3b:01:2f:4e:7d:68:74:26:66:f8:37:4f:17:a9:51:27:34:
         55:da:8d:c9:0c:24:1f:0f:d7:01:32:dc:71:20:5b:14:27:ee:
         41:80:7f:e1:aa:c7:e1:82:d8:ae:de:b3:23:28:b7:f3:08:25:
         2f:f6:d3:72:31:65:47:81:8d:96:f9:f8:ff:b4:bd:81:0f:7b:
         1e:36:4f:50:ff:db:d9:fe:58:35:47:ad:d0:14:36:fc:f4:84:
         81:95:69:ae:57:f9:c9:60:a7:56:41:4c:27:a6:4d:a9:7b:af:
         be:71:94:12:8b:e0:d5:8b:eb:ce:eb:7d:3a:96:1c:c9:f2:52:
         85:5c:32:43:19:bc:a8:4d:c6:cb:a7:db:ed:d4:5a:ce:4c:23:
         77:31:ec:c5:14:fc:3c:c2:e3:fe:d1:d5:3e:48:a3:db:9a:23:
         77:5d:de:fe
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcSvKCL0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDVmYjdkMjc3LWE5NmUtNDliYi1hMDRlLTgwNDAxNjRmYjZm
YjAeFw0yMDAzMzAwNDAwMDBaFw0yMjAzMzAwNDAwMDBaMC8xLTArBgNVBAMTJDhk
MGYyZmZmLWRhODUtNDk5Ni04Y2MyLTdhNDgwZWIyMzJiNzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMGhAjKRbbenOEzQeLDpaj+xbMAvHxdqXBUW66Cv
9EJm2sj/rHYbhwUhxnHdIJkp6q8cBZkaWSXQ+1MoCoGIDAroyiP8pQmeyUFynomu
d5Phj2Mqmg6MCq76eXJA/WQMXew1XV+GtRdb+0gksinVSlFOV67K/mh/N/rZSIhP
CsyoRLnibdmhI70CxmKKHMw5f3O8O0yFL2EDa0Y16jXmXqh8y2ATm6MQNIfhUuI6
Wumwm/N4+y5Tw5YidO9NdZVk1yiIVhn2D3G0YScbaRTIim1A2nxKzUYpaPUOM/3t
pu87x4bdOccJZuMlz8wj36bbCJrQ1c4f4IQyRWkg6PjeJ8cCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQjJMU0mQV0XSnC37xD63/vMskxnDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWZiN2Qy
NzctYTk2ZS00OWJiLWEwNGUtODA0MDE2NGZiNmZiLzJkNWEzMWY2LTkxZmYtMzI2
MC1iMzYwLTkyZjNhYzhkM2I0Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzVmYjdkMjc3LWE5NmUtNDliYi1hMDRl
LTgwNDAxNjRmYjZmYi81ZmI3ZDI3Ny1hOTZlLTQ5YmItYTA0ZS04MDQwMTY0ZmI2
ZmIuY3JsMB8GA1UdIwQYMBaAFJflCkVMjJvlZVKZ4hbCZhlJI5hQMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNWZiN2QyNzctYTk2ZS00OWJiLWEwNGUtODA0MDE2
NGZiNmZiLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtBQXDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAsXqOXsHsUtoeANP9hHpK/nF5ljqgJ4P38gC7z02mIlBaPkZkCHZT7l7ltBdD
PjImNxDZKF2wj4w87wjdyMMF5SZ9nO+kS29eCt+Pmw6YvhOWb31esEhYoFEiQDsB
L059aHQmZvg3TxepUSc0VdqNyQwkHw/XATLccSBbFCfuQYB/4arH4YLYrt6zIyi3
8wglL/bTcjFlR4GNlvn4/7S9gQ97HjZPUP/b2f5YNUet0BQ2/PSEgZVprlf5yWCn
VkFMJ6ZNqXuvvnGUEovg1Yvrzut9OpYcyfJShVwyQxm8qE3Gy6fb7dRazkwjdzHs
xRT8PMLj/tHVPkij25ojd13e/g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:28 2023 by rpki-client on console-fra.rpki-client.org