Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa
File:                     200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa (raw, json)
Hash identifier:          2LjTLC3m7sxbrrB9LWmsEzTM04vmTIYO0xoESiqirKw=
Subject key identifier:   F3:B5:45:59:5D:CB:73:84:54:73:D2:11:1F:9E:9A:23:0B:F3:C5:E1
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC17204BB055C
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa
Signing time:             Mon 11 May 2020 17:14:24 +0000
ROA not before:           Thu 23 Apr 2020 04:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        204.152.18.0/24 maxlen: 24
                          2602:fd5e:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:04:bb:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 23 04:00:00 2020 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=57f4a8aa-0b32-49eb-b57f-8996f0651270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:72:fc:00:61:be:cd:d2:8d:e0:de:c4:b1:
                    c4:b6:a1:c9:95:cd:ae:b5:f8:9f:9c:3a:4c:a2:ce:
                    71:a3:02:f5:65:ec:64:4e:31:7d:d9:cb:dd:ad:94:
                    84:ac:df:f1:89:e7:fe:e3:c5:75:c0:ab:05:3e:6f:
                    98:fc:29:25:d2:04:24:35:e2:09:05:c3:15:1b:17:
                    54:fe:55:ae:f5:ca:d4:2b:de:a4:1e:07:c0:8c:f5:
                    eb:f7:fc:50:4b:1f:3f:b8:13:c0:0c:56:03:4a:93:
                    3d:b6:cb:06:70:b6:d0:0b:9e:10:e7:8d:a1:be:45:
                    94:1b:fe:34:fa:5b:9b:b5:ff:2e:cc:2a:aa:28:78:
                    83:e0:8b:9f:39:f1:11:f3:ea:d9:94:d4:b7:3b:2b:
                    3e:bc:5b:68:f9:77:db:78:27:99:e2:ce:e0:a4:37:
                    c6:e0:b5:46:f2:6a:c6:31:f5:ab:44:36:16:85:5a:
                    e1:2e:85:27:b8:ab:87:e7:d4:d5:26:17:d5:bc:01:
                    ab:68:c1:fa:38:77:6a:70:b3:6a:f7:8e:46:ef:2e:
                    3b:1c:1f:8b:a5:a9:6a:e2:28:ac:8b:88:d0:fd:52:
                    7b:81:82:4b:c9:79:24:17:f9:70:9a:9d:1b:2c:f6:
                    4c:d5:0a:7d:23:47:5c:04:7f:e8:2f:fd:ce:97:11:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:45:59:5D:CB:73:84:54:73:D2:11:1F:9E:9A:23:0B:F3:C5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/200a3fd7-ceb3-36ac-a9e6-add2e98cc87c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.18.0/24
                IPv6:
                  2602:fd5e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:98:c7:c8:a6:e3:7f:e8:0d:20:59:a5:27:a4:59:9e:8b:
         76:e6:46:70:3b:4f:df:3b:c7:1b:fd:7e:1f:b7:a3:da:09:aa:
         92:e3:99:a0:53:e0:3a:f7:dc:74:6c:c0:1d:9e:7f:58:20:ae:
         54:6d:94:77:02:82:55:c8:5e:59:7d:6f:4a:f9:43:50:11:f2:
         5b:eb:07:d0:95:13:ee:10:75:42:6c:93:b0:50:e5:6c:88:20:
         d3:81:5a:73:06:46:db:6b:ee:d1:f4:2f:68:85:65:8b:77:31:
         d7:9b:4a:61:ef:91:63:0f:50:30:e1:e8:82:fb:d9:e1:7e:c1:
         a3:0a:4a:b5:d5:60:8c:90:2c:42:78:ee:68:5b:e6:af:2f:e6:
         93:f3:06:da:8c:29:ba:41:f8:18:36:13:e6:53:95:91:0a:7a:
         98:a9:73:17:e7:0a:80:0f:25:a6:b8:49:91:73:cb:cd:b8:b3:
         5f:4f:9e:c7:56:43:fb:b6:46:d4:a9:df:cd:75:90:a2:d4:c0:
         26:b3:e8:7b:22:94:48:ee:d4:22:f0:83:b2:26:86:47:ed:54:
         52:c0:15:fa:9c:50:19:19:ee:c4:37:e8:86:85:db:eb:3a:3b:
         07:f7:63:e1:50:b7:65:07:8a:d2:49:e8:18:08:16:8d:9e:38:
         c3:7e:25:eb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcgS7BVwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRlNWVl
YTAeFw0yMDA0MjMwNDAwMDBaFw0yMjA2MzAwNDAwMDBaMC8xLTArBgNVBAMTJDU3
ZjRhOGFhLTBiMzItNDllYi1iNTdmLTg5OTZmMDY1MTI3MDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOHecvwAYb7N0o3g3sSxxLahyZXNrrX4n5w6TKLO
caMC9WXsZE4xfdnL3a2UhKzf8Ynn/uPFdcCrBT5vmPwpJdIEJDXiCQXDFRsXVP5V
rvXK1CvepB4HwIz16/f8UEsfP7gTwAxWA0qTPbbLBnC20AueEOeNob5FlBv+NPpb
m7X/Lswqqih4g+CLnznxEfPq2ZTUtzsrPrxbaPl323gnmeLO4KQ3xuC1RvJqxjH1
q0Q2FoVa4S6FJ7irh+fU1SYX1bwBq2jB+jh3anCzaveORu8uOxwfi6WpauIorIuI
0P1Se4GCS8l5JBf5cJqdGyz2TNUKfSNHXAR/6C/9zpcRVR0CAwEAAaOCA2YwggNi
MB0GA1UdDgQWBBTztUVZXctzhFRz0hEfnpojC/PF4TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3
ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1ZWVhLzIwMGEzZmQ3LWNlYjMtMzZh
Yy1hOWU2LWFkZDJlOThjYzg3Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNi
LWYwZTM4NGRlNWVlYS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVl
ZWEuY3JsMB8GA1UdIwQYMBaAFDV+T5hBJaNyA/XiukFDrkr64LwdMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0
ZGU1ZWVhLmNlcjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMyYEjAPBAIA
AjAJAwcAJgL9XgABMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwCwYJKoZIhvcNAQELA4IBAQAC0JjHyKbjf+gNIFmlJ6RZnot25kZwO0/fO8cb
/X4ft6PaCaqS45mgU+A699x0bMAdnn9YIK5UbZR3AoJVyF5ZfW9K+UNQEfJb6wfQ
lRPuEHVCbJOwUOVsiCDTgVpzBkbba+7R9C9ohWWLdzHXm0ph75FjD1Aw4eiC+9nh
fsGjCkq11WCMkCxCeO5oW+avL+aT8wbajCm6QfgYNhPmU5WRCnqYqXMX5wqADyWm
uEmRc8vNuLNfT57HVkP7tkbUqd/NdZCi1MAms+h7IpRI7tQi8IOyJoZH7VRSwBX6
nFAZGe7EN+iGhdvrOjsH92PhULdlB4rSSegYCBaNnjjDfiXr
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org