Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63230841-917f-3a91-b9f7-5d9b76bf95bd.roa
File:                     63230841-917f-3a91-b9f7-5d9b76bf95bd.roa (raw, json)
Hash identifier:          mBXKfXd5FQNQWCqzgsG73B+dNC9962a7AR85o0sF4rM=
Subject key identifier:   2B:28:4F:23:B8:3F:5E:38:24:E8:AD:B9:DD:53:A4:20:B6:AC:C5:61
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50EAFFFE8086D6927CEB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63230841-917f-3a91-b9f7-5d9b76bf95bd.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     26077
IP address blocks:        65.19.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:ea:ff:fe:80:86:d6:92:7c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=7db0d723-bc45-457c-b680-7c8a0adc1f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:28:17:32:f6:54:4e:42:28:6a:99:a3:33:
                    1e:60:64:77:f1:0b:90:62:96:47:9c:f4:b5:88:64:
                    65:c2:4c:3c:f1:51:a2:85:39:99:3b:32:33:a4:18:
                    23:45:3a:b9:ca:15:9d:a2:16:d3:61:59:a2:9e:a9:
                    7f:54:e5:b6:53:71:ef:d5:dc:03:5c:cf:0d:94:66:
                    54:0b:94:4b:0a:0d:43:cd:b2:d5:6a:70:4a:76:e5:
                    40:2c:0e:e4:b3:28:67:66:6d:89:a5:e2:2e:6c:3e:
                    07:8e:79:90:d6:89:8e:f8:de:2f:c2:54:52:c0:74:
                    ea:0f:13:b3:ef:ef:e9:ec:db:9f:b3:ef:6d:f0:77:
                    ee:4d:0b:3c:d9:5d:a0:aa:9c:01:36:e9:eb:2f:fa:
                    29:47:0e:00:a5:71:76:b7:cb:ab:32:78:d7:63:9e:
                    c7:56:f1:b6:31:39:5c:fa:0e:bb:c6:2a:b9:89:69:
                    0c:ec:72:ba:bd:8c:e2:9e:55:cf:e0:b8:c1:e5:1a:
                    9a:f9:25:d5:1b:59:cf:55:9d:fa:50:4a:38:10:fc:
                    c2:52:84:ba:8e:03:f7:61:45:cc:84:c1:50:ec:2d:
                    91:93:77:89:22:e8:e5:6d:5a:a0:76:2a:c6:d4:72:
                    b7:44:65:4e:cf:2c:9b:30:dd:44:ba:e0:2a:cb:c4:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:28:4F:23:B8:3F:5E:38:24:E8:AD:B9:DD:53:A4:20:B6:AC:C5:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63230841-917f-3a91-b9f7-5d9b76bf95bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:a4:f5:17:3b:d9:02:ee:5c:98:cf:0c:e1:a9:26:18:47:
         87:90:65:38:20:7a:32:a7:aa:ec:fc:24:80:f2:74:9e:40:41:
         e7:cd:35:e6:39:15:6a:fb:41:5b:d0:67:98:51:f3:0b:fd:ed:
         5f:1d:0e:d5:d9:8d:8a:bf:03:43:c3:55:b3:29:5f:d4:76:12:
         0f:27:fe:21:74:c8:16:52:b2:46:a8:84:db:ca:dc:89:7a:61:
         02:b6:00:23:a3:21:21:48:07:d8:21:94:78:f4:15:31:05:d0:
         52:74:6c:8a:dd:a8:7f:16:ee:fe:cc:ba:29:cd:8d:02:84:0c:
         b7:37:10:55:d1:84:4e:d0:7c:9a:99:7b:69:1e:da:92:7a:85:
         a2:7c:23:0a:64:a5:bd:4e:1c:8f:fe:29:97:f7:1a:f6:99:78:
         ee:60:b2:c6:78:91:79:f5:2e:5f:c2:1b:4a:9b:46:81:5e:64:
         60:95:3a:64:a4:e0:cb:92:0b:89:e8:60:83:c7:a3:ee:83:51:
         3f:b7:6c:52:c3:0b:8c:80:8e:0e:ce:f1:3a:3a:ff:03:ce:ea:
         f2:fc:51:ec:22:f0:74:db:fc:3f:92:e4:c1:99:21:d1:3e:d1:
         0c:84:66:e3:f6:d0:ab:d5:fb:2b:5c:e8:83:ee:e5:23:fd:f7:
         07:bc:be:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUOr//oCG1pJ86wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2RiMGQ3MjMtYmM0NS00NTdjLWI2ODAtN2M4YTBhZGMxZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD8oFzL2VE5CKGqZozMeYGR38QuQYpZHnPS1
iGRlwkw88VGihTmZOzIzpBgjRTq5yhWdohbTYVminql/VOW2U3Hv1dwDXM8NlGZU
C5RLCg1DzbLVanBKduVALA7ksyhnZm2JpeIubD4HjnmQ1omO+N4vwlRSwHTqDxOz
7+/p7Nufs+9t8HfuTQs82V2gqpwBNunrL/opRw4ApXF2t8urMnjXY57HVvG2MTlc
+g67xiq5iWkM7HK6vYzinlXP4LjB5Rqa+SXVG1nPVZ36UEo4EPzCUoS6jgP3YUXM
hMFQ7C2Rk3eJIujlbVqgdirG1HK3RGVOzyybMN1EuuAqy8Qv4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsoTyO4P144JOitud1TpCC2rMVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjMyMzA4NDEtOTE3Zi0z
YTkxLWI5ZjctNWQ5Yjc2YmY5NWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRO6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9ppPUXO9kC7lyYzwzhqSYYR4eQZTggejKnquz8JIDydJ5AQefNNeY5
FWr7QVvQZ5hR8wv97V8dDtXZjYq/A0PDVbMpX9R2Eg8n/iF0yBZSskaohNvK3Il6
YQK2ACOjISFIB9ghlHj0FTEF0FJ0bIrdqH8W7v7MuinNjQKEDLc3EFXRhE7QfJqZ
e2ke2pJ6haJ8Iwpkpb1OHI/+KZf3GvaZeO5gssZ4kXn1Ll/CG0qbRoFeZGCVOmSk
4MuSC4noYIPHo+6DUT+3bFLDC4yAjg7O8To6/wPO6vL8Uewi8HTb/D+S5MGZIdE+
0QyEZuP20KvV+ytc6IPu5SP99we8vuE=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:03:39 2023 by rpki-client on console-ams.rpki-client.org