Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/497da8be-d7d2-389e-a178-094a8b144a70.roa
File:                     497da8be-d7d2-389e-a178-094a8b144a70.roa (raw, json)
Hash identifier:          6BnWgzRjJiAkvKO/1jMPCORvG1DBtm902sqZsEQ8hpg=
Subject key identifier:   F7:26:89:A0:00:3B:F8:C7:45:ED:BE:96:26:7F:9E:D6:98:78:93:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50BE6867BDBA2184F1D3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/497da8be-d7d2-389e-a178-094a8b144a70.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     15188
IP address blocks:        184.105.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:be:68:67:bd:ba:21:84:f1:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=874cec09-0bac-4441-bcc7-b87838ead314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:7a:57:d7:7a:8a:d6:59:d8:1f:be:dd:d8:
                    e5:26:19:63:4f:df:a1:85:2d:4a:9d:6f:53:81:60:
                    dc:fd:c6:ad:df:ed:68:58:1c:a3:e2:b2:72:f3:dc:
                    f2:6b:e1:84:b4:19:d7:db:62:d2:aa:ff:e9:f3:8e:
                    75:5b:13:32:76:f5:ec:c0:a1:84:4f:ea:eb:04:38:
                    f1:33:d9:e6:c2:ee:7d:67:e2:a7:8e:05:0a:cc:19:
                    11:52:85:ea:38:85:fe:0c:d2:c7:6f:9f:79:69:c5:
                    48:0f:43:4f:55:9d:c8:9e:25:f5:25:9a:f6:8e:73:
                    b0:8a:82:18:1b:9a:aa:60:2d:1b:e6:08:87:f8:54:
                    0d:7b:75:e4:01:75:69:d1:d8:d8:00:04:a7:1c:62:
                    64:a8:d4:1b:3c:ad:a9:92:98:64:78:61:c9:61:c6:
                    0a:6c:f8:35:61:e7:78:08:e0:9f:a9:3b:31:e3:4e:
                    ad:a3:83:ec:df:31:f3:d4:54:fd:5c:10:98:72:ab:
                    2a:c8:fc:6d:8f:ca:62:65:c8:9a:ab:94:8a:95:98:
                    33:70:95:f3:aa:d3:25:94:5d:78:7c:db:b7:83:40:
                    12:96:47:19:38:5a:b8:47:df:88:a2:66:9b:f6:fc:
                    34:bd:59:31:2a:98:7b:34:db:d6:e5:6b:51:f2:3d:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:26:89:A0:00:3B:F8:C7:45:ED:BE:96:26:7F:9E:D6:98:78:93:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/497da8be-d7d2-389e-a178-094a8b144a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:5d:c4:0e:96:a4:5d:68:e2:c5:4d:c2:52:bf:da:8c:8f:
         1a:22:e5:06:8b:a9:b3:3d:74:e8:08:9c:cb:c4:99:90:a8:12:
         b7:14:db:3e:14:ae:15:5c:af:6c:8b:38:16:64:04:e3:3f:2b:
         6e:f3:87:9b:30:93:8d:99:5c:40:f2:37:70:f3:b3:15:92:58:
         12:40:e7:63:a4:b6:7b:24:04:46:91:91:2f:b1:42:58:f3:aa:
         ca:0c:bf:aa:1c:84:a3:26:1a:90:80:35:64:2c:28:cd:dc:30:
         7f:78:7e:e7:1f:12:86:98:75:4a:14:bc:fa:fc:75:59:33:0d:
         c0:5e:0c:ad:51:31:6b:d0:ed:0b:f7:3b:e1:8b:c5:f0:70:32:
         3f:d3:7a:eb:04:89:01:8a:29:f1:fd:b2:ff:20:a0:bc:5d:52:
         df:a5:c5:62:1f:5d:07:2c:d7:93:a0:f9:f2:77:c3:94:f2:be:
         db:0f:74:fe:ad:2b:04:a9:99:61:7a:b9:7f:9c:87:ca:2a:77:
         67:56:50:07:97:c2:a5:98:38:b7:0b:f9:2a:a6:84:df:10:f2:
         7f:e3:7d:48:a0:3b:aa:d5:bc:2e:3d:4e:70:9e:84:2a:12:ed:
         e1:89:39:a0:8a:33:98:5d:9f:26:85:a6:44:ed:9c:73:b1:57:
         37:e2:af:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUL5oZ726IYTx08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODc0Y2VjMDktMGJhYy00NDQxLWJjYzctYjg3ODM4ZWFkMzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArql6V9d6itZZ2B++3djlJhljT9+hhS1KnW9T
gWDc/cat3+1oWByj4rJy89zya+GEtBnX22LSqv/p8451WxMydvXswKGET+rrBDjx
M9nmwu59Z+KnjgUKzBkRUoXqOIX+DNLHb595acVID0NPVZ3IniX1JZr2jnOwioIY
G5qqYC0b5giH+FQNe3XkAXVp0djYAASnHGJkqNQbPK2pkphkeGHJYcYKbPg1Yed4
COCfqTsx406to4Ps3zHz1FT9XBCYcqsqyPxtj8piZciaq5SKlZgzcJXzqtMllF14
fNu3g0ASlkcZOFq4R9+Iomab9vw0vVkxKph7NNvW5WtR8j0BhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcmiaAAO/jHRe2+liZ/ntaYeJPyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDk3ZGE4YmUtZDdkMi0z
ODllLWExNzgtMDk0YThiMTQ0YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGn8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK3XcQOlqRdaOLFTcJSv9qMjxoi5QaLqbM9dOgInMvEmZCoErcU2z4U
rhVcr2yLOBZkBOM/K27zh5swk42ZXEDyN3DzsxWSWBJA52OktnskBEaRkS+xQljz
qsoMv6ochKMmGpCANWQsKM3cMH94fucfEoaYdUoUvPr8dVkzDcBeDK1RMWvQ7Qv3
O+GLxfBwMj/TeusEiQGKKfH9sv8goLxdUt+lxWIfXQcs15Og+fJ3w5TyvtsPdP6t
KwSpmWF6uX+ch8oqd2dWUAeXwqWYOLcL+SqmhN8Q8n/jfUigO6rVvC49TnCehCoS
7eGJOaCKM5hdnyaFpkTtnHOxVzfirw4=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org