Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cf29682-e100-34d4-985e-616916a79501.roa
File:                     1cf29682-e100-34d4-985e-616916a79501.roa (raw, json)
Hash identifier:          Lp/j6RFmKXnFA9DWZJSli/mFL235MuXHqjlnqAKK29I=
Subject key identifier:   9D:08:19:E3:A3:2C:EC:D0:DA:57:5A:B8:03:CA:B5:18:63:4A:B5:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285842BB9FD665AE4E52932CC20B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cf29682-e100-34d4-985e-616916a79501.roa
Signing time:             Mon 31 Jul 2023 20:23:29 +0000
ROA not before:           Mon 31 Jul 2023 20:23:29 +0000
ROA not after:            Sun 29 Oct 2023 20:23:29 +0000
asID:                     701
IP address blocks:        206.66.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bb:9f:d6:65:ae:4e:52:93:2c:c2:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 31 20:23:29 2023 GMT
            Not After : Oct 29 20:23:29 2023 GMT
        Subject: CN=b19f2051-fb20-4594-a18d-5c728f8bf4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:4a:35:67:1c:a3:c5:7a:78:b8:85:ac:b0:
                    21:70:22:64:1b:a9:07:ff:17:8c:bd:62:43:e5:98:
                    02:62:2b:c8:9b:3b:c1:07:0f:74:eb:0f:14:5c:cd:
                    d2:eb:82:60:fe:e2:28:31:a2:fd:eb:a1:ee:22:0f:
                    c3:0e:76:43:90:3a:3b:a3:bb:bb:e4:80:81:31:10:
                    0b:be:1e:81:b7:51:85:80:87:ef:2a:6c:81:d9:1d:
                    68:88:ef:8e:a0:9f:02:28:60:79:12:d1:b0:b5:8d:
                    82:25:cb:ed:f1:90:87:89:d5:4f:25:21:39:30:f8:
                    73:77:68:e4:dc:16:68:5e:f6:eb:bd:23:ed:b8:ef:
                    22:04:7c:ba:aa:73:00:e0:b9:42:f9:78:04:a3:bb:
                    ff:34:b8:68:35:2c:43:0b:58:94:8c:0e:d6:1e:13:
                    ce:b1:34:e2:4c:13:28:99:99:99:79:d2:82:ca:5f:
                    0a:64:cc:e9:61:ee:5e:b6:fe:b8:4e:4a:15:5e:32:
                    7d:66:54:d1:a0:30:f5:81:46:a7:8d:cf:85:68:77:
                    8d:e5:86:61:63:2b:9b:55:1e:e5:b5:63:83:a4:a2:
                    20:88:d1:39:90:c0:6f:e4:8c:fa:c7:e8:32:7a:e3:
                    45:8b:1f:9c:f2:58:e1:60:94:a0:3d:d7:14:b9:aa:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:08:19:E3:A3:2C:EC:D0:DA:57:5A:B8:03:CA:B5:18:63:4A:B5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cf29682-e100-34d4-985e-616916a79501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.66.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:69:6c:4e:90:80:2a:60:d1:76:d0:a9:b2:d1:2c:ce:a4:17:
         4d:15:01:a4:de:15:9b:43:a1:99:00:27:2c:9e:0b:8c:f8:1f:
         ce:ba:f8:f4:37:f4:50:ca:61:ec:69:e0:ae:ed:9e:5e:99:a1:
         9b:c8:ec:2f:bc:f8:bd:e0:76:33:b3:43:4e:d6:d1:b5:fa:9c:
         db:57:fd:87:cc:5f:e3:e7:45:cf:1c:85:98:b1:7e:8e:0f:2c:
         17:36:63:68:8f:be:08:ae:5f:ba:ae:53:ea:4a:2d:d3:92:7d:
         76:a3:4b:3e:4e:9c:15:c5:18:3a:90:bb:11:e7:44:5e:17:7b:
         79:ce:f7:28:5e:7c:49:ca:d4:be:54:06:fb:9c:65:5b:95:4f:
         2c:0f:67:dc:52:26:15:0a:6b:69:fe:f6:1d:cf:38:78:f2:40:
         87:8d:a6:81:e2:79:db:48:83:da:2e:30:77:92:d5:1e:a2:88:
         9c:ca:c5:cb:be:fa:5d:01:f9:51:c1:48:ba:f6:90:61:c0:8a:
         65:9b:46:fd:06:53:e7:b1:27:6c:8f:0b:1a:b6:71:24:cb:a2:
         21:73:3f:72:a8:83:e5:5a:3c:91:c8:57:44:d2:d0:9c:3f:65:
         87:f4:e8:2a:99:f7:08:d2:be:eb:33:ab:8b:98:6b:70:bc:03:
         d2:59:0f:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK7n9Zlrk5SkyzCCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIzMDczMTIwMjMyOVoXDTIzMTAyOTIwMjMyOVowLzEtMCsGA1UEAxMk
YjE5ZjIwNTEtZmIyMC00NTk0LWExOGQtNWM3MjhmOGJmNGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGVKNWcco8V6eLiFrLAhcCJkG6kH/xeMvWJD
5ZgCYivImzvBBw906w8UXM3S64Jg/uIoMaL966HuIg/DDnZDkDo7o7u75ICBMRAL
vh6Bt1GFgIfvKmyB2R1oiO+OoJ8CKGB5EtGwtY2CJcvt8ZCHidVPJSE5MPhzd2jk
3BZoXvbrvSPtuO8iBHy6qnMA4LlC+XgEo7v/NLhoNSxDC1iUjA7WHhPOsTTiTBMo
mZmZedKCyl8KZMzpYe5etv64TkoVXjJ9ZlTRoDD1gUanjc+FaHeN5YZhYyubVR7l
tWODpKIgiNE5kMBv5Iz6x+gyeuNFix+c8ljhYJSgPdcUuapbaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0IGeOjLOzQ2ldauAPKtRhjSrWGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWNmMjk2ODItZTEwMC0z
NGQ0LTk4NWUtNjE2OTE2YTc5NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVpbE6QgCpg0XbQqbLRLM6kF00VAaTeFZtDoZkAJyyeC4z4H866+PQ3
9FDKYexp4K7tnl6ZoZvI7C+8+L3gdjOzQ07W0bX6nNtX/YfMX+PnRc8chZixfo4P
LBc2Y2iPvgiuX7quU+pKLdOSfXajSz5OnBXFGDqQuxHnRF4Xe3nO9yhefEnK1L5U
BvucZVuVTywPZ9xSJhUKa2n+9h3POHjyQIeNpoHiedtIg9ouMHeS1R6iiJzKxcu+
+l0B+VHBSLr2kGHAimWbRv0GU+exJ2yPCxq2cSTLoiFzP3Kog+VaPJHIV0TS0Jw/
ZYf06CqZ9wjSvuszq4uYa3C8A9JZD+k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:41 2024 by rpki-client on console-fra.rpki-client.org